Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D7682EEB5A11EEBB54A7B1775412E6.roa
File: 24D7682EEB5A11EEBB54A7B1775412E6.roa (raw, json)
Hash identifier: wu7mH7e2MF3y3gSMTuimTO6YOIjT/xuJFCoTrJ9+WBc=
Subject key identifier: A7:F9:C1:7D:3E:B9:BE:70:06:31:00:B9:94:16:31:DF:D3:E9:9B:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D7682EEB5A11EEBB54A7B1775412E6.roa
Signing time: Tue 26 Mar 2024 10:18:09 +0000
ROA not before: Tue 26 Mar 2024 10:18:06 +0000
ROA not after: Fri 03 May 2024 10:18:06 +0000
asID: 328608
IP address blocks: 154.197.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42672 (0xa6b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 26 10:18:06 2024 GMT
Not After : May 3 10:18:06 2024 GMT
Subject: CN=6602a0e1-3566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:78:0a:0e:ac:2c:1f:9d:34:96:98:dd:58:
4b:1b:e5:f9:f5:04:ee:af:f4:33:d1:b2:d8:43:71:
56:99:60:76:09:b2:8e:3b:bf:74:84:68:7a:f5:a4:
af:4a:80:89:b1:4d:e2:94:6b:c6:74:29:95:d9:84:
77:fb:9a:ad:f5:b8:98:25:e3:e8:2e:2d:00:2e:73:
87:5a:e7:ea:89:2d:82:76:89:3b:6e:9e:9f:cc:dc:
03:c2:49:9d:be:bb:51:11:fd:f6:eb:5d:57:76:f2:
2d:44:3c:50:26:ce:d6:52:70:65:2e:f1:cd:c2:45:
e4:06:4c:e4:36:6a:64:2a:12:fc:92:7e:ad:83:27:
5a:79:5c:1c:0c:a3:27:65:80:d5:68:9f:ea:c7:ed:
fc:5c:7a:ed:8f:f9:b6:05:60:ad:4d:0a:4d:ae:b3:
d3:7e:91:66:5c:6c:27:39:36:21:44:3a:79:03:47:
05:dc:37:7d:6e:45:07:38:4e:e7:f0:df:08:70:0e:
f1:be:28:29:56:dc:d0:cf:f1:ec:a3:73:e2:00:fb:
22:aa:07:90:bc:5c:6d:41:1d:f8:92:68:20:f0:3b:
f4:8d:4b:8b:55:58:5f:38:29:45:f5:ce:a4:39:ad:
52:d5:47:4f:dd:6e:2d:38:fe:df:a3:34:8b:12:8d:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F9:C1:7D:3E:B9:BE:70:06:31:00:B9:94:16:31:DF:D3:E9:9B:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D7682EEB5A11EEBB54A7B1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.0.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ee:d3:de:1a:96:a3:51:e1:09:a6:d8:bc:ed:d1:1e:da:d1:
63:8c:d3:c0:bb:86:29:ff:ef:2d:dd:50:36:ff:f2:59:94:29:
23:fb:e2:84:4e:30:8c:21:17:73:8a:94:05:08:a9:37:36:f5:
69:55:77:c7:a4:ad:6b:6a:74:9b:01:bc:d9:67:c2:fa:e7:42:
bf:95:dc:00:b0:b5:34:bf:be:d7:4a:a2:ca:7f:5f:bc:41:ec:
9f:49:99:8b:e8:e9:fe:e0:62:28:2d:60:14:df:45:0c:c8:49:
28:34:23:d4:51:cf:06:0f:e4:49:99:82:a1:ba:f9:76:30:94:
74:1f:ce:ff:9f:fa:44:fd:ca:00:aa:1e:00:a9:a7:0c:ad:8b:
a6:ce:0c:80:d5:f7:f4:3b:fe:01:f0:31:92:70:35:c6:30:1c:
99:5e:45:28:5b:71:93:40:42:a4:ad:0b:17:7b:b0:33:81:79:
a5:7a:67:8b:0d:59:63:b3:82:67:46:db:b1:3e:e4:f6:9c:15:
5f:88:19:51:bf:06:33:1d:6d:3b:6d:fa:fd:45:e4:26:e6:d1:
84:aa:a6:01:8e:b1:48:ce:f6:6b:a5:b0:ff:ab:bd:60:17:c2:
bf:16:23:b4:65:a0:85:08:f0:5f:1b:bd:f4:dc:9a:e7:fa:0c:
38:7b:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:24:50 2024 by rpki-client on console-ams.rpki-client.org