Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C65B6A8E20411EEB14A20C3775412E6.roa
File: 3C65B6A8E20411EEB14A20C3775412E6.roa (raw, json)
Hash identifier: J1x8Mh0Us9V9diwV0YIS6sPEqlnSqgbhLq52sc8pDkY=
Subject key identifier: EB:9E:C2:74:77:C6:75:24:8A:67:7A:48:E2:63:3F:09:BC:83:9F:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A15C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C65B6A8E20411EEB14A20C3775412E6.roa
Signing time: Thu 14 Mar 2024 13:10:32 +0000
ROA not before: Thu 14 Mar 2024 13:10:28 +0000
ROA not after: Fri 20 Sep 2024 13:10:28 +0000
asID: 2914
IP address blocks: 154.214.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41308 (0xa15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 13:10:28 2024 GMT
Not After : Sep 20 13:10:28 2024 GMT
Subject: CN=65f2f748-9e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:79:4a:3b:15:0b:65:d7:72:55:50:2f:8b:
5a:74:ef:a5:26:0a:08:9a:65:5b:76:f2:e7:ba:8b:
ea:d4:46:ed:b2:1e:0e:5c:cd:91:67:12:f8:9e:2a:
a0:a7:38:10:a4:cd:b9:9e:ff:bf:c8:6a:6e:5d:dd:
65:7e:cd:40:71:7f:90:33:95:75:e8:39:cf:1c:61:
9b:b0:1c:85:d4:8f:dc:bb:80:b3:b3:7c:c7:ec:79:
7a:ba:6d:9a:0c:16:91:8d:d3:a7:73:7c:1d:75:fa:
f1:ad:b9:9f:1b:6c:f6:ae:9c:30:70:14:0b:d1:e9:
1c:32:9e:16:fb:70:5b:a9:d9:11:72:f7:79:79:3f:
f4:6f:41:ae:a2:dc:23:43:de:6d:c9:2c:50:16:d6:
06:70:84:9f:c8:e9:f1:3c:55:42:41:b4:a7:23:97:
00:5d:c5:fa:28:de:68:f3:72:25:1d:c8:76:d8:5d:
fc:7a:16:c5:7d:33:0f:09:99:fc:06:79:96:b2:af:
c3:ff:7c:57:9d:5e:8d:4d:43:25:bc:7f:e8:0c:72:
49:21:0e:aa:aa:52:96:4f:77:50:cc:54:1c:10:e7:
71:55:1b:a9:92:ed:b2:06:eb:0e:dc:e3:77:b0:6a:
4f:51:04:e6:8b:e9:3c:4b:f2:f7:88:52:71:e3:b3:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:C2:74:77:C6:75:24:8A:67:7A:48:E2:63:3F:09:BC:83:9F:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C65B6A8E20411EEB14A20C3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.192.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:e3:17:c2:8a:5a:5f:0e:15:8f:2c:ef:0a:8b:6a:7f:1f:4a:
3f:82:b4:58:00:aa:8e:10:1a:a3:35:61:ac:bf:6b:da:da:46:
68:f8:48:6f:4c:e9:86:49:08:90:85:81:31:72:00:f6:f9:49:
0a:19:16:8c:09:ec:03:69:65:39:9d:6d:a7:ce:87:11:05:71:
14:16:a2:e6:e4:50:b9:5b:40:c6:f6:72:91:f1:35:58:35:ad:
aa:db:9f:19:b0:73:85:b1:42:d3:cf:9d:fe:2c:de:64:8f:cf:
eb:60:25:ae:4f:83:63:1f:8e:b5:76:5c:68:7a:57:22:18:39:
bc:e2:ca:31:8b:fd:ee:e9:6c:85:67:aa:80:6d:88:d6:c9:53:
d4:a5:d3:16:7e:fe:a6:fc:49:69:00:6b:b8:d7:ec:ae:4b:f2:
82:44:66:40:9e:ba:c8:a8:6c:96:9f:1e:58:b6:c4:72:f0:f6:
17:e2:17:14:ec:bf:7c:1b:56:98:d0:26:f2:43:08:6e:c9:58:
06:35:57:83:61:4c:94:30:18:4f:4e:1d:3c:70:fe:20:cd:64:
5c:e4:d1:fc:1e:36:15:bd:d5:5b:10:03:8f:85:b5:bd:3e:7c:
c0:40:5a:fe:78:ef:1c:bf:26:f0:03:5c:28:4d:08:37:47:2d:
f5:c9:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:06 2024 by rpki-client on console-ams.rpki-client.org