Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507DC574B0FC11EEA7227A58775412E6.roa
File: 507DC574B0FC11EEA7227A58775412E6.roa (raw, json)
Hash identifier: Yp+PjidnevQ3WPSkpt07e0JRcNBJC+XLWz5T35/TUOY=
Subject key identifier: 2C:9D:0D:1C:E2:59:57:2E:0B:B9:D1:9D:21:11:3A:7C:BA:CE:65:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 746B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507DC574B0FC11EEA7227A58775412E6.roa
Signing time: Fri 12 Jan 2024 03:40:22 +0000
ROA not before: Fri 12 Jan 2024 03:40:19 +0000
ROA not after: Fri 13 Dec 2024 03:40:19 +0000
asID: 140224
IP address blocks: 154.205.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29803 (0x746b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 03:40:19 2024 GMT
Not After : Dec 13 03:40:19 2024 GMT
Subject: CN=65a0b4a6-aad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:ee:ac:24:ba:ac:9e:81:fc:1f:a6:7c:ec:
3f:e0:0c:2e:6c:4d:71:2f:44:58:a9:d0:ec:5e:43:
29:ba:dd:e1:6b:75:e4:82:2d:8f:7a:3c:aa:86:b3:
f1:f4:49:40:42:c1:5e:9d:5a:71:fa:b9:35:f8:5f:
8b:fc:b3:ba:57:b1:e9:ef:75:01:ea:b4:57:b5:9b:
80:86:8c:71:f0:27:e6:d8:a8:81:ac:c6:64:30:3b:
85:b7:d9:a9:36:ed:b7:f5:d0:6c:64:f9:b8:72:b3:
3a:51:5b:db:3d:40:25:2d:50:6d:ef:8d:2d:fd:3f:
dc:1e:13:2e:f7:d5:40:b1:e9:0f:75:be:56:fb:42:
4e:cc:f3:5c:89:01:e9:54:48:80:d2:bd:76:13:f4:
84:9d:dd:4c:03:58:69:d1:ce:a7:53:31:a9:49:b4:
cc:d0:e1:d5:a1:f3:6e:82:84:22:4a:ab:2c:de:ce:
bf:94:6b:06:59:4a:9a:5f:33:13:cb:3a:4c:2d:f6:
18:69:b1:0e:3b:70:50:28:a0:6d:d3:69:d9:06:31:
ea:8c:8a:b1:d7:14:c6:7d:42:de:42:57:bb:a1:49:
b9:7f:15:ce:08:e3:ab:7d:d1:ab:e7:f0:95:04:60:
34:f4:0f:68:59:ef:50:c6:64:54:6a:05:1c:19:60:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:0D:1C:E2:59:57:2E:0B:B9:D1:9D:21:11:3A:7C:BA:CE:65:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507DC574B0FC11EEA7227A58775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.211.0/24
Signature Algorithm: sha256WithRSAEncryption
10:57:bb:86:70:3c:0f:ba:10:da:13:eb:77:89:af:ca:d7:03:
63:58:e3:67:27:21:9f:d6:ce:bb:fc:e6:18:e4:db:1f:31:1a:
72:a0:2e:37:13:ab:01:51:7b:24:52:a6:ca:b1:60:ce:4a:8f:
2a:27:29:2c:18:31:6a:90:61:4c:42:65:d0:7c:a0:df:fe:4c:
57:74:a0:9a:24:da:cf:41:4c:9b:5b:ce:4d:cc:b4:4a:fc:4b:
78:8d:d0:5e:c2:70:ba:8d:96:68:74:0b:62:7f:60:ed:e9:38:
60:a3:dd:03:d7:ca:4f:21:f3:94:da:09:f0:57:43:95:78:e8:
99:9f:f4:e6:77:d5:5a:7f:cf:91:a7:02:52:6c:c4:10:42:30:
ec:1e:5c:9e:06:e0:26:39:69:11:93:aa:39:b1:c7:eb:af:9b:
ee:65:16:ac:ab:dc:ad:3e:5e:15:2b:44:c8:22:34:9b:1a:08:
87:d6:2e:08:8b:75:ee:c6:95:18:b1:3e:20:84:7c:d8:63:2b:
94:e0:ce:b3:93:17:93:e2:5a:8e:f2:ce:6a:c7:49:26:67:f8:
26:9b:06:4d:9c:cf:bd:f5:97:3d:12:c3:2c:2a:70:d8:07:0a:
e7:c4:2b:f4:e5:77:c3:fc:73:49:37:d7:c8:0f:a9:e1:8c:bc:
71:59:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:03 2024 by rpki-client on console-ams.rpki-client.org