Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C8BE76CB10211EEA526EA62775412E6.roa
File: 2C8BE76CB10211EEA526EA62775412E6.roa (raw, json)
Hash identifier: epISPHK79OkAvlibI1HI/8VZpuSKuJ9xSFT3jARGWW8=
Subject key identifier: BE:3D:E5:2A:10:4F:B4:EC:25:99:39:41:06:04:C3:D9:84:39:04:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 749F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C8BE76CB10211EEA526EA62775412E6.roa
Signing time: Fri 12 Jan 2024 04:22:19 +0000
ROA not before: Fri 12 Jan 2024 04:22:16 +0000
ROA not after: Fri 13 Dec 2024 04:22:16 +0000
asID: 140224
IP address blocks: 154.205.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29855 (0x749f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:22:16 2024 GMT
Not After : Dec 13 04:22:16 2024 GMT
Subject: CN=65a0be7b-352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:f7:f5:21:b5:04:91:e7:83:66:d4:d0:bd:
b8:56:93:6b:93:aa:93:a2:a7:85:81:d7:a7:91:84:
81:02:f6:66:6a:d8:84:46:ad:a1:72:c6:24:0c:a2:
9d:ed:af:35:31:35:f3:32:82:25:c3:63:71:cd:f0:
62:22:01:9f:ef:bc:08:8e:68:07:f6:af:8a:82:d9:
20:03:85:0f:25:20:76:22:20:03:70:f1:c3:20:52:
a2:90:76:8c:c3:65:54:d5:ac:ca:60:c3:c5:5a:63:
5c:b4:fa:0f:9f:8e:4b:8f:4a:39:50:61:9d:48:9c:
43:04:d1:95:05:1f:7a:4b:4d:25:92:d1:c0:d6:aa:
b5:db:ca:26:9e:d7:8f:83:73:bb:9e:37:5d:3d:54:
49:3a:1c:aa:82:40:80:8b:dc:51:00:9e:40:f8:04:
92:93:98:1e:f2:d1:d6:c6:0d:7e:51:d4:10:d8:16:
fb:cd:30:5c:21:43:1a:80:15:ef:7e:7b:1a:9c:62:
99:25:ce:94:0d:f0:89:1e:38:52:0a:40:e4:35:b4:
91:18:6a:76:13:66:fa:78:d8:97:1c:74:e6:5b:03:
e1:a9:78:47:2e:5b:a0:ae:85:ad:ac:f8:63:85:25:
d8:4d:5e:53:78:e9:94:eb:44:ae:a8:d9:41:af:c5:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3D:E5:2A:10:4F:B4:EC:25:99:39:41:06:04:C3:D9:84:39:04:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C8BE76CB10211EEA526EA62775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.220.0/24
Signature Algorithm: sha256WithRSAEncryption
94:87:54:b5:c0:eb:e8:7b:e6:2c:1e:d4:22:5d:6c:21:c3:36:
b7:1d:e6:da:28:d4:22:cd:63:85:64:e0:79:14:7b:18:58:ee:
de:84:c7:93:3e:39:88:88:0e:ad:e6:12:59:e9:07:ad:f2:f4:
3d:0b:ec:1e:30:db:65:12:41:7d:3d:fb:19:9e:f9:27:49:13:
f0:21:d1:f3:10:58:25:73:24:60:44:59:bc:91:45:96:33:f7:
9e:a9:86:f2:6d:dc:24:7d:2c:2b:c7:f5:69:f3:0e:de:53:64:
50:a8:3c:86:ef:e5:cb:5b:c2:2e:4b:c2:db:9a:ff:98:f1:34:
d6:de:ce:92:ff:5e:cb:5c:3f:31:38:26:e6:64:dc:1f:0a:dd:
a3:81:8f:08:15:a8:79:80:0a:22:88:de:b5:9f:0a:59:3d:53:
8b:7f:e3:ed:b8:b3:e1:60:76:17:6e:5a:e9:43:ea:33:08:43:
bf:b2:a2:90:f1:02:62:6a:1e:d7:16:a6:50:91:4e:74:31:47:
82:6f:fb:73:e0:73:ca:74:05:74:ce:ea:5b:f3:f0:fc:6c:0f:
3b:d5:a0:55:d0:c5:26:56:9d:43:25:79:52:81:5f:74:19:59:
76:fa:3e:09:68:57:92:31:f6:94:81:bb:65:02:89:73:7c:dd:
49:e0:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org