Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D91F5BED15811EEAAC4788C775412E6.roa
File: 6D91F5BED15811EEAAC4788C775412E6.roa (raw, json)
Hash identifier: oqruBS7N6/lFS0PsMsWfNXRrSQ/45HjHtqHGfff7ApM=
Subject key identifier: 2C:CD:EF:FB:73:40:97:DA:85:08:48:28:6E:17:B9:FA:27:F1:90:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8D1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D91F5BED15811EEAAC4788C775412E6.roa
Signing time: Thu 22 Feb 2024 08:00:22 +0000
ROA not before: Thu 22 Feb 2024 08:00:18 +0000
ROA not after: Sun 23 Feb 2025 08:00:18 +0000
asID: 197730
IP address blocks: 154.208.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36123 (0x8d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 08:00:18 2024 GMT
Not After : Feb 23 08:00:18 2025 GMT
Subject: CN=65d6ff16-be0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:a6:d0:c1:30:2c:7f:ff:ed:48:26:6b:fa:
a2:10:c3:93:7e:c1:94:22:7f:d5:a2:eb:b6:10:5c:
8f:67:93:07:a0:12:6c:ba:89:01:90:7e:26:f7:a3:
c2:0c:ca:de:74:90:4e:cc:4e:e8:c0:17:2a:ab:2d:
70:1a:ee:0d:ae:ba:98:6d:e6:eb:b5:8c:65:53:33:
d6:bb:3e:d7:74:e2:c1:1e:9c:15:f3:fc:8d:f9:27:
6b:35:63:0a:6e:86:55:25:1b:18:cd:99:00:52:66:
af:8b:54:a2:c9:2b:1e:ca:ac:da:81:e4:6e:08:7f:
9d:c9:07:79:f7:09:85:60:13:40:6c:31:46:f5:7e:
a4:8c:0e:00:6c:a0:59:cf:6c:7b:0a:1d:af:20:03:
22:60:a9:a2:ef:30:18:87:97:c7:29:04:c0:b4:3e:
1b:a1:2b:3f:ed:7d:8c:25:70:ba:81:a9:a3:b8:d3:
42:fe:a0:d3:a7:d3:c4:75:20:37:84:33:63:9f:cb:
3a:fe:3f:84:ef:cb:97:ee:f8:c7:82:6a:23:94:9b:
d4:29:b0:54:75:07:23:ff:c4:79:48:2d:ab:72:bf:
c7:9e:a5:ee:37:f5:ec:30:39:ab:b5:d9:ce:40:dc:
48:b0:00:42:e5:c4:4e:e6:77:5f:af:91:6d:d7:43:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:EF:FB:73:40:97:DA:85:08:48:28:6E:17:B9:FA:27:F1:90:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D91F5BED15811EEAAC4788C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.144.0/20
Signature Algorithm: sha256WithRSAEncryption
36:25:ac:ba:da:8e:5e:c1:81:03:e3:fa:37:a8:97:05:88:e8:
5a:5b:87:e1:f7:0f:cd:ea:11:1d:8b:b1:c8:ea:85:8e:50:f9:
5d:45:06:42:16:57:3f:58:5c:ea:39:60:ec:17:27:17:08:ad:
18:08:54:f2:19:d2:37:ec:9a:27:73:25:49:0c:4f:2a:39:c1:
b2:d3:9a:a1:a9:d6:7b:60:fa:36:ba:35:2c:5e:e6:5d:4c:b6:
59:65:ef:3a:ab:2d:3a:99:71:35:e4:1e:d0:a5:96:0d:d1:bd:
50:13:1b:bf:78:54:42:84:ae:fe:9b:3f:a4:74:f0:d0:54:5a:
70:66:9c:19:cc:4e:5d:c3:80:41:84:33:21:79:7b:87:ac:47:
61:2b:c0:fe:63:22:94:52:d8:2d:7c:34:2f:5b:47:2c:ff:9e:
74:7f:33:2c:86:2c:a8:d5:7e:d3:e1:26:c1:5a:fd:07:ff:8d:
8a:5d:7a:9c:95:fb:e8:a0:13:d3:53:32:62:b3:19:fc:6c:7e:
92:1f:ce:a2:2e:a3:c9:82:c1:bf:da:b2:14:f0:cd:f1:56:02:
02:ef:fb:50:a5:8a:29:a4:f4:9f:07:e0:93:d6:1e:6d:1b:bb:
ea:3f:bc:e5:ca:a3:ad:db:51:4e:63:06:14:59:42:a3:ca:27:
3b:00:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org