Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE1ABF62E4EE11EE8CC23199775412E6.roa
File: BE1ABF62E4EE11EE8CC23199775412E6.roa (raw, json)
Hash identifier: dBAawBMWQs8AvtfkHn/bUXURdCeg+Jc7ngfHwvRZiE4=
Subject key identifier: 53:53:26:DC:8F:21:91:24:D2:BB:C8:BA:9E:B2:E2:FB:A7:E6:D4:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A295
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE1ABF62E4EE11EE8CC23199775412E6.roa
Signing time: Mon 18 Mar 2024 06:14:14 +0000
ROA not before: Mon 18 Mar 2024 06:14:11 +0000
ROA not after: Sun 21 Apr 2024 06:14:11 +0000
asID: 211826
IP address blocks: 154.197.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 06:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41621 (0xa295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 06:14:11 2024 GMT
Not After : Apr 21 06:14:11 2024 GMT
Subject: CN=65f7dbb6-fd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:c3:39:fc:c0:b1:96:96:37:70:79:22:30:
ff:4b:af:cd:73:93:a6:01:04:af:13:58:f1:b6:17:
2e:dd:ad:99:af:30:bd:ba:47:38:47:61:01:1f:f2:
a2:be:b2:79:5a:ff:7e:7f:9a:3b:ca:c1:9b:60:79:
e6:00:9c:7c:f2:73:1c:48:f8:1c:5e:38:22:99:e5:
29:52:5e:71:d8:21:7d:d6:21:f7:70:79:d8:38:2c:
df:82:62:6a:30:94:da:50:a8:7c:c8:a2:98:fb:5e:
72:4d:26:23:3f:67:a6:55:53:bc:3c:37:57:0d:54:
4e:45:b4:ec:a0:c7:69:e1:4d:6c:cf:c3:32:c2:5d:
87:59:f6:5a:77:7a:ad:83:df:0f:7a:f1:8e:e7:9e:
83:83:01:f8:04:3b:10:83:6d:61:12:9f:66:a1:b6:
3d:fa:09:9f:51:b5:b4:4c:ba:2f:08:b8:58:cd:e5:
42:38:c5:0f:71:cc:b9:84:05:6d:bc:f2:3d:b0:68:
ba:e7:5e:36:d3:60:82:15:07:e6:7f:6f:ea:51:13:
d7:01:0f:d8:5f:84:3a:ac:d8:2f:2d:2e:00:52:52:
f1:b0:25:85:ba:68:5f:4b:61:7c:65:ed:7e:4f:9e:
1e:aa:ee:be:21:ca:22:ff:f9:12:94:e4:52:64:15:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:26:DC:8F:21:91:24:D2:BB:C8:BA:9E:B2:E2:FB:A7:E6:D4:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE1ABF62E4EE11EE8CC23199775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.82.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4f:5c:df:ca:91:7e:5d:bc:bc:38:67:23:c8:94:08:43:5f:
ba:41:4b:a8:bf:1b:02:a5:85:08:f0:c6:4e:de:f6:f8:1c:6e:
63:b3:25:8a:07:f4:26:b3:44:59:e8:d2:4e:70:ca:42:cd:2e:
b6:4e:93:e4:49:48:40:bb:fd:75:a7:48:76:cd:cb:4f:e6:49:
dc:b9:5b:2e:a7:59:0f:0f:0c:23:3d:c3:ac:ad:ba:f3:8f:1c:
88:8c:5b:50:aa:02:09:48:09:99:cb:4e:b9:92:25:15:be:d8:
fc:b0:27:03:4d:93:36:65:78:74:17:fb:57:6a:e7:c3:20:1c:
94:c5:b0:09:e8:0a:83:3c:44:61:a0:86:bb:f0:4b:8d:77:9a:
73:e4:f2:c1:01:e6:27:1b:17:28:57:c5:d8:6e:0d:e1:91:9a:
21:77:0e:fa:99:71:40:40:34:c4:84:83:45:f9:a8:b0:50:b5:
a4:5e:af:8c:0f:58:a0:bf:b6:73:46:f9:b3:71:1b:95:92:7c:
87:93:d3:16:34:89:2b:cc:41:4c:9f:23:fe:1c:23:76:f0:59:
c8:79:67:04:69:26:df:8e:d9:be:0e:b1:a4:db:e8:13:66:82:
e0:f5:37:52:b7:a4:8f:51:b2:e0:29:a7:49:75:d3:6f:09:68:
70:cd:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org