Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC9FEE1A131F11EF84108439017001B1.roa
File: AC9FEE1A131F11EF84108439017001B1.roa (raw, json)
Hash identifier: zlG5mu8rtwzJ50VU7L8Xd/JSib7pr8ZhspYGuOiVLIk=
Subject key identifier: D7:99:1A:3B:B4:9B:AE:18:B8:0E:F1:F4:F4:17:26:9A:EE:3A:20:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B80E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC9FEE1A131F11EF84108439017001B1.roa
Signing time: Thu 16 May 2024 01:00:23 +0000
ROA not before: Thu 16 May 2024 01:00:19 +0000
ROA not after: Tue 19 Nov 2024 01:00:19 +0000
asID: 140614
IP address blocks: 154.196.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47118 (0xb80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 16 01:00:19 2024 GMT
Not After : Nov 19 01:00:19 2024 GMT
Subject: CN=66455aa7-4b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:40:52:3b:77:ed:89:41:41:12:0a:c8:7b:
8c:20:dc:1a:05:e7:c3:84:78:c1:69:3c:9b:70:ff:
8c:ad:70:75:21:2a:e0:ee:3c:d0:b7:6a:e3:11:b0:
64:00:2f:6e:9f:06:11:3b:6d:bc:6c:89:51:20:28:
68:f6:57:7e:aa:be:6c:a1:70:6a:9f:e8:e8:3c:b4:
ed:fb:b6:7b:4d:0a:f4:a1:95:98:08:75:b7:f2:94:
8e:09:0e:71:78:e0:85:74:12:d2:96:1a:e1:be:1f:
33:f7:da:8f:b9:c9:a2:70:e9:54:09:83:93:ff:27:
fa:73:0c:33:98:1b:a1:c2:a2:83:40:84:74:e2:ae:
ff:a9:a9:f7:34:b2:c4:b8:a1:27:0a:1b:d7:36:c7:
f2:76:b9:4b:83:6a:09:eb:7a:30:b4:89:10:4c:f7:
74:83:a3:07:66:58:26:b2:74:86:8a:e1:79:66:a9:
f2:85:75:8b:a4:25:e6:11:04:a5:25:47:fc:82:4b:
f6:61:ed:cf:e6:6e:45:c5:3e:86:b3:90:df:51:94:
04:dc:63:ea:22:07:a7:dd:e4:61:04:44:40:42:5b:
a1:a1:07:82:99:69:f9:ec:0c:ca:8f:0a:fd:e8:b3:
df:12:4d:6f:2b:66:e6:fc:1a:5d:93:2b:43:8d:90:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:99:1A:3B:B4:9B:AE:18:B8:0E:F1:F4:F4:17:26:9A:EE:3A:20:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC9FEE1A131F11EF84108439017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d9:5f:2f:11:c6:34:5e:cb:67:20:39:e0:77:bd:e7:d4:41:
fd:d2:63:79:81:34:d4:14:fe:11:3a:43:05:4d:7d:a4:e1:06:
1e:5b:a0:61:b4:95:07:75:f8:29:2f:93:7b:de:21:9b:59:4d:
43:64:a3:d6:9f:6e:64:9f:fb:7e:99:33:d2:70:28:53:b3:84:
3e:27:fb:8f:a8:54:9c:66:ed:16:f1:c5:f9:31:3f:62:89:af:
ee:91:74:44:cc:02:ff:19:f2:ac:66:49:a8:07:17:31:39:94:
ad:05:01:2d:75:9f:3f:5a:c2:17:81:1b:95:d6:b0:80:cc:92:
97:6f:55:e5:69:1e:2c:28:f5:97:94:53:cb:ed:fd:88:dd:ca:
2b:ea:93:73:e7:b4:68:7d:ac:b5:f3:ed:be:11:e5:40:24:d9:
68:24:e3:d2:f6:20:57:1d:b1:a5:77:11:d9:f0:de:e7:3c:63:
bc:1c:4a:4a:14:39:4e:06:de:8d:c2:d9:62:7c:28:80:63:33:
c1:da:1d:1d:3b:6e:57:31:6c:5e:4b:11:bb:42:57:2f:29:ee:
c2:fb:1c:cd:c3:2c:3d:cf:b5:95:74:dd:a6:0f:97:03:a4:7c:
68:72:e6:66:21:33:e5:08:b5:b9:e0:d1:ef:ff:69:8f:c5:1f:
0e:aa:ec:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:15:29 2024 by rpki-client on console-ams.rpki-client.org