Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D3C446A91811EE84EEE67E775412E6.roa
File: A6D3C446A91811EE84EEE67E775412E6.roa (raw, json)
Hash identifier: 732QJol3fRnnFy1LE3qrN3RhE4IeFLBKyFpiBIYv9Qc=
Subject key identifier: 7A:3A:40:4B:03:61:32:6A:C3:11:4E:9F:8A:80:0F:5E:15:63:42:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6CDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D3C446A91811EE84EEE67E775412E6.roa
Signing time: Tue 02 Jan 2024 02:43:04 +0000
ROA not before: Tue 02 Jan 2024 02:43:01 +0000
ROA not after: Mon 30 Dec 2024 02:43:01 +0000
asID: 328608
IP address blocks: 154.195.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27866 (0x6cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 02:43:01 2024 GMT
Not After : Dec 30 02:43:01 2024 GMT
Subject: CN=65937838-2926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:e2:ab:e0:e2:34:5f:9f:02:1d:24:32:c7:
4f:39:8d:5d:1b:ee:29:a4:a8:fa:40:ad:d8:92:db:
66:3d:ab:72:58:00:ab:e6:34:79:04:1b:ba:ce:b0:
79:c8:80:6e:9a:32:58:f0:6e:59:cb:b3:7c:13:5f:
90:d2:02:82:a5:98:69:1b:91:79:25:36:50:61:10:
40:f6:af:f2:66:b4:6d:26:34:cc:20:ae:6d:aa:57:
e4:4c:0d:8a:1b:d1:2b:26:12:87:2d:ed:cc:45:89:
2c:31:b8:80:c2:4a:47:c9:a4:54:ef:5d:d1:f6:00:
b1:91:a9:b6:58:ea:b2:de:ce:9f:a0:f4:7d:66:f8:
32:d3:11:44:eb:77:e1:5f:77:3e:f2:6e:1e:f7:7d:
44:88:34:35:4d:4e:cf:2a:73:44:a1:30:0d:b8:93:
96:52:cb:6d:b9:5f:78:52:4a:58:5f:6d:50:7d:14:
51:a2:59:e5:c9:59:4b:06:06:81:c2:e5:83:aa:7d:
f2:84:0d:c2:1a:00:79:40:f0:fd:a3:79:db:55:ed:
1a:21:27:a8:26:96:31:2e:0c:6d:2c:a0:10:91:73:
e8:97:69:f5:c5:25:aa:6c:67:3b:bf:90:da:a2:59:
05:66:15:92:1f:77:d6:6d:67:76:5d:f9:7b:30:8b:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:40:4B:03:61:32:6A:C3:11:4E:9F:8A:80:0F:5E:15:63:42:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D3C446A91811EE84EEE67E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.4.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f1:e0:d5:f4:b2:82:74:72:72:7e:7e:13:34:8f:1f:01:05:
6c:73:48:d4:37:9c:7e:85:82:bb:01:5e:c8:ca:ec:5b:97:93:
13:4e:be:06:ad:d5:32:04:08:35:fe:06:43:9a:d1:76:4a:6c:
c6:23:3c:99:91:67:de:a3:89:71:e1:aa:c9:97:f0:ed:2e:7a:
2d:9f:2d:b3:07:d1:77:80:c0:84:42:8d:40:19:52:ab:00:53:
e6:a1:fe:68:f5:0c:0d:dd:06:b8:4e:ee:43:bf:c4:a1:40:54:
65:b0:a1:8b:3d:21:5f:a5:ec:9f:0c:13:14:78:25:c0:a1:e6:
7e:82:5a:e0:2d:4d:c9:d2:d9:46:eb:53:ef:5d:5a:b3:f0:7d:
1b:4a:5f:16:cc:ef:89:84:98:4c:0f:62:d1:d3:98:1d:e0:ec:
33:be:34:e0:1f:a1:ad:fd:6e:67:4e:1e:3a:78:48:f1:b9:58:
32:07:9d:57:db:a4:6f:82:d9:53:36:e0:97:46:a3:50:65:ac:
a6:e2:55:b2:33:12:98:2c:7a:c2:59:f2:40:1a:16:62:1e:da:
a5:fe:86:1f:cb:50:2a:1e:ff:7d:f2:a4:5a:b4:fd:97:f6:12:
2c:0b:af:66:47:84:79:8d:1c:cc:24:69:ef:17:7b:f9:67:20:
05:ca:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:25:02 2024 by rpki-client on console-ams.rpki-client.org