Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A56BD4F24811EEBD5F146F775412E6.roa
File: 71A56BD4F24811EEBD5F146F775412E6.roa (raw, json)
Hash identifier: De9OnXDMNgoXQYHSVM8VNKSBJ6NlXsRVj30Raspt8MA=
Subject key identifier: CE:1E:30:F2:96:A8:37:AF:10:08:0A:2B:C1:AB:4E:9F:49:09:D9:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A963
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A56BD4F24811EEBD5F146F775412E6.roa
Signing time: Thu 04 Apr 2024 05:59:05 +0000
ROA not before: Thu 04 Apr 2024 05:59:02 +0000
ROA not after: Sun 06 Apr 2025 05:59:02 +0000
asID: 140549
IP address blocks: 154.197.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43363 (0xa963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 05:59:02 2024 GMT
Not After : Apr 6 05:59:02 2025 GMT
Subject: CN=660e41a9-2ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:cf:3a:a3:cd:da:44:0e:2a:ed:82:6a:6c:
c3:11:2e:08:5f:ce:cd:6d:ed:4d:b0:f3:f3:f9:cc:
63:e3:5b:55:51:9e:41:ec:bb:6b:3d:37:85:16:a4:
fe:2b:b1:68:83:23:c4:6e:8e:02:90:7a:51:d7:d3:
37:49:52:ba:4f:b8:80:d6:95:50:d9:12:60:98:68:
76:32:4d:1d:00:f7:0d:4f:0a:29:35:bb:f5:0d:59:
a2:3e:bb:12:66:17:da:fe:81:38:99:a7:00:5e:c5:
ee:fc:4c:ae:cf:8f:a6:c0:44:84:51:14:e4:2b:58:
6b:72:d1:89:b0:fd:3c:3c:00:db:f1:fd:74:68:f1:
e9:7c:83:ca:85:f5:de:cb:7a:f7:9c:1f:f9:d2:9b:
7f:cd:c6:37:2a:63:96:f4:76:6c:a2:1e:8a:47:de:
f4:74:81:ad:cd:d6:de:13:bc:01:9c:f0:d3:f5:11:
31:99:78:c7:e8:77:9b:13:9b:60:cf:53:09:1f:a2:
f3:88:99:2f:8d:55:5b:67:c5:ea:8f:25:5c:0b:d5:
c3:3d:f0:76:42:4c:75:e3:4e:c9:33:a4:21:dd:85:
67:d3:ca:34:e6:c8:40:90:81:80:23:73:9f:e2:71:
03:1f:45:44:e5:f1:b7:1f:f7:b4:f6:33:e5:59:6f:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1E:30:F2:96:A8:37:AF:10:08:0A:2B:C1:AB:4E:9F:49:09:D9:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A56BD4F24811EEBD5F146F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.84.0/24
Signature Algorithm: sha256WithRSAEncryption
42:90:9f:56:46:14:bb:78:fb:bd:7b:14:c5:de:b0:30:9d:59:
af:a9:99:8e:2d:07:9b:ee:75:04:a7:57:20:1d:6d:c0:bb:9b:
05:b5:2c:83:7d:a5:2f:1d:5f:05:41:f0:0c:7c:c8:70:67:46:
d5:82:6b:85:f1:b0:9c:84:9a:ba:77:46:f2:5b:2c:26:3f:99:
f4:43:2b:d1:cf:bb:25:14:07:da:9f:ea:a6:06:6b:d6:af:84:
88:88:6e:a3:81:f5:32:6d:a1:ec:e7:5f:3c:d8:63:70:7e:71:
44:7f:f5:8b:54:e8:c1:af:0e:f7:8a:56:f0:80:e8:e5:3a:15:
31:a1:5c:a8:e8:2c:5e:05:1d:d3:b0:ce:70:fa:a6:62:3a:da:
e8:8f:58:3e:3c:55:d9:bd:79:aa:85:c1:8d:df:b6:a5:5f:7b:
28:86:5a:d8:ae:98:e2:99:b5:41:0a:08:11:77:c2:87:21:57:
ba:70:4c:c3:27:0b:08:46:27:11:dd:14:9b:6d:a4:1c:09:6c:
8a:76:d2:5f:ad:61:c6:87:94:00:53:ae:cc:d6:23:f6:f6:59:
b1:f9:25:1f:27:0e:d0:ec:bb:7a:0d:7d:b0:35:51:f3:75:52:
4e:98:02:e8:a6:57:9b:e8:14:5e:47:75:88:10:f8:ce:2b:99:
d1:0b:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org