Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4319A32E28A11EE946EDEAC775412E6.roa
File: A4319A32E28A11EE946EDEAC775412E6.roa (raw, json)
Hash identifier: UdrWTc5pp6i6KdI0OSSb+x0FJhiZjhaBAwJuqJdVMO0=
Subject key identifier: 7C:EE:98:7D:3A:F3:C3:37:DB:07:C9:C1:AB:4D:03:07:C5:AA:1B:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A179
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4319A32E28A11EE946EDEAC775412E6.roa
Signing time: Fri 15 Mar 2024 05:12:39 +0000
ROA not before: Fri 15 Mar 2024 05:12:35 +0000
ROA not after: Fri 20 Sep 2024 05:12:35 +0000
asID: 2914
IP address blocks: 154.214.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41337 (0xa179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 05:12:35 2024 GMT
Not After : Sep 20 05:12:35 2024 GMT
Subject: CN=65f3d8c6-9bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:73:4d:16:e5:af:55:74:6d:2f:8c:75:60:
4a:f8:c4:1c:4f:4f:f6:06:ac:b5:dd:35:bc:77:61:
7e:fc:a0:be:df:f3:a5:ed:92:31:30:59:25:11:6d:
98:8f:99:00:e5:2a:93:84:cb:c7:17:bc:42:c6:20:
ab:3a:7a:41:b8:04:aa:31:cd:93:a1:7a:35:e3:4f:
ed:ea:00:ce:66:16:f9:da:13:62:f7:6e:3d:b6:13:
39:93:ad:b3:5b:de:e5:6a:f0:30:6a:5c:56:fd:18:
fe:bb:5b:64:eb:77:d2:94:60:52:1b:4e:dc:f8:07:
31:06:47:23:03:f2:6d:ea:66:c4:4c:d8:ec:ae:82:
a7:71:43:22:d6:11:d2:78:56:47:77:34:ab:64:01:
3d:51:f1:38:ca:60:8c:20:7f:58:ee:03:38:d7:a7:
0a:00:28:83:2e:44:60:8d:16:0e:a5:f8:c0:bd:4d:
7e:13:5f:4b:a7:47:a0:d4:c0:cc:29:4c:d6:23:6e:
bb:16:ed:93:be:1b:3b:69:f7:48:0c:c8:e8:e2:41:
62:36:00:cf:ee:5b:8e:eb:38:ba:ce:88:f6:74:01:
96:e5:fa:87:97:64:f6:2a:e5:a0:1d:0a:79:76:d8:
e6:0f:fe:8e:b0:9d:b6:4e:e9:60:37:1f:cf:fe:8e:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EE:98:7D:3A:F3:C3:37:DB:07:C9:C1:AB:4D:03:07:C5:AA:1B:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4319A32E28A11EE946EDEAC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.219.0/24
Signature Algorithm: sha256WithRSAEncryption
54:aa:2d:20:19:46:4a:ab:ed:09:0b:2d:54:e4:aa:37:42:47:
97:83:6f:41:a4:59:47:c4:94:6f:15:00:2a:67:af:d4:ed:12:
fd:9e:d4:32:1e:c8:12:e9:c8:8c:0c:bb:b5:74:d8:43:97:5f:
95:98:f8:48:5d:d9:c8:0d:60:75:82:46:a0:3f:0c:51:38:08:
16:fd:b6:aa:74:d7:4c:71:40:66:79:5e:d8:3c:37:35:bf:8a:
bb:a0:b0:b9:0a:11:6b:dd:0b:2d:1d:7d:bf:51:26:5a:b4:7e:
f8:05:45:ac:1b:52:c3:cd:00:69:c0:e1:b5:9f:c4:2c:63:e7:
ae:84:72:f1:0f:e5:4d:5c:52:65:44:3c:5c:a3:4e:79:ea:13:
04:f2:93:da:9b:57:20:80:c8:d9:7a:57:24:11:7a:2c:3a:a3:
0e:b3:c3:5f:36:27:e4:f0:3e:43:2e:5a:ff:6d:92:da:6f:32:
9c:6d:3e:2f:9b:28:b5:63:c2:6d:b0:56:f3:79:b1:2e:25:ea:
d4:67:c6:2c:8a:6a:07:58:b5:64:2d:34:bb:f3:1c:8c:6e:31:
0a:d1:09:48:09:30:3e:8f:d3:a9:76:3d:c0:95:80:c9:81:6a:
2b:0f:09:a8:d8:a7:21:d4:c3:62:89:0a:c7:29:8f:2a:3f:0b:
b5:d8:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:34 2024 by rpki-client on console-fra.rpki-client.org