Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4E3B40B34A11EE8B212C7B775412E6.roa
File: 6B4E3B40B34A11EE8B212C7B775412E6.roa (raw, json)
Hash identifier: IrZT6w3GY1dm6w7bMwoAKi6EwMNDz3cVQFHz4Dsi/3g=
Subject key identifier: 3F:3C:93:1F:11:9C:53:01:2D:F1:1A:79:8D:F0:4E:34:7D:43:3C:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 754A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4E3B40B34A11EE8B212C7B775412E6.roa
Signing time: Mon 15 Jan 2024 02:04:30 +0000
ROA not before: Mon 15 Jan 2024 02:04:27 +0000
ROA not after: Fri 13 Dec 2024 02:04:27 +0000
asID: 8796
IP address blocks: 154.205.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30026 (0x754a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 02:04:27 2024 GMT
Not After : Dec 13 02:04:27 2024 GMT
Subject: CN=65a492ae-418a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:7f:a2:ba:28:44:be:5f:e5:0d:18:7d:5a:
9c:98:a9:38:5a:a0:d1:a2:ee:10:5a:af:45:bd:22:
5c:e5:74:4b:2c:ae:66:68:ef:aa:d0:9b:be:b2:3d:
cd:e0:3d:93:a9:71:60:99:dd:57:9f:b4:44:f6:32:
da:56:f2:1f:f1:0a:37:08:03:bf:fc:ce:78:52:19:
68:2c:72:c0:6f:f0:11:e8:66:ba:92:7f:7b:c7:cc:
c1:94:58:f9:9b:1e:95:cf:70:24:dd:c4:f2:f6:9b:
11:2c:a0:0d:d2:74:1a:23:d0:65:43:12:b0:6c:0e:
0f:d4:e8:4a:e3:87:ea:01:76:78:84:d8:75:94:15:
f6:8e:51:bb:93:b6:05:5e:0e:4d:c7:79:f7:c5:9a:
13:55:1a:ed:2c:f2:34:cb:7b:12:b5:02:cf:bf:4e:
1a:1e:31:72:6a:d2:29:92:e7:e6:59:76:c6:46:31:
67:55:c5:9a:2f:ba:74:71:11:92:84:c6:b8:e7:ae:
69:8c:82:f6:ef:21:b2:d1:2b:c8:3b:cc:c7:45:a0:
a0:b1:73:c0:c3:f3:58:e9:bc:22:3b:40:cc:1a:f9:
ef:6d:14:70:10:94:7d:97:cb:eb:d7:51:c6:ed:8b:
6e:dc:f6:86:0f:0b:af:40:2b:19:a2:c6:9e:c8:71:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:93:1F:11:9C:53:01:2D:F1:1A:79:8D:F0:4E:34:7D:43:3C:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4E3B40B34A11EE8B212C7B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:aa:cb:bc:78:44:9f:f7:d7:23:61:95:aa:5b:5b:b3:16:d3:
e6:02:5c:49:33:c0:63:c4:fb:cc:fd:c6:c4:2a:eb:1d:0c:b0:
7a:a7:05:74:1b:96:e9:5a:1d:59:15:20:52:b1:98:1d:be:c4:
83:c9:bc:d7:cb:fe:8f:26:72:88:01:69:50:73:7f:91:91:6c:
43:a8:6f:7c:a9:a4:78:66:e8:4e:0f:57:ec:68:fe:e8:83:72:
07:1a:99:f4:8d:38:a7:76:11:28:d6:7f:ef:df:48:bf:b1:db:
c6:ce:8c:5d:16:ca:b4:f7:43:3f:14:df:4a:50:5c:be:91:1e:
d3:63:0e:dd:ce:aa:95:0d:37:d7:41:35:68:86:0b:80:06:66:
e2:31:32:42:9a:cd:8f:19:06:1b:0c:19:e1:44:ed:74:04:7d:
92:fe:fc:6b:3d:82:09:1f:58:36:99:3e:0c:4d:f7:87:68:ca:
37:ad:f2:6a:bb:30:fe:7f:3c:96:45:20:f9:ba:94:1c:65:fb:
f2:4c:62:f1:3b:8f:8a:46:8f:a9:6e:15:05:76:74:d4:ac:fe:
c7:57:b8:04:0c:ef:97:c4:43:4e:60:b4:3b:c1:4e:df:8d:23:
57:8d:cb:a6:38:70:a6:a3:1e:d4:4a:3c:98:30:b9:55:21:48:
34:d5:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:27 2024 by rpki-client on console-fra.rpki-client.org