Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EFD7CFEB34311EEB8072767775412E6.roa
File: 5EFD7CFEB34311EEB8072767775412E6.roa (raw, json)
Hash identifier: sJJYPXYCcRHQFSR4yFHn7uLyuA2D46ZMM86RxXeu1UA=
Subject key identifier: 99:AC:C0:0D:F4:A7:23:E4:81:64:31:A7:BF:1D:61:DA:32:BD:44:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 751A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EFD7CFEB34311EEB8072767775412E6.roa
Signing time: Mon 15 Jan 2024 01:14:03 +0000
ROA not before: Mon 15 Jan 2024 01:14:00 +0000
ROA not after: Fri 13 Dec 2024 01:14:00 +0000
asID: 140227
IP address blocks: 154.205.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29978 (0x751a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:14:00 2024 GMT
Not After : Dec 13 01:14:00 2024 GMT
Subject: CN=65a486db-31d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:a2:01:30:7b:33:5c:3b:70:03:17:1f:cd:
3f:f8:7e:a2:a0:78:17:9d:9c:c8:c4:20:d8:a9:3e:
b9:8e:43:1f:1c:a0:e9:dd:18:9f:8f:bd:2e:e8:64:
2a:85:41:8c:e5:43:fc:08:65:fe:3d:ff:30:b8:1a:
87:b5:d1:8d:1a:18:45:06:41:66:69:37:98:68:ea:
3f:48:a6:4e:e5:cc:7b:53:c3:17:fd:75:33:53:0a:
8b:06:6c:f9:9a:cb:35:90:aa:20:2a:98:36:e3:f8:
28:2a:f1:e1:03:c0:25:4e:7e:a3:33:ec:dc:c1:11:
94:03:cf:8c:60:77:20:5e:f2:84:4b:c2:2d:ee:29:
ca:88:ca:b2:cb:0f:1f:c1:b1:43:25:47:8f:03:3d:
f7:34:f1:f7:12:de:df:bb:d8:5b:4b:3f:a9:40:5a:
dd:19:fa:c1:63:a6:38:3e:ef:90:2d:d0:34:b5:18:
ba:8e:d1:df:7a:13:26:dd:17:c6:d1:c0:bc:f7:2e:
66:be:60:13:79:33:c9:50:da:95:32:ba:4d:82:dd:
89:55:58:b6:03:f7:ce:9f:a2:9a:f5:0a:93:52:cc:
42:01:3d:67:e0:40:c1:aa:a7:88:0e:35:e1:d4:a2:
3d:7d:39:62:f3:5f:c9:9e:ca:23:5e:80:1b:86:5b:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:C0:0D:F4:A7:23:E4:81:64:31:A7:BF:1D:61:DA:32:BD:44:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EFD7CFEB34311EEB8072767775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.205.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fc:1b:08:2e:f5:2a:2e:78:0b:36:8c:5e:68:2a:63:97:61:
a9:22:4e:26:6e:09:05:df:38:28:6f:43:57:27:4d:9d:26:db:
ff:fb:74:79:74:7d:3f:fb:8e:42:ae:31:a6:aa:76:b7:32:4a:
e3:9a:b2:98:7b:73:07:7b:96:e9:64:f8:12:2d:03:89:64:3c:
9c:f1:0d:8a:30:1c:2e:f9:8a:49:c9:f7:e5:cb:a8:c1:1a:7a:
5d:66:08:41:c3:f1:12:58:10:6d:0d:ae:b9:8e:ab:de:50:75:
a3:44:eb:31:29:91:2b:c3:51:4c:ff:1b:6e:4a:1f:95:10:df:
fb:64:ad:21:c3:97:6e:48:8e:a2:9e:7e:20:3a:96:a9:55:fc:
60:8f:4d:d1:d3:a1:24:fc:94:8e:af:2f:98:5c:9d:01:cc:a5:
f4:96:75:f7:90:12:c4:39:9d:07:45:c4:a7:80:56:b8:17:56:
c8:c4:b4:bb:02:3e:e4:5a:b6:d6:60:91:0b:4b:fc:8c:7e:06:
f7:5d:fb:7a:8b:54:7c:c5:57:46:92:6d:e7:8c:b8:25:42:eb:
ae:b9:c7:83:fe:d6:37:75:f4:09:f1:fd:80:6f:22:16:35:93:
d4:68:9d:c4:90:e2:80:0d:0e:e5:ae:4f:71:69:8e:7e:e5:83:
f6:ab:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org