Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/705E6ECCF47A11EEB9DC8E8F775412E6.roa
File: 705E6ECCF47A11EEB9DC8E8F775412E6.roa (raw, json)
Hash identifier: Xj51LAxj1prOwt5eOsXs5wupPox2sCmDpwQVlk1kUj8=
Subject key identifier: B9:A9:19:5E:36:09:3E:93:12:77:9D:30:60:D2:B4:44:9E:CD:98:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A970
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/705E6ECCF47A11EEB9DC8E8F775412E6.roa
Signing time: Sun 07 Apr 2024 01:02:01 +0000
ROA not before: Sun 07 Apr 2024 01:01:57 +0000
ROA not after: Sat 06 Jul 2024 01:01:57 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43376 (0xa970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:01:57 2024 GMT
Not After : Jul 6 01:01:57 2024 GMT
Subject: CN=6611f088-5643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:b7:3a:43:92:24:50:17:6b:cf:f5:69:db:
10:f9:03:c9:7a:e6:2f:29:2d:b6:81:3e:48:c2:38:
f4:72:6d:67:2a:86:ae:ef:f7:61:09:8c:a7:9b:d7:
d0:42:87:cd:b7:46:56:e5:ea:9d:e4:f7:3a:b6:eb:
bc:41:14:a1:d4:ba:55:26:65:66:30:6b:dd:e2:80:
15:38:25:e4:8a:fa:08:59:34:4a:3b:ff:c9:55:69:
be:1f:70:b9:2b:d0:3f:1c:2a:24:e3:7c:22:4f:a8:
dc:da:50:8b:7d:4e:15:f7:3b:3f:ec:04:86:70:2e:
3d:8b:ba:f9:9d:8c:71:7b:52:f3:f3:39:d6:04:45:
71:bf:8f:61:78:10:aa:85:00:40:7a:f0:2b:70:03:
84:d5:57:62:06:d5:7c:ca:a1:c7:d7:5f:e9:ca:ee:
3c:a3:ad:81:a0:a8:ae:3a:22:62:94:46:ec:01:e9:
3d:8a:2a:c4:42:5d:8f:fc:31:63:0a:81:55:32:e2:
c9:c0:18:bc:21:e5:b7:9e:70:86:72:bf:1a:56:1e:
d0:57:98:28:e1:7f:a2:10:7e:52:4f:a2:34:37:80:
c7:9f:4d:61:a5:48:45:98:37:9e:06:66:88:71:9d:
f9:36:15:73:68:69:eb:ed:50:5e:9f:96:55:78:61:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:19:5E:36:09:3E:93:12:77:9D:30:60:D2:B4:44:9E:CD:98:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/705E6ECCF47A11EEB9DC8E8F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e0:b6:b0:4c:60:32:41:a9:10:05:21:27:9b:81:12:5a:97:
98:ba:7e:f6:fd:0a:0e:be:e2:ff:ee:bf:09:17:e1:a2:94:ca:
15:66:82:37:a5:ee:0d:4c:e7:1f:04:73:27:6d:78:62:c7:0b:
b4:d7:d1:fd:23:90:e5:67:f0:d0:44:ed:19:77:28:14:93:c6:
8b:e8:4f:87:75:ba:b4:59:b8:a7:53:21:a6:5e:04:e3:69:e7:
45:01:7c:99:e7:63:74:d5:70:0b:0f:56:c6:e3:75:ba:26:5a:
2e:87:84:ff:24:77:15:58:5a:c7:b1:0a:6e:bb:80:55:08:3d:
43:bc:ae:9b:29:99:c6:67:27:a7:68:4a:4d:95:a7:ff:57:75:
ce:51:5a:45:95:0b:93:00:85:c6:7d:b2:59:36:b5:12:f5:69:
63:78:a6:b1:d8:de:35:36:0a:b0:a8:b9:75:12:39:5a:44:c4:
e0:98:65:b6:cb:d2:f2:48:cd:06:4f:eb:2e:ac:6b:e7:52:47:
26:02:94:ce:05:00:d5:60:1d:9d:7c:59:70:79:d6:20:3d:26:
f4:72:eb:45:b2:26:af:27:ab:b2:79:ef:3e:a8:12:c1:03:ed:
9a:ed:01:3f:f9:e2:c5:0e:32:79:c6:e7:9e:7e:a3:a4:0a:d8:
75:2a:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:27 2024 by rpki-client on console-fra.rpki-client.org