Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A9DD6AAB34311EEA26EA967775412E6.roa
File: 9A9DD6AAB34311EEA26EA967775412E6.roa (raw, json)
Hash identifier: el4sLIz0mK7fckMi4/ud9nSKfVjeQj3WnNCElkWtYU8=
Subject key identifier: A5:E0:AC:82:4F:84:FF:CA:67:37:28:BE:E9:4E:FE:03:C9:17:D2:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 751C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A9DD6AAB34311EEA26EA967775412E6.roa
Signing time: Mon 15 Jan 2024 01:15:43 +0000
ROA not before: Mon 15 Jan 2024 01:15:40 +0000
ROA not after: Fri 13 Dec 2024 01:15:40 +0000
asID: 8796
IP address blocks: 154.205.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29980 (0x751c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:15:40 2024 GMT
Not After : Dec 13 01:15:40 2024 GMT
Subject: CN=65a4873f-568f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:d6:a6:0c:a5:9d:a0:59:ea:2e:8f:90:59:
45:bc:07:0e:1c:f4:14:bb:92:ff:fe:21:ad:ab:d4:
d0:dd:b1:73:50:a6:8e:78:50:3a:83:a2:f8:8f:24:
dd:62:43:67:5e:95:2b:d9:b3:f1:42:06:2d:b9:26:
13:46:25:7a:6a:c2:d7:4d:67:c0:77:54:d5:f1:38:
4c:d5:dd:a1:c0:cc:83:1b:96:ea:58:56:e9:c6:3c:
c5:a7:a2:fd:82:a2:db:d8:ad:29:0f:98:e2:d7:1d:
6e:f4:e1:1e:cc:d0:19:a4:31:2a:02:6d:20:a1:57:
80:e8:d4:19:fd:c6:9a:33:fa:5c:56:65:dc:d7:64:
9a:72:d9:b4:a7:3a:ca:33:99:d4:db:56:19:9c:65:
c4:09:89:11:23:ba:9a:68:ca:c7:a5:cc:f0:c9:a9:
82:8b:25:6d:51:b9:fc:77:8d:bf:6b:71:aa:34:93:
31:b6:76:83:10:d0:70:3e:db:44:67:26:2d:fc:a9:
db:12:04:7f:9d:8b:53:2b:87:88:f7:b9:ff:a3:80:
52:81:75:8e:a8:1c:88:ea:4c:71:6e:66:54:b8:31:
36:e3:fe:e7:aa:3b:d0:dc:51:98:ee:6a:0b:65:81:
c0:ee:c7:15:37:0c:46:07:72:2a:19:e8:71:c6:1d:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E0:AC:82:4F:84:FF:CA:67:37:28:BE:E9:4E:FE:03:C9:17:D2:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A9DD6AAB34311EEA26EA967775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5d:7f:3b:70:87:ed:b9:6a:85:7f:39:79:b5:6b:26:1b:f2:
7e:60:d2:28:28:cc:71:76:68:da:3c:e4:3e:a9:56:05:53:d0:
ac:29:ec:57:87:97:da:aa:53:6e:9a:34:08:a5:03:ab:8b:45:
a6:fa:ae:9a:44:1d:29:a8:a7:50:9e:11:6d:22:7a:74:06:7e:
69:1f:aa:28:b8:e7:3b:0d:58:83:66:f5:92:dc:7c:09:2a:ca:
1b:01:80:a6:bc:5d:56:17:da:0e:c2:db:e9:5a:3c:79:25:cf:
e8:cb:fa:4b:86:68:3f:70:e8:60:65:2a:62:60:b7:01:a9:1a:
38:be:9f:b7:29:29:38:36:77:5d:73:72:0e:34:24:4d:35:ee:
54:7e:97:75:92:df:99:23:1f:b4:69:e5:d9:89:60:a4:dc:9f:
59:65:3b:7c:29:b5:87:80:e7:8f:f4:ee:6c:c9:97:10:70:30:
7c:fd:9d:bc:78:33:b6:ea:43:aa:d0:ea:05:56:0d:21:a2:f3:
d8:9a:43:bb:d7:f1:02:3d:ff:25:80:0c:6b:16:ef:4e:65:79:
b2:53:a2:e0:28:30:3c:a9:c9:e4:48:f4:07:a6:86:62:20:c5:
59:90:96:7f:fa:d8:b3:cc:91:a1:dc:4d:b6:f3:35:92:d0:7d:
34:34:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org