Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46EF30C2B10311EEBF668E64775412E6.roa
File: 46EF30C2B10311EEBF668E64775412E6.roa (raw, json)
Hash identifier: JidEACOCCw1Mfi30HLTd070vXxykHPB6JhwXxCfy5FI=
Subject key identifier: 37:47:F5:82:12:5A:8C:AB:0D:41:5B:95:EC:03:32:84:AD:62:9A:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 74A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46EF30C2B10311EEBF668E64775412E6.roa
Signing time: Fri 12 Jan 2024 04:30:13 +0000
ROA not before: Fri 12 Jan 2024 04:30:09 +0000
ROA not after: Fri 13 Dec 2024 04:30:09 +0000
asID: 140227
IP address blocks: 154.205.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29863 (0x74a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:30:09 2024 GMT
Not After : Dec 13 04:30:09 2024 GMT
Subject: CN=65a0c055-a228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:40:97:9e:ae:1d:b8:f5:99:9f:7a:27:54:
c3:44:33:d8:e7:10:2e:2a:22:61:08:f6:ba:2b:67:
3b:71:bf:16:f1:95:18:55:23:41:f1:68:64:6a:35:
eb:97:82:ad:57:8a:5f:d2:d6:66:9e:80:6b:28:36:
04:51:69:97:53:b1:9c:43:76:7c:0f:10:c5:24:ca:
4c:2e:aa:3c:0e:5e:ab:c9:08:d8:87:34:ba:af:af:
56:e4:7e:24:4b:38:3f:3c:49:28:de:09:7d:99:52:
8f:4b:58:e1:5a:37:25:ce:4f:47:02:a8:08:7e:bf:
12:f3:f2:2d:29:72:41:5b:45:d9:b2:23:c2:9b:d5:
9f:a5:f4:f4:6a:50:1a:be:79:32:e1:44:4b:11:e8:
cf:35:1b:c9:94:53:fe:20:17:2f:1f:26:65:58:e2:
76:36:99:89:8a:c3:c7:81:cb:05:f1:6e:c9:05:93:
81:cb:63:fa:c4:03:86:59:2d:ee:ee:2b:40:55:62:
f2:c0:d5:77:36:a6:ad:c7:49:63:83:a8:b3:8a:71:
fc:23:94:32:63:be:98:11:24:05:c7:72:8c:d2:23:
74:a7:30:8a:26:9e:18:82:2d:33:fe:c4:ac:25:1c:
78:a2:81:99:db:ab:fb:59:ce:c2:06:8a:7b:8f:ef:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:F5:82:12:5A:8C:AB:0D:41:5B:95:EC:03:32:84:AD:62:9A:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46EF30C2B10311EEBF668E64775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5e:f8:29:b2:fa:0c:1c:cf:a5:eb:ba:c2:44:de:1e:a4:1d:
54:28:59:65:b2:4b:e6:6b:45:f6:5f:00:81:e8:fe:41:94:ff:
3a:10:38:f6:41:fb:35:55:0b:53:76:af:6c:b0:26:2c:18:6c:
dc:4b:78:5d:3c:d0:ae:25:4d:3e:c4:44:35:89:41:1e:c1:c5:
74:b9:eb:09:1f:db:32:6f:27:49:4d:67:32:79:fa:8c:76:16:
47:98:51:59:ba:c0:5d:34:8d:fa:b9:4e:af:47:3f:5b:62:50:
40:be:cc:08:ed:5a:c7:c5:2c:8d:6b:83:de:ae:5d:3a:5c:74:
e4:a5:ba:a2:67:d6:0f:50:58:88:65:6e:9a:b8:d2:d2:b2:70:
f8:59:57:be:c4:f8:8b:b8:50:5c:aa:df:32:95:6b:c7:44:a7:
19:48:03:5b:c8:c2:63:ea:42:8b:43:41:78:80:ee:9c:5c:63:
f6:6f:18:00:f9:2f:df:4d:a2:51:d7:e7:29:04:37:00:7c:67:
2c:71:1c:ab:42:ea:fb:e9:6b:d9:b4:dc:37:8c:b5:ff:77:61:
df:9d:71:3c:e9:61:0b:5e:d4:32:a4:cc:17:b2:bf:9d:24:a2:
31:63:c6:48:b1:85:33:9a:90:bc:ba:3c:3e:84:7e:9f:e5:9a:
89:0c:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org