Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74903D7CE9A811EEBC334171775412E6.roa
File: 74903D7CE9A811EEBC334171775412E6.roa (raw, json)
Hash identifier: e9bqpUXFQ0dBl7qFro+RDp0OorHEju9W8ZwQE80XPN8=
Subject key identifier: 62:6C:4C:19:15:12:3B:9D:C7:18:9D:7C:10:0B:28:F8:34:57:9B:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A65E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74903D7CE9A811EEBC334171775412E6.roa
Signing time: Sun 24 Mar 2024 06:33:41 +0000
ROA not before: Sun 24 Mar 2024 06:33:38 +0000
ROA not after: Sat 04 May 2024 06:33:38 +0000
asID: 272854
IP address blocks: 154.197.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 06:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42590 (0xa65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 06:33:38 2024 GMT
Not After : May 4 06:33:38 2024 GMT
Subject: CN=65ffc945-101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:5b:0f:47:40:d3:54:26:4b:db:08:f0:e3:
38:98:a3:c1:1d:e9:69:90:49:61:6b:b7:3b:c7:a2:
b4:5b:58:21:5f:12:26:d6:18:07:f9:f2:59:dc:d9:
cf:3d:0d:6c:ad:75:33:6a:c5:c0:09:2b:f2:94:f8:
7a:66:85:a8:b0:9f:cc:12:f7:78:25:08:14:1d:20:
97:84:ea:f4:ab:c5:b6:9f:20:fc:6c:0c:a2:bf:ef:
f8:8b:e3:ef:f8:fa:f1:02:9e:b2:fc:dd:29:00:16:
b1:e5:ca:2e:a1:2c:e4:70:09:bd:36:63:fb:2b:77:
07:03:d6:0a:60:fd:88:57:c2:14:29:cc:c0:d5:98:
c8:15:b0:e8:c5:47:5d:70:ea:a8:f6:a5:19:b3:42:
e1:30:e0:17:99:b2:65:ad:f1:af:53:5e:cb:bd:10:
dc:a7:f6:14:ec:ad:dd:8a:f9:25:25:fa:eb:5c:a0:
63:00:ec:bd:fa:a8:9f:52:63:ab:ba:45:d3:35:28:
e1:5e:56:cc:47:a6:69:40:89:2b:44:6c:46:2f:ff:
7d:b8:d6:aa:da:d9:c3:f6:a7:6a:40:85:ee:40:f9:
b4:51:a8:b7:73:70:ec:25:05:cb:bc:ad:25:33:c7:
bc:77:3d:73:67:ea:25:67:38:41:4d:ff:cc:78:f6:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6C:4C:19:15:12:3B:9D:C7:18:9D:7C:10:0B:28:F8:34:57:9B:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74903D7CE9A811EEBC334171775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a3:3b:35:3d:8b:ac:ba:ca:13:86:74:fc:cb:fd:82:bd:73:
3b:01:6d:ee:5c:ef:bc:40:c2:f1:7b:89:e8:d7:68:b8:36:de:
0a:c6:68:5f:20:93:ce:65:8c:70:74:fe:36:8d:15:b7:7c:c2:
38:a1:c7:fa:1a:ae:4c:6c:3d:37:eb:a7:c4:55:0b:25:61:82:
37:7b:de:e0:95:3d:83:12:bc:a0:53:ba:e8:1c:9b:2e:64:fb:
b9:76:4e:df:16:9b:db:f3:68:40:c6:07:b2:7e:2e:1b:c7:27:
60:ca:4c:84:72:c3:58:90:f6:90:cf:e4:56:ca:cb:73:3f:c1:
3e:74:44:10:b5:fd:ce:37:fb:b0:d3:9f:1f:98:ee:78:3b:c4:
97:bd:1b:99:93:46:4f:09:15:3a:51:22:a4:fd:31:0d:96:30:
a3:af:a2:fe:c9:db:2b:e4:76:bd:b0:38:5f:cc:22:b3:10:2d:
8e:12:2d:b0:4c:f0:93:1b:c5:61:06:d9:c2:f7:79:95:76:c7:
c4:33:a2:0c:20:50:d3:fd:5a:3e:fa:ad:73:67:11:44:40:3a:
7c:ec:36:6b:5d:b8:46:83:55:22:a6:2b:51:6d:e0:07:c8:32:
27:49:91:46:27:73:bb:62:b5:c6:c7:3f:2d:d5:53:de:98:07:
e9:02:cb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org