Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C625BCB10611EE89C0416A775412E6.roa
File: 73C625BCB10611EE89C0416A775412E6.roa (raw, json)
Hash identifier: SOvetQc9VGM6l6r4UES1msi6c9YACZGYzihwfXD5wFU=
Subject key identifier: 7A:3A:8D:79:F4:DF:63:5D:A4:06:1D:AF:22:A6:33:F0:66:DE:41:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 74C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C625BCB10611EE89C0416A775412E6.roa
Signing time: Fri 12 Jan 2024 04:52:56 +0000
ROA not before: Fri 12 Jan 2024 04:52:53 +0000
ROA not after: Fri 13 Dec 2024 04:52:53 +0000
asID: 140227
IP address blocks: 154.205.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29889 (0x74c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:52:53 2024 GMT
Not After : Dec 13 04:52:53 2024 GMT
Subject: CN=65a0c5a8-2301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:b8:53:0a:d4:13:a8:c1:16:ac:fe:82:98:
2e:f2:a5:a3:9d:56:70:63:6b:14:07:24:10:b6:e9:
a5:7c:0b:d6:a7:d3:dc:95:7f:58:17:c7:fc:24:8d:
35:a9:6b:84:86:fe:27:bf:e0:f6:ac:37:16:b5:79:
02:50:6c:71:ef:5d:0d:0d:54:af:03:80:9f:be:54:
d4:fb:04:ab:46:f9:d4:b8:da:4f:90:f6:80:94:42:
7f:90:b5:96:85:8b:e8:a8:17:a4:3c:84:93:f4:23:
86:b8:79:c6:bd:aa:14:ee:7c:66:a5:35:5f:27:ec:
2c:2e:a1:18:5c:2b:4d:98:ce:59:2b:09:1d:29:ad:
e7:43:4c:0c:ab:dd:34:8c:3f:1f:5d:ba:0a:46:49:
d9:c2:72:c6:fa:8e:77:f5:b2:dc:16:a4:f1:74:db:
8a:cc:53:16:86:8a:c8:86:df:15:ca:4d:c5:31:7e:
00:c6:9f:f5:9f:7d:f3:fe:fa:ce:f1:d6:48:bc:a4:
d6:cc:87:d4:03:49:81:c9:99:3c:4b:1c:83:46:d2:
cd:b3:f1:72:73:b3:81:33:82:a3:d5:a7:9c:07:07:
fd:57:73:cd:c2:3c:4c:57:dd:4d:c0:c4:e6:96:cf:
7f:75:4c:44:07:b7:ba:34:8c:24:84:fc:67:ad:8e:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:8D:79:F4:DF:63:5D:A4:06:1D:AF:22:A6:33:F0:66:DE:41:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C625BCB10611EE89C0416A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.193.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b1:44:21:bd:b5:ad:53:b8:f5:71:c7:9b:0c:c2:32:e8:8f:
df:a3:74:4d:a2:e2:5f:f5:15:3d:5e:b8:dc:81:23:fc:57:74:
8c:14:df:e8:f8:79:b6:ee:0f:35:f2:bc:a2:24:d4:e5:fd:9b:
d2:b0:1c:e1:12:49:e2:8b:fb:ad:22:40:e8:12:c3:25:a4:ce:
ee:06:74:07:9d:af:72:f3:27:b2:67:0a:40:2a:7c:65:8c:39:
e7:9c:9c:92:0e:c1:ea:96:08:4e:a8:42:09:f0:02:d2:ff:4f:
2d:e2:0a:ae:41:c4:8a:75:ed:e8:f0:c8:1e:f2:c2:d3:42:02:
fd:e1:4b:c1:00:c3:b7:fb:57:1e:ab:40:06:bc:2b:f8:b2:1c:
f7:05:c2:0c:34:88:4f:0b:a6:c0:1b:8a:4b:05:05:d2:f2:66:
e3:d0:2e:04:25:29:95:31:c5:43:70:69:ee:e3:a2:ce:04:9e:
77:3e:f2:3f:1f:a8:fa:75:68:2c:ef:9f:30:4c:04:50:14:53:
31:81:6a:6c:bc:e4:e0:f2:e2:11:52:5a:b6:9e:19:f5:a0:4b:
7b:48:51:9c:57:f8:72:53:d2:a4:ae:84:db:5b:a2:01:db:82:
11:d8:68:76:7b:6f:a2:54:74:25:cc:13:02:56:c3:74:41:2e:
c8:57:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org