Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBE70F8E28E11EEBE5157C5775412E6.roa
File: BCBE70F8E28E11EEBE5157C5775412E6.roa (raw, json)
Hash identifier: 2vFxN/jZHAWJJlyxjekdetk6Il89i1Oz4W9ChRop/bo=
Subject key identifier: 7C:B8:C0:10:CF:BB:AD:43:86:33:69:6F:1D:37:E1:FC:51:E1:43:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A1A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBE70F8E28E11EEBE5157C5775412E6.roa
Signing time: Fri 15 Mar 2024 05:41:57 +0000
ROA not before: Fri 15 Mar 2024 05:41:53 +0000
ROA not after: Fri 20 Sep 2024 05:41:53 +0000
asID: 47890
IP address blocks: 154.214.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41383 (0xa1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 05:41:53 2024 GMT
Not After : Sep 20 05:41:53 2024 GMT
Subject: CN=65f3dfa5-0928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:09:7e:43:28:6c:d3:ef:f0:ff:16:78:a3:
77:93:09:d3:49:d4:78:22:df:cc:80:6b:7e:c3:c8:
9a:32:c3:f8:2e:3b:67:78:ce:aa:90:15:1e:01:36:
e7:cb:ef:1c:a7:90:3e:32:a6:0a:57:96:ed:48:f6:
4c:10:61:6f:8c:d3:45:47:e4:95:45:3d:9f:c3:e2:
78:2f:e3:40:13:79:bf:21:d9:48:d9:5e:98:ac:57:
63:ba:ea:90:5b:64:ff:b7:76:d6:b2:8d:4a:40:89:
e3:c9:31:e5:23:8a:15:48:55:19:2b:fb:57:d3:39:
4c:70:c4:aa:d3:7a:ef:a5:d1:71:9b:0a:2c:30:54:
44:27:c6:85:43:b6:b7:31:18:21:e8:f3:a6:e5:8c:
c9:a0:b7:87:22:af:04:a1:b4:4c:02:b4:97:2a:84:
8e:83:8d:e4:79:66:22:ab:d2:30:7d:46:cf:ee:45:
2e:ec:ad:d8:c4:bb:b8:11:b2:99:bd:1c:4e:fe:2a:
95:fa:e1:6e:d2:17:16:8c:5d:9b:b8:df:f1:70:45:
d0:e5:b2:6d:5c:0b:97:0b:c9:ac:90:ad:e0:07:62:
bd:1c:3b:65:f8:f7:ba:b1:c6:16:e5:13:df:97:ac:
13:5e:38:11:46:b5:e1:4e:96:a8:14:81:f6:af:2c:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B8:C0:10:CF:BB:AD:43:86:33:69:6F:1D:37:E1:FC:51:E1:43:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBE70F8E28E11EEBE5157C5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.244.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:ed:44:08:0c:4b:2d:33:57:d4:6d:cb:b5:97:af:9c:04:3f:
6f:ee:c3:de:bc:c9:0f:b9:41:85:97:1d:48:6a:b6:fc:d8:c3:
9a:e3:6e:85:30:42:13:d4:77:1b:44:2b:03:cd:66:3e:fc:39:
bf:a6:c3:f8:0f:83:b9:04:df:35:9f:37:27:19:08:90:8a:ae:
fa:81:dd:14:4e:28:0e:d4:6b:f2:d7:09:44:86:7d:70:e5:a0:
80:f6:9e:a1:96:25:e0:95:4c:8b:aa:dd:6e:50:8a:1f:f6:9e:
a2:b2:d4:f7:bd:a6:5a:f0:a7:27:59:e6:fb:09:79:40:ab:70:
a4:bb:3c:2c:29:03:d9:c2:1c:15:27:43:9a:37:c6:8d:ae:28:
ff:07:87:be:7e:c7:c4:8a:c3:73:bb:bd:3b:eb:f5:fa:6d:78:
b8:3b:c3:5f:c3:40:d1:cf:bd:be:4b:3f:5a:63:1a:19:2e:07:
9b:cc:16:a1:74:b6:03:36:6a:8b:48:1d:40:9c:1f:d8:86:8b:
4b:7a:1f:3b:90:f5:e6:7c:5e:03:cf:4f:32:11:cf:42:b1:e0:
80:bf:ef:37:5a:aa:93:c2:90:f0:90:4b:85:6f:ee:82:7d:a4:
af:1e:eb:3c:49:a3:b0:68:11:49:cf:82:b9:be:1e:d2:f8:87:
e4:4f:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org