Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3314C0A8F74911EEB1F61B53017001B1.roa
File: 3314C0A8F74911EEB1F61B53017001B1.roa (raw, json)
Hash identifier: rVKrraj0Du7cM/dX3FlIVFzwT+6Z0Y4Vw2c9OqRIcfs=
Subject key identifier: 6E:56:01:05:18:E7:E2:45:C1:67:6F:87:39:90:17:D1:3F:ED:2B:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3314C0A8F74911EEB1F61B53017001B1.roa
Signing time: Wed 10 Apr 2024 14:47:06 +0000
ROA not before: Wed 10 Apr 2024 14:47:02 +0000
ROA not after: Thu 17 Oct 2024 14:47:02 +0000
asID: 152450
IP address blocks: 154.205.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43760 (0xaaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 14:47:02 2024 GMT
Not After : Oct 17 14:47:02 2024 GMT
Subject: CN=6616a66a-da30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:4f:8b:b0:aa:d2:3b:b3:3c:ee:e3:02:cd:
77:97:6b:0c:9b:89:40:40:45:d5:65:d3:61:aa:f8:
2f:42:52:e5:53:d8:6f:fa:86:19:47:b2:50:fb:b0:
c7:2b:02:48:94:c7:45:7a:c2:74:51:a6:98:5e:5b:
05:d2:61:3b:34:71:91:2f:d7:ac:75:23:2f:c2:a8:
6b:d5:fc:4a:36:0e:68:da:b9:ef:53:b2:06:2a:fb:
48:b1:88:47:5e:be:43:da:5b:53:c1:01:df:f7:0e:
b9:47:8f:45:99:69:4a:39:ab:e6:0e:95:9d:7f:0e:
71:24:c3:4f:ee:af:76:30:7a:c3:69:dd:3c:ad:75:
0f:c0:da:68:3d:74:e1:6d:22:26:e9:a9:ac:42:ac:
21:9f:2a:13:42:bf:ea:fe:78:52:07:9f:b8:d8:83:
af:9b:e9:95:5f:b5:0d:db:38:98:73:74:a2:d9:b6:
a2:cb:d0:db:7e:67:9f:a9:55:62:7c:06:4c:dd:4c:
24:87:cc:8f:f3:9b:19:05:cd:73:1e:59:ec:b1:da:
70:10:fc:1a:2c:2f:3a:dc:4a:63:62:d7:04:1c:19:
a1:4f:b7:01:62:d9:3b:4f:bc:27:4e:69:46:e7:32:
d2:3b:19:47:3f:53:76:ee:d4:c9:2a:bc:15:b1:aa:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:56:01:05:18:E7:E2:45:C1:67:6F:87:39:90:17:D1:3F:ED:2B:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3314C0A8F74911EEB1F61B53017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:33:77:b2:96:e8:dc:93:c0:72:64:0d:94:74:eb:2c:54:ab:
39:46:b3:76:94:9a:64:51:68:67:aa:ca:1d:ee:5d:9d:73:5c:
0b:d8:70:a6:3f:92:26:12:d8:f4:d3:e1:e9:53:82:dc:0d:ee:
0c:21:1b:c9:63:70:b8:43:d5:b1:30:8d:23:3b:0b:e9:03:4b:
c5:53:f3:03:1f:53:ba:1d:2d:a6:2a:46:28:b0:24:09:bb:9f:
50:25:82:ec:9a:10:56:ee:6e:df:73:d1:7f:7c:d6:50:51:0b:
6d:55:44:c8:65:66:af:5e:fd:1a:71:bd:94:39:5a:23:38:dc:
d3:e7:63:f7:d6:38:03:b7:c9:9d:7e:4e:3c:35:3c:09:12:67:
c8:8a:95:17:b6:bd:b1:72:ee:fc:0e:61:1b:1b:fe:69:f1:30:
aa:01:dc:30:9d:29:32:6e:6c:d1:db:2b:7e:b5:dd:4c:ca:f1:
db:e8:13:0c:59:c4:7e:7b:a0:1b:94:d6:7e:6f:db:5f:d1:52:
2a:ba:df:30:12:0a:c0:6c:48:26:84:d0:9f:e9:b2:7a:49:0f:
c1:11:d1:27:b8:0e:b6:99:7d:64:10:c6:fc:6c:7a:7c:d8:d6:
bc:ce:b4:80:b9:28:d2:81:1c:ef:9a:6e:59:e0:ca:50:1f:33:
aa:40:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org