Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/625D15A0B10211EEAD360D63775412E6.roa
File: 625D15A0B10211EEAD360D63775412E6.roa (raw, json)
Hash identifier: sVTdkH8LGAo9tmDBMfYtiKXZMbxhfRBwvk37fpBJwSE=
Subject key identifier: 65:03:A9:3E:48:CC:D0:DC:28:07:C1:08:27:77:10:7F:2E:E0:6D:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 74A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/625D15A0B10211EEAD360D63775412E6.roa
Signing time: Fri 12 Jan 2024 04:23:49 +0000
ROA not before: Fri 12 Jan 2024 04:23:46 +0000
ROA not after: Fri 13 Dec 2024 04:23:46 +0000
asID: 140224
IP address blocks: 154.205.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29857 (0x74a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:23:46 2024 GMT
Not After : Dec 13 04:23:46 2024 GMT
Subject: CN=65a0bed5-7999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:68:52:e6:43:5b:31:ea:5a:8f:a6:77:7b:
6a:6c:54:3e:28:5e:dc:80:00:80:67:f4:7b:7b:c1:
4c:3c:3c:ab:2d:86:9f:70:61:f1:73:bd:4f:3b:3a:
b8:d4:b0:0e:ed:9a:e5:bf:5a:95:25:d5:f0:ec:bc:
59:da:2a:84:41:5f:f3:fb:d7:96:28:f8:f1:e1:8f:
9d:f2:b6:da:f4:0c:e5:74:a2:4b:d9:c8:cb:38:59:
aa:ad:ea:9a:d1:7d:34:43:6d:79:21:a0:bd:28:4e:
ca:f5:55:c7:25:54:0f:66:a8:5e:61:e7:c5:f4:5e:
ae:ab:ce:ea:dc:c8:fa:9d:2d:dd:fe:8c:5e:5c:d9:
ea:df:be:3d:67:ee:b9:87:85:0b:f6:9d:40:25:1d:
47:7d:95:71:cf:79:f7:8c:3d:b2:4d:2f:e4:97:f4:
96:ea:61:e3:52:49:cb:0d:9c:b7:ba:a3:52:9f:02:
96:21:c8:d4:70:e9:c2:04:53:5d:3a:07:3d:aa:4b:
c0:cf:a1:a6:c1:62:36:a9:f7:61:8d:80:e5:9d:0a:
94:66:b6:6a:6e:de:35:d0:ba:7d:41:14:5b:f5:8a:
10:d4:f5:3f:2f:cf:f6:c1:f3:35:ac:54:a6:57:d8:
c0:43:d9:c6:8b:b5:11:af:db:3e:43:09:e4:bc:6e:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:A9:3E:48:CC:D0:DC:28:07:C1:08:27:77:10:7F:2E:E0:6D:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/625D15A0B10211EEAD360D63775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.221.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f1:8a:87:fb:97:4b:c2:d1:e4:0a:50:bd:90:3a:90:8c:f2:
ec:8b:08:75:9a:39:61:ed:b0:fb:7c:0e:7c:f8:03:ba:9e:f0:
a5:f1:02:c2:2a:8b:fd:39:9b:53:f0:a3:93:c2:b7:c9:6a:ba:
a8:35:c6:7d:30:4a:8c:d7:31:1e:6b:9e:fb:5c:1d:1b:9a:19:
be:ff:d6:fe:1f:21:a4:54:38:d0:b3:3c:94:11:55:60:d1:eb:
97:a5:53:7e:6f:e4:10:4b:79:56:de:b5:36:2c:54:19:66:d8:
e7:a3:f9:d0:f3:81:c8:75:d1:cd:6c:25:b2:0f:39:3d:f8:24:
ed:92:1e:4c:ba:6f:99:90:d2:b1:82:fc:27:a1:74:7f:97:6d:
ee:87:c7:37:2a:e7:f9:74:8e:53:f5:5c:68:51:32:7e:c0:a6:
76:c8:23:5b:d6:c1:20:13:17:2c:d9:e0:9a:04:cc:ea:da:47:
f3:87:d6:da:6f:d6:c7:4d:db:b2:60:07:f3:99:f1:78:44:7b:
b3:d0:b0:5c:9d:87:7b:c6:a0:be:92:07:ac:9b:92:c3:4f:55:
0a:6a:d8:ab:31:c4:51:ab:62:1b:6c:e2:4d:27:89:c6:01:3c:
d7:d9:f7:20:eb:3b:b8:6e:78:bc:a1:60:e7:2e:10:91:97:f2:
cd:5c:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org