Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330E3F4CB10511EEB857ED67775412E6.roa
File: 330E3F4CB10511EEB857ED67775412E6.roa (raw, json)
Hash identifier: tYaiXOmOApnYSC0N8so8Oy2oZLrnvpkZ9bWF5qrHzo4=
Subject key identifier: C3:E9:3A:65:40:F7:55:1E:58:E5:DE:58:10:66:D6:FA:A2:FF:4B:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 74B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330E3F4CB10511EEB857ED67775412E6.roa
Signing time: Fri 12 Jan 2024 04:43:58 +0000
ROA not before: Fri 12 Jan 2024 04:43:55 +0000
ROA not after: Fri 13 Dec 2024 04:43:55 +0000
asID: 140227
IP address blocks: 154.205.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29877 (0x74b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:43:55 2024 GMT
Not After : Dec 13 04:43:55 2024 GMT
Subject: CN=65a0c38e-dad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:9a:fc:10:df:f0:15:cc:cc:1e:31:84:1d:
bc:17:57:11:99:bb:a3:eb:16:60:f8:ff:7d:f5:51:
97:77:66:96:92:79:1e:4d:e3:0d:95:e2:92:cb:2a:
18:79:5d:c0:61:76:e8:e3:f4:87:43:6b:91:a1:17:
3f:d6:88:76:aa:28:32:9f:12:4e:cc:e2:8e:78:2d:
23:6f:36:ca:05:e0:ec:35:8d:6c:83:81:5d:ec:9d:
a4:ee:73:11:b2:36:af:08:38:6b:a0:5d:aa:7c:3a:
e4:da:9c:92:4b:f4:23:7d:15:f4:8d:67:80:57:52:
e1:6e:12:b4:d4:c1:63:11:4b:18:a1:8f:5e:96:6a:
59:48:8b:b5:6e:45:a4:44:e1:74:04:7f:9e:75:0f:
a3:51:f3:54:5d:b6:00:dd:4b:d3:9f:fb:cc:22:46:
aa:37:8b:04:ee:31:c4:59:6f:6a:cc:f5:45:16:d5:
ba:9a:4b:d6:7d:ca:6c:ff:3d:9c:da:8b:ba:c3:cd:
b1:0d:a1:c7:6d:f6:bd:d0:4e:fb:c1:d6:fd:28:b8:
89:34:9a:23:c8:86:c4:ef:f0:d2:dc:db:e6:4e:20:
45:d3:ca:dc:4f:63:33:01:b6:b1:8b:06:54:b3:c0:
f2:ad:94:c2:96:56:ef:e7:ca:8c:80:35:d5:cc:7c:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:3A:65:40:F7:55:1E:58:E5:DE:58:10:66:D6:FA:A2:FF:4B:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330E3F4CB10511EEB857ED67775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.199.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:98:98:c5:15:90:7a:85:bf:c6:02:80:6a:ee:f1:b8:c8:29:
16:1d:f5:b7:14:d2:81:d8:13:fd:41:d3:b8:43:31:52:76:11:
fb:d2:14:3a:22:d2:2c:b5:00:b4:bd:3b:ff:af:c3:36:af:4a:
95:09:09:94:ca:d6:aa:14:b6:39:62:cc:63:70:bd:2d:5e:63:
9a:c2:fb:24:b4:d2:bf:53:2c:70:d8:fc:b9:99:25:34:4d:2f:
c0:9b:e9:5c:0a:0c:db:22:de:e0:2d:9d:c4:a3:82:33:0e:ac:
cc:71:da:64:ef:cb:14:13:1f:11:b9:e8:e4:8f:75:cd:2a:27:
90:a1:ba:70:92:8f:8d:1f:5a:2a:32:6f:9a:60:70:4a:3d:57:
8c:ad:b1:aa:53:03:54:f7:51:41:68:03:00:7b:8c:8b:06:50:
6e:46:16:7f:14:1d:7b:7d:6a:6d:c4:40:4f:0d:2a:e0:d8:54:
77:05:00:f8:4d:d5:f7:f8:a3:22:d5:f6:38:2d:44:2d:43:80:
87:0f:b8:8c:b3:62:bf:7d:4d:57:d1:09:ad:21:df:d6:c2:ad:
4e:40:55:25:34:9c:e8:73:a2:c8:d2:bf:b0:fe:ab:cd:f0:77:
69:46:69:d1:b0:07:8a:9a:8d:eb:60:ba:ab:58:03:80:9f:78:
d8:a8:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:17 2024 by rpki-client on console-ams.rpki-client.org