Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABBE7BCAB10311EEAF2A5865775412E6.roa
File: ABBE7BCAB10311EEAF2A5865775412E6.roa (raw, json)
Hash identifier: +PxlBKmUr9n9z980s5UYX8w9m1WRLB2UqrRqhdBqKro=
Subject key identifier: E4:31:F9:B0:97:F3:30:C7:8E:14:FE:37:DE:6F:DE:60:DF:C3:E3:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 74A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABBE7BCAB10311EEAF2A5865775412E6.roa
Signing time: Fri 12 Jan 2024 04:33:02 +0000
ROA not before: Fri 12 Jan 2024 04:32:59 +0000
ROA not after: Fri 13 Dec 2024 04:32:59 +0000
asID: 140227
IP address blocks: 154.205.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29865 (0x74a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:32:59 2024 GMT
Not After : Dec 13 04:32:59 2024 GMT
Subject: CN=65a0c0fe-4213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:1f:04:d4:f1:73:b8:23:70:6e:24:ea:60:
f9:26:e9:9d:6b:5d:d7:74:67:ef:f5:74:1e:12:65:
6c:ab:04:ae:c1:ef:af:1a:c5:d0:bb:d5:cd:3f:25:
c5:4f:c9:d3:5a:be:02:bc:97:fb:66:3d:6f:c7:6d:
58:25:80:67:a1:ad:69:08:f7:93:e5:74:09:0a:1f:
b1:10:42:c1:cd:ed:21:0b:25:01:af:f8:a6:27:40:
7c:aa:a3:b7:fe:74:26:54:ba:c9:b0:c3:00:23:a7:
da:d5:5d:ba:54:7b:ba:82:77:a2:0b:0b:55:63:19:
36:50:b3:e9:86:fe:33:a3:96:5c:05:f5:36:e2:6c:
db:f6:25:06:b1:45:bf:8d:d9:3a:d7:1e:b4:f7:e1:
57:0c:7b:76:08:90:cf:52:0d:a3:18:ce:56:41:1f:
e2:27:91:74:47:c4:cc:a0:72:88:c4:81:14:ba:0a:
94:33:ca:83:d6:a4:48:65:7a:f1:c0:e0:3d:be:30:
19:67:de:0f:d7:70:a2:8a:45:1b:2a:1a:48:73:55:
94:db:63:f7:55:3d:5f:76:ae:7c:71:9f:97:16:ca:
a9:28:32:9d:00:87:91:c4:46:c6:02:0d:13:3a:ee:
d0:ca:24:5b:c7:f3:ad:c5:a0:fb:ef:a9:aa:4a:b6:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:F9:B0:97:F3:30:C7:8E:14:FE:37:DE:6F:DE:60:DF:C3:E3:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABBE7BCAB10311EEAF2A5865775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:72:52:e3:37:04:cb:c5:5a:e0:bb:9d:e3:4a:e7:ed:cc:ad:
6c:5b:76:9a:8e:fa:f7:fe:3d:b3:15:53:45:68:32:69:cd:95:
c7:6c:77:53:af:62:63:6e:3b:68:5d:a5:d1:da:7d:7f:51:cd:
63:83:d9:15:b5:b3:78:ad:6f:3c:f3:ac:3e:56:b9:57:c0:a9:
92:fe:71:fb:53:a9:e6:78:bb:64:ef:c1:26:b7:04:62:c7:29:
aa:bb:e1:39:d5:8a:7b:54:cb:67:a9:9a:df:3c:a7:02:9f:75:
e5:1b:13:ba:c3:6e:d7:94:77:54:65:d0:56:49:74:b2:58:9d:
fe:e2:60:17:74:5c:ed:6e:f4:89:eb:5c:8e:42:bd:65:f4:b5:
6f:f1:46:7a:b7:8b:c7:9b:c8:cb:d0:42:8c:f7:80:69:83:19:
fd:84:b8:57:92:70:56:d7:9d:d0:9b:5b:4a:98:8a:69:82:fa:
56:8e:f5:2f:49:9b:2f:51:55:39:05:8a:45:1c:d1:e6:b8:c1:
83:85:32:aa:86:91:c5:40:2b:ed:01:ac:08:51:5a:38:68:ca:
64:ed:af:97:74:d3:28:d1:a7:b0:53:ea:9d:18:e1:c8:8a:88:
9a:69:1c:3c:0b:b9:41:97:5d:01:3f:1b:5f:ca:de:2a:fc:c9:
28:db:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:18 2024 by rpki-client on console-ams.rpki-client.org