Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A99CBAB10111EEA179F661775412E6.roa
File: C0A99CBAB10111EEA179F661775412E6.roa (raw, json)
Hash identifier: hT+F+s2DC0Qcn4EFnAqwWOfWxYbvmWef4I3LZw/Pcww=
Subject key identifier: CA:76:AF:80:02:7C:6A:48:A6:FC:46:B1:24:CA:54:3E:4E:83:0C:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 749B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A99CBAB10111EEA179F661775412E6.roa
Signing time: Fri 12 Jan 2024 04:19:18 +0000
ROA not before: Fri 12 Jan 2024 04:19:15 +0000
ROA not after: Fri 13 Dec 2024 04:19:15 +0000
asID: 140224
IP address blocks: 154.205.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29851 (0x749b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:19:15 2024 GMT
Not After : Dec 13 04:19:15 2024 GMT
Subject: CN=65a0bdc6-ea68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:49:a3:d0:8f:bc:58:80:7f:23:af:e9:6b:
c6:e3:ed:70:ef:94:11:b8:67:cd:20:1f:ff:b4:db:
22:55:7a:18:4c:e6:98:17:6b:77:ac:70:47:ef:93:
53:67:d2:17:c2:57:d6:ce:73:36:ae:6d:ea:6e:dc:
44:ca:98:11:71:c5:3b:80:a2:3f:42:cb:22:97:c0:
03:14:53:ed:3b:e6:9f:51:89:bf:9c:91:68:de:49:
40:85:66:9a:31:b7:bc:58:8b:df:dc:a5:2e:64:2f:
48:b2:4c:41:6e:a8:c2:2a:00:1d:55:02:88:80:56:
2a:aa:84:fa:f4:8d:42:33:0b:0b:b0:85:f5:d6:0d:
da:93:c5:92:45:25:96:f7:00:9f:dd:33:4a:d5:3c:
d3:10:f0:7f:79:5d:ac:e2:75:a5:8b:2c:96:19:9f:
c1:dd:cb:e9:11:6a:6f:a6:35:25:e0:f8:7e:c2:ee:
1f:c5:ac:e5:fc:4b:b0:b3:49:54:66:5f:a6:c8:40:
4c:51:dd:f0:7e:12:37:ef:78:33:78:25:57:46:df:
53:bd:c1:52:23:f7:91:e7:06:b0:3e:74:8e:6d:44:
13:05:e6:9d:93:0a:07:f0:3a:47:45:3c:9d:12:83:
42:7a:95:93:0a:a7:b6:90:bb:bd:ae:b0:7d:8d:cc:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:AF:80:02:7C:6A:48:A6:FC:46:B1:24:CA:54:3E:4E:83:0C:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A99CBAB10111EEA179F661775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.218.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a1:9c:15:f2:bc:c5:34:5e:5b:f9:4b:ed:62:0b:ec:5d:fb:
87:2f:36:cc:6c:1d:a9:ea:c4:73:92:b6:fc:a2:36:53:f6:d8:
c9:86:7f:cb:19:b2:cb:17:5b:fa:75:26:a7:ca:34:d4:05:c7:
ff:08:c0:92:f4:de:c7:13:8a:8a:5d:96:3a:64:9b:8e:13:45:
a9:91:5a:29:85:af:a5:65:6e:8d:4e:53:1a:f1:a5:b4:a5:46:
43:77:10:f9:6f:7e:2f:4f:da:9d:ba:33:aa:13:62:62:08:f7:
3b:bb:27:e0:65:ed:14:df:e5:98:96:59:1c:d5:96:77:96:30:
35:8a:31:86:eb:4d:f1:33:f9:1c:62:31:50:be:ed:af:df:df:
4b:f0:76:57:c8:4e:ce:75:61:5b:75:eb:36:c7:69:72:5b:40:
31:b2:9a:cf:26:2a:5e:2a:e3:9e:01:f6:0f:cb:13:78:3a:98:
c7:a7:46:48:d4:f4:3f:f6:d8:b3:1e:bd:a7:a9:a2:26:85:d0:
44:7a:aa:5e:02:78:e6:c7:2c:18:d7:1b:5c:0e:96:e8:f2:e7:
66:33:e1:a7:3c:59:ed:16:8e:a4:34:89:c5:33:20:df:2d:93:
62:21:73:9a:62:4e:39:b3:03:5c:df:14:9c:da:d5:aa:87:0f:
5d:c0:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org