Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CA7BDAF17411EE99192C73775412E6.roa
File: 83CA7BDAF17411EE99192C73775412E6.roa (raw, json)
Hash identifier: 0IF1rZLOe+mCaUOdk2uP5MeBInyG/BKOZgJAXQYRo4o=
Subject key identifier: 75:86:6B:82:F9:3E:AD:89:2B:F7:96:15:14:0C:F5:8B:49:F0:31:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A944
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CA7BDAF17411EE99192C73775412E6.roa
Signing time: Wed 03 Apr 2024 04:42:02 +0000
ROA not before: Wed 03 Apr 2024 04:41:59 +0000
ROA not after: Sun 05 May 2024 04:41:59 +0000
asID: 150698
IP address blocks: 154.197.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43332 (0xa944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 04:41:59 2024 GMT
Not After : May 5 04:41:59 2024 GMT
Subject: CN=660cde1a-efcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:00:0d:ef:f5:9e:7a:c1:46:87:fd:0e:07:
76:a6:b9:d3:b0:48:60:b3:8a:99:90:98:88:a3:9a:
83:47:80:25:24:9c:6c:91:a1:40:16:7a:79:3d:44:
20:df:be:12:59:d0:98:88:29:b8:84:4b:e0:94:d3:
21:cd:16:c3:3d:4b:43:9b:c7:cc:d8:3c:07:70:f3:
89:39:73:6e:5a:a6:e5:66:18:33:85:e1:16:39:b2:
29:af:ce:63:9f:48:56:22:1c:56:0c:b6:49:0d:ef:
a8:ff:ff:41:f9:97:c9:e7:f8:0f:ec:0d:d6:46:dc:
25:34:3a:f9:71:53:54:8b:fd:0b:ac:1f:c1:43:ff:
03:bc:27:73:db:d4:5b:97:c4:46:ab:f2:87:79:e6:
20:52:de:05:27:f5:95:af:31:07:2f:92:97:a3:18:
03:c7:d2:7c:01:56:21:10:69:2b:fd:22:01:82:82:
08:b8:2b:b3:89:a7:a9:98:6d:26:e4:f6:a2:39:a5:
23:76:ab:e9:77:0f:ea:de:ff:9f:53:f2:63:3a:5b:
03:a8:86:ec:e5:6b:b5:6d:dd:dc:74:48:f2:f3:cc:
81:28:fb:70:61:09:71:ec:2a:0a:bc:f9:74:8e:ec:
39:0c:d5:25:45:68:d5:7e:70:cd:ff:b0:e1:53:85:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:6B:82:F9:3E:AD:89:2B:F7:96:15:14:0C:F5:8B:49:F0:31:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CA7BDAF17411EE99192C73775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.73.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f9:b4:fb:a4:e6:cd:f2:ae:4d:05:67:72:7e:36:70:54:40:
25:f5:c8:29:1e:da:60:de:7f:65:40:ba:e1:d9:66:71:1a:63:
c3:fd:b8:05:4f:3a:b1:f5:1d:2d:b8:c7:b6:f5:fe:35:de:fe:
ee:86:54:1f:fc:1d:7e:3f:d8:a3:3f:82:5d:a1:b1:56:7f:3e:
e5:7f:fc:94:64:f5:d5:68:84:97:f2:17:91:c0:c4:18:8b:d0:
bf:0e:7f:26:23:61:95:ee:ec:9f:a3:dc:7e:96:68:62:b6:cb:
aa:89:89:a6:78:f9:b8:dc:4c:53:2c:de:90:4d:2d:9c:e5:1c:
f9:3f:42:c7:7f:db:03:11:3a:b2:5e:5c:27:aa:e9:cd:20:fb:
70:42:c7:3c:ea:bd:66:e4:dc:13:66:f1:e4:54:43:be:5f:6e:
f3:12:ef:de:d4:fb:86:e4:4b:d1:fd:81:c9:c1:39:da:47:45:
81:0c:4f:b1:da:4d:82:8e:b8:27:05:53:91:d5:be:8d:73:52:
3c:27:2b:14:4e:fc:ce:df:f2:c3:68:e1:60:39:66:f3:97:a7:
fb:41:d1:d6:93:f7:c5:aa:8a:e3:b6:3a:a3:dd:e8:6e:db:2e:
df:33:98:e7:e7:b7:6c:8a:dd:56:d2:27:ea:6c:a4:1e:ca:fd:
4c:42:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org