Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F4B2410B0FF11EEA2E3DB5D775412E6.roa
File: 3F4B2410B0FF11EEA2E3DB5D775412E6.roa (raw, json)
Hash identifier: y5eoYES6YP6k2OQRH1NKgNOrh1IQMR+TbOyZYrrGGGk=
Subject key identifier: 7F:32:86:B2:37:BD:D5:A0:A1:FA:3B:5B:25:3C:66:C6:1F:5C:B4:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7483
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F4B2410B0FF11EEA2E3DB5D775412E6.roa
Signing time: Fri 12 Jan 2024 04:01:22 +0000
ROA not before: Fri 12 Jan 2024 04:01:19 +0000
ROA not after: Fri 13 Dec 2024 04:01:19 +0000
asID: 140224
IP address blocks: 154.205.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29827 (0x7483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:01:19 2024 GMT
Not After : Dec 13 04:01:19 2024 GMT
Subject: CN=65a0b992-51a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:a3:6e:4a:d7:db:3b:00:a3:c6:59:d3:81:
b6:2a:e9:f1:62:52:bb:fd:13:1c:9a:95:63:8c:b5:
0a:7c:06:32:eb:71:57:e5:4a:9a:34:80:57:a4:80:
b7:22:5f:d2:7f:ee:ea:99:67:61:44:bd:72:79:fa:
87:98:c2:b6:63:30:81:61:85:e4:9e:76:cf:f6:33:
33:80:c4:b3:57:cb:bf:13:d8:8d:76:41:98:8a:c8:
07:78:bf:96:f3:5c:db:49:39:a8:0a:0c:ce:78:bc:
88:a4:e3:fb:86:25:a8:e4:d8:5e:91:b2:e2:82:cd:
9f:f1:6c:71:31:cd:e7:25:6d:2d:59:4d:f4:99:2f:
9c:be:93:89:9e:db:6d:e1:8b:94:74:1f:bb:e9:20:
e1:75:22:84:50:7c:cc:c7:05:3a:06:86:eb:53:4d:
b8:e6:19:d0:d3:33:f1:4e:ba:03:43:33:7a:bf:bd:
40:9a:42:06:7a:21:8d:c4:1f:52:6d:4b:b3:27:51:
b7:00:33:e6:6f:a3:d2:9c:60:66:34:cc:2c:4a:9f:
48:e2:e7:2d:f0:37:65:c7:aa:7e:ce:99:71:5b:e5:
db:e2:68:61:64:cb:53:1a:d5:8f:cb:32:32:ed:2e:
ba:6c:6d:7a:0d:73:0a:16:8e:49:4f:3e:f4:f5:16:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:86:B2:37:BD:D5:A0:A1:FA:3B:5B:25:3C:66:C6:1F:5C:B4:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F4B2410B0FF11EEA2E3DB5D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.204.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0d:b9:68:6d:61:98:0a:f1:db:8f:c8:d2:0c:1c:32:27:6f:
09:5f:50:e3:84:6d:ee:4d:e5:78:96:04:b5:40:c2:5a:2d:96:
f3:03:95:a2:f3:50:28:6c:c3:40:e6:e1:79:27:d8:1a:27:9f:
8a:44:95:30:3f:f9:65:8a:c9:e9:c6:ef:d0:67:a6:30:80:ff:
d4:cc:41:c2:c7:59:e3:32:42:01:75:2e:a0:1a:d6:6a:f8:a0:
c5:06:30:65:64:b1:fc:01:17:90:e7:fc:be:52:09:2c:2b:43:
6a:53:6a:12:d2:92:4e:57:f3:1f:9d:d9:95:5d:d6:54:be:89:
a6:f9:fc:98:a7:8e:fd:a8:77:3d:17:19:70:09:45:53:80:38:
f5:e6:53:ce:e7:91:2b:26:af:97:d6:c5:11:be:a7:e2:ac:75:
8e:e8:d0:93:ec:cf:76:68:11:de:ec:98:dc:be:7b:54:1f:bc:
a9:d9:30:fa:6b:61:f7:03:3f:04:4e:56:9d:ef:60:66:ca:0f:
8d:6c:18:66:00:55:99:aa:aa:5c:9f:42:d3:39:11:3d:0a:20:
0f:31:64:e3:cc:92:08:20:c6:b9:fc:ca:5b:70:40:5c:a3:25:
d9:5a:e9:fb:e5:0e:49:fc:0e:eb:8c:a4:09:ca:c3:0b:59:c8:
d5:bf:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org