Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68EFFABAB10511EEBD8B4168775412E6.roa
File: 68EFFABAB10511EEBD8B4168775412E6.roa (raw, json)
Hash identifier: xN94QRKtnhMqrzhDNuDqkSUbv6dwmy95QpD5aQVjq7Q=
Subject key identifier: 84:BA:C9:7E:F2:F4:39:5C:7B:67:9F:EB:AF:1F:20:D7:39:FF:73:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 74B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68EFFABAB10511EEBD8B4168775412E6.roa
Signing time: Fri 12 Jan 2024 04:45:29 +0000
ROA not before: Fri 12 Jan 2024 04:45:25 +0000
ROA not after: Fri 13 Dec 2024 04:45:25 +0000
asID: 140227
IP address blocks: 154.205.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29879 (0x74b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:45:25 2024 GMT
Not After : Dec 13 04:45:25 2024 GMT
Subject: CN=65a0c3e9-d12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:54:81:c8:14:79:c4:ae:74:f7:32:b5:81:
78:85:20:5b:5a:d0:28:a3:68:b2:fa:6c:61:92:57:
f9:e5:6b:bf:5b:e1:00:fc:76:5d:62:5c:ea:7f:e2:
c3:6f:9d:61:2c:2b:72:25:6b:0e:48:03:a6:9b:35:
a4:3a:ab:c6:d0:0b:7d:48:56:e7:30:19:6f:3d:dd:
46:4b:c7:9c:60:95:fc:bc:85:8e:95:32:21:d0:9f:
9f:c1:bb:ca:c7:2f:84:e4:3b:f2:21:9a:a7:55:1e:
e0:77:48:d2:a7:f9:63:52:0d:70:95:22:51:c9:9d:
bd:04:a2:5c:49:8a:cf:d8:99:75:fb:f2:2c:d6:7e:
83:27:85:cc:f1:81:fc:29:b3:9c:e2:52:18:96:3b:
68:73:a8:db:6b:d6:d4:1d:4b:ec:6d:ea:85:d2:8d:
17:b1:a8:01:fd:e6:21:b8:0a:c8:a0:16:75:a0:93:
bb:59:ea:fd:55:5b:ec:40:6c:8a:d6:71:a2:30:b9:
21:99:e0:6e:97:d0:c6:35:c5:3b:cc:3a:72:ef:d1:
3e:35:c9:6e:82:be:86:ea:f9:b1:7e:de:d2:5d:c1:
d1:0e:f5:92:82:78:fc:47:4d:91:89:44:f0:47:6d:
60:60:eb:32:60:3c:b0:e6:0e:16:a8:62:0f:60:cd:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:C9:7E:F2:F4:39:5C:7B:67:9F:EB:AF:1F:20:D7:39:FF:73:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68EFFABAB10511EEBD8B4168775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fb:ec:4b:15:1a:b5:f4:2b:2b:3c:33:0b:23:89:90:b2:03:
5b:52:2c:1e:e6:88:5b:6f:81:22:64:41:9e:77:05:6d:6c:be:
b4:d6:df:da:7a:50:80:93:9f:78:ed:23:5d:b6:c9:0f:a0:d2:
c0:23:99:95:85:94:c9:7b:a5:04:1c:cf:9f:ec:96:58:15:b8:
e0:cc:ac:d6:a4:4e:23:36:7f:0e:40:11:2e:ad:b7:e8:1e:02:
b9:d8:65:d1:4c:45:8e:38:16:de:42:83:0f:66:28:91:70:88:
36:89:ac:59:12:49:3c:b0:42:cc:1c:cf:90:c9:d8:53:25:f9:
84:96:b2:7d:6c:1b:a5:4c:ac:c8:2c:81:52:c7:11:70:d7:a7:
0b:30:e9:c8:ac:86:a7:9c:14:dc:28:ae:4f:e3:88:fa:a4:66:
cb:f5:8f:74:1a:91:de:48:6b:7e:26:83:b1:57:41:06:2e:a1:
2d:39:e5:99:f0:be:37:37:57:6c:79:bc:bb:5c:93:4b:af:30:
76:ea:54:9b:15:ba:c8:59:94:4a:ea:89:1d:17:4e:ad:37:c2:
9c:5b:0d:fb:72:22:9a:02:8d:89:50:81:3f:eb:a2:1a:f6:8a:
b6:b2:b7:dc:aa:ae:8d:f5:aa:87:80:67:46:33:b0:96:5d:08:
4c:26:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:27 2024 by rpki-client on console-fra.rpki-client.org