Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6E3B3EE04611EE8DC0E6AD775412E6.roa
File: AB6E3B3EE04611EE8DC0E6AD775412E6.roa (raw, json)
Hash identifier: MWdT8j3fra0aa1fI386Zy3ChgvHNQgFzHDR5HVzCjAw=
Subject key identifier: C5:11:AD:DC:AC:3B:6E:D7:25:E3:FE:13:DE:AE:D3:CC:1A:E9:F4:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A0E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6E3B3EE04611EE8DC0E6AD775412E6.roa
Signing time: Tue 12 Mar 2024 08:01:02 +0000
ROA not before: Tue 12 Mar 2024 08:00:59 +0000
ROA not after: Thu 30 May 2024 08:00:59 +0000
asID: 328608
IP address blocks: 154.194.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41188 (0xa0e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 08:00:59 2024 GMT
Not After : May 30 08:00:59 2024 GMT
Subject: CN=65f00bbe-fadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:d4:a5:e2:1b:f5:ca:f0:8a:e5:e3:ce:18:
0c:2b:81:ec:5d:42:52:a9:8c:ae:6a:8b:7c:70:eb:
8f:33:32:1e:6a:53:fc:20:f0:00:56:2b:d2:be:0c:
03:68:b9:cc:c5:4d:50:69:66:60:c1:8a:93:7f:51:
8f:12:29:c3:b6:07:e0:ef:34:64:a5:d2:04:1a:78:
29:fa:ce:ff:ce:6d:63:9e:4f:24:83:7b:16:9b:09:
97:e9:28:cb:f5:d6:f2:bc:67:c7:d7:9c:20:b7:b5:
19:b8:d5:1b:31:ef:cf:80:e9:e8:ab:7b:d5:02:a4:
21:dd:a1:83:bf:a4:62:ff:3b:51:17:d1:6c:c7:01:
29:3c:1c:51:99:6b:66:3e:17:b5:04:2b:6a:9e:98:
9a:13:c9:b5:81:5b:9e:6f:4b:bc:3d:46:2b:32:9f:
2d:6b:a7:ab:5e:70:7c:09:40:ef:e7:64:1e:a5:10:
91:f0:ea:2c:55:68:a8:c8:e6:54:ab:ae:7c:ef:85:
b0:db:1a:89:d5:90:1a:79:79:c6:87:04:18:4d:2f:
46:04:94:26:af:71:b2:07:52:84:39:01:d5:09:ea:
c7:18:0e:b4:7f:27:fc:2f:e0:c2:e8:f6:64:fc:92:
f6:5d:ec:d8:ea:b7:01:fa:e4:24:05:72:ab:e3:f2:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:AD:DC:AC:3B:6E:D7:25:E3:FE:13:DE:AE:D3:CC:1A:E9:F4:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6E3B3EE04611EE8DC0E6AD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ea:07:60:59:c6:16:f7:48:2f:4f:54:df:f1:0b:00:d0:d9:
c5:2f:97:4c:ef:d2:75:a6:98:55:78:b5:62:ab:56:1e:a5:ec:
17:ec:c0:e7:0b:9e:c7:8c:22:59:4c:bf:e4:8b:91:73:b3:4c:
83:8b:ad:76:2d:2b:f6:a2:b4:0f:e6:09:79:87:d1:4f:f1:68:
9b:f3:2b:ce:85:8d:3b:fe:d9:48:74:48:15:16:63:d5:7b:bb:
f3:be:0a:27:c4:20:1c:b1:a4:14:77:31:e3:96:ac:bd:93:df:
16:88:7f:78:61:b5:fa:cf:ba:d0:6c:89:d3:81:65:8a:5b:e7:
f7:45:57:45:44:a7:b7:f7:d0:f1:55:da:14:d5:81:16:44:dc:
94:76:de:17:81:45:02:a2:84:f1:94:88:9f:9a:b5:28:6b:20:
e3:7d:4d:c4:94:07:51:63:de:84:53:ca:0e:2a:16:b5:ae:70:
30:b0:a3:3c:b6:b4:45:74:93:80:4e:d3:56:e8:64:5d:fa:d2:
f7:e9:59:31:b2:1f:e4:f0:7d:4a:71:c0:d2:ed:2a:33:53:14:
a4:17:97:8d:74:f6:69:f6:7f:b4:0e:c0:c5:76:a6:83:e1:55:
2b:22:d0:b8:49:b4:d4:cc:d6:5b:c1:5e:64:aa:fa:16:47:8e:
d7:3a:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:29:47 2024 by rpki-client on console-fra.rpki-client.org