Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B8534DEB34B11EE98FDA17D775412E6.roa
File: 4B8534DEB34B11EE98FDA17D775412E6.roa (raw, json)
Hash identifier: U1Stk7FwmxQJyvJAfdKDkc8FogRTA1In9Q/cTFzRfjQ=
Subject key identifier: 6C:87:AD:7B:A9:0D:82:8F:6C:D0:70:66:D8:27:69:AA:76:DF:AD:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7552
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B8534DEB34B11EE98FDA17D775412E6.roa
Signing time: Mon 15 Jan 2024 02:10:47 +0000
ROA not before: Mon 15 Jan 2024 02:10:43 +0000
ROA not after: Fri 13 Dec 2024 02:10:43 +0000
asID: 8796
IP address blocks: 154.205.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30034 (0x7552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 02:10:43 2024 GMT
Not After : Dec 13 02:10:43 2024 GMT
Subject: CN=65a49426-92d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:eb:62:ea:ee:6d:47:0a:bb:2c:6c:b7:da:
f5:14:7d:58:16:0a:a2:45:6c:59:6d:40:d4:68:c8:
15:11:c9:25:1f:74:cc:8e:96:4f:c4:68:ca:b5:b7:
d4:11:a1:6c:75:69:0e:7b:26:b7:b6:d0:78:f6:4a:
a4:23:ec:f1:78:52:b3:ec:6c:05:e3:3b:3b:8b:dd:
a6:27:4c:dc:79:34:1e:7b:96:5c:fe:46:9f:63:10:
ad:cd:e2:49:a3:91:55:12:14:26:74:33:4b:6b:42:
ac:0a:ac:42:78:65:c0:72:75:dd:0f:45:7e:fc:7d:
9a:ff:6f:15:c2:c5:cb:e0:e7:43:de:19:c6:7b:59:
dc:1c:db:66:00:d6:41:25:83:f2:17:88:03:b4:c4:
6e:bd:89:49:cb:67:3e:82:d4:02:46:b3:3e:2a:5f:
bc:f2:60:36:24:e3:ff:bb:32:31:06:0b:e7:0e:09:
b0:93:59:d7:54:53:93:e5:e2:02:a5:ab:15:c0:b2:
63:5b:1c:93:20:57:0b:5c:22:8f:0f:cb:8b:e4:e5:
43:06:0e:27:dd:a4:c9:ef:6d:52:97:ca:2d:63:54:
b9:be:8b:5d:20:59:2c:26:b3:4b:ce:34:c9:0f:40:
b0:bc:96:e7:15:35:c2:0e:93:e0:57:f3:f9:fb:2f:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:AD:7B:A9:0D:82:8F:6C:D0:70:66:D8:27:69:AA:76:DF:AD:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B8534DEB34B11EE98FDA17D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.193.0/24
Signature Algorithm: sha256WithRSAEncryption
13:16:a3:64:17:28:4a:da:4a:14:6a:33:a6:1c:4d:04:4a:51:
1d:71:38:b2:1a:e6:19:45:3b:b9:c3:b3:90:f3:7e:c0:9e:4f:
dd:5e:83:93:c7:1c:7b:42:af:5d:cb:a5:04:69:49:bb:b4:70:
de:59:f8:12:7f:ad:c1:69:59:f2:45:9a:40:53:af:6f:47:e1:
7b:82:94:66:48:80:fa:1b:a1:5e:c7:23:d1:dd:a8:54:65:4e:
ab:94:82:cd:ea:cd:28:5a:9b:4c:60:4c:75:27:e9:65:42:ae:
fd:e1:ca:02:fc:b7:3f:a8:86:a9:7d:de:35:17:a2:0b:f4:a3:
80:ab:5f:81:e0:69:68:df:f7:b7:2c:dc:62:70:15:6a:66:8a:
eb:b8:a3:2a:24:08:0b:e0:d9:ec:ca:97:20:bb:bf:24:9b:68:
ae:82:96:fe:b7:aa:74:3b:7e:04:e8:1b:16:98:3a:a9:e3:9d:
37:d3:bb:6d:e9:5c:9a:d7:73:d3:b8:99:8e:f4:b8:c1:1b:3c:
a7:25:1a:ff:69:57:83:eb:69:42:84:b9:f4:9c:07:9a:0c:86:
ec:7c:7d:fa:f8:ac:1b:dc:39:c5:ff:93:68:3a:c9:46:40:f3:
7e:81:4a:64:2d:e9:a2:8c:3e:e1:58:52:61:59:14:b4:0d:e4:
b5:cd:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org