Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61E00F2AE28E11EEBB9300C5775412E6.roa
File: 61E00F2AE28E11EEBB9300C5775412E6.roa (raw, json)
Hash identifier: 9IxzYtdMglSXTCaj/YlyjMsog+2zkcu0XnTOFNt4+Ag=
Subject key identifier: FE:1D:5B:4B:6D:18:88:10:C2:3D:58:DB:8A:A8:73:97:16:FF:13:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A1A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61E00F2AE28E11EEBB9300C5775412E6.roa
Signing time: Fri 15 Mar 2024 05:39:25 +0000
ROA not before: Fri 15 Mar 2024 05:39:22 +0000
ROA not after: Fri 20 Sep 2024 05:39:22 +0000
asID: 47890
IP address blocks: 154.214.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41379 (0xa1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 05:39:22 2024 GMT
Not After : Sep 20 05:39:22 2024 GMT
Subject: CN=65f3df0d-28ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:db:b0:4d:d8:e3:f7:44:bc:aa:cf:5b:81:
f5:5a:81:70:8a:2a:bf:69:02:d1:c7:3c:97:81:3e:
a4:10:96:78:b9:cc:28:ac:d1:ed:2d:2d:d8:e0:58:
4c:79:3e:c6:bf:a1:39:b4:55:55:ca:ea:6c:76:e7:
36:14:8e:d4:6c:c0:a4:6e:d0:3e:9a:31:c6:e4:3c:
02:ea:cc:fd:74:fa:af:99:15:5b:26:9e:ee:60:89:
72:c1:dc:61:1a:dd:b8:fd:7c:b5:46:ef:36:2b:9d:
9c:ce:25:c5:22:d0:4e:3f:d1:3d:9d:d4:40:5d:bd:
fc:06:d2:d6:24:b6:75:70:80:4a:e1:1b:cc:4c:82:
84:85:af:8f:c6:27:54:43:ed:41:b9:94:f8:e0:39:
57:3e:a0:99:93:70:fe:d3:03:d1:2d:03:b8:d9:a1:
7a:33:60:bd:cf:00:46:50:2c:7b:5f:66:ed:89:f1:
05:eb:95:e8:87:e1:18:28:5b:22:17:0b:8d:99:8d:
5d:c4:f5:ab:c2:48:8f:11:be:b8:87:84:4a:b2:b5:
1b:e3:c6:c4:77:fe:aa:37:58:85:49:0e:d0:05:06:
2f:ad:d6:b8:39:99:0d:e5:4b:27:1e:74:f5:d8:27:
13:ca:3c:ed:23:9e:69:40:7a:31:b2:75:a5:a2:35:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:5B:4B:6D:18:88:10:C2:3D:58:DB:8A:A8:73:97:16:FF:13:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61E00F2AE28E11EEBB9300C5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.230.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:d9:bb:56:cc:c7:89:0a:ae:e5:af:6d:dd:cc:ad:b3:c5:93:
dc:75:7c:ca:fd:74:fe:e5:d1:c5:0a:3e:8a:9b:6f:a0:58:3d:
d6:6d:6f:c8:62:1c:d4:aa:06:39:fa:06:8f:9c:81:1a:4a:d0:
c5:ea:d2:a7:0a:f9:1d:ae:a9:0c:6d:65:4f:a2:60:35:24:de:
b5:c3:8b:b6:b0:8f:5a:6b:d6:79:ea:0a:d7:4f:2a:ca:c6:19:
02:5a:33:e6:2d:6d:13:ee:5b:be:a7:33:4d:79:bb:99:10:2a:
da:dc:b8:7c:10:45:52:60:a9:ff:2c:f6:ec:19:65:3f:93:c8:
db:cc:af:54:4a:5e:4b:47:ec:16:be:c9:bf:11:71:20:da:53:
98:3d:f7:a6:24:cf:c2:ce:82:c6:4e:e1:be:9a:49:45:24:b5:
51:12:70:ce:83:74:68:85:f1:f5:1b:c6:a3:d4:8c:ac:31:e8:
3b:2b:06:1e:20:97:10:e3:9c:58:a9:3d:84:5f:8f:42:ed:62:
1b:59:3f:a0:07:15:34:f2:9f:3b:47:4c:5d:1c:84:b1:59:60:
08:56:04:78:14:b8:01:8f:6d:03:c0:ce:d9:ba:c2:69:68:5a:
a8:0a:47:77:aa:b3:2c:e9:5e:61:39:f1:ac:9a:32:d6:70:66:
af:62:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org