Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6471DCEB34911EEA3003879775412E6.roa
File: C6471DCEB34911EEA3003879775412E6.roa (raw, json)
Hash identifier: d3B7ZLPB7wNTDIfIypWtJi93rXPt2TVMqRnW8IijwUo=
Subject key identifier: 8C:81:7F:49:D7:DF:12:55:F8:46:7E:41:CC:0C:98:8B:6C:8D:8F:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7544
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6471DCEB34911EEA3003879775412E6.roa
Signing time: Mon 15 Jan 2024 01:59:54 +0000
ROA not before: Mon 15 Jan 2024 01:59:50 +0000
ROA not after: Fri 13 Dec 2024 01:59:50 +0000
asID: 8796
IP address blocks: 154.205.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30020 (0x7544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:59:50 2024 GMT
Not After : Dec 13 01:59:50 2024 GMT
Subject: CN=65a49199-db53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:e6:76:2d:e8:39:2d:67:b2:49:9f:97:65:
c1:d4:b6:16:76:ea:d9:0c:95:06:53:56:fa:2c:fc:
61:d1:69:5f:4b:fc:d7:fe:43:e0:1d:17:78:50:0d:
64:a4:de:0b:5c:99:ee:b2:d9:6a:87:fc:c4:b1:c4:
3f:2c:c4:79:de:65:17:32:66:e5:e0:a0:21:ed:95:
52:8d:22:cb:9f:d3:4b:48:dc:a0:d1:4c:30:ce:33:
70:c5:2f:0e:eb:36:29:d1:50:92:99:d6:f4:f0:28:
db:2e:45:e1:91:cc:2b:07:80:b3:06:4a:6f:52:a1:
70:86:82:86:c4:b1:36:e8:29:c9:ca:46:39:04:9a:
f9:18:6f:5a:92:b7:73:88:a4:6b:0a:17:e2:8b:b2:
51:41:c7:60:5a:c5:2d:0d:b6:da:57:3f:6c:02:a9:
b7:78:0f:b2:0b:2b:5f:15:22:3e:5b:28:04:8d:d2:
8d:60:fa:1b:67:57:31:c6:7e:94:4f:bd:84:f9:c0:
a1:eb:f5:a8:8b:c4:10:9e:a1:fc:58:47:32:c2:7c:
60:42:ed:90:9b:fe:3a:14:77:2f:49:e9:c5:71:e7:
34:ac:21:a3:23:39:15:98:85:41:76:8b:98:e6:88:
8b:e1:da:47:41:e9:f8:2f:dd:6a:34:c2:e0:61:f1:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:7F:49:D7:DF:12:55:F8:46:7E:41:CC:0C:98:8B:6C:8D:8F:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6471DCEB34911EEA3003879775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.200.0/24
Signature Algorithm: sha256WithRSAEncryption
88:da:89:a9:4f:3e:92:06:4c:02:63:a5:e3:ec:4c:16:74:22:
a5:83:12:cd:30:ff:3c:ed:4d:92:2a:e7:31:50:95:6f:1a:4b:
2b:ab:e4:de:49:88:30:83:8d:ea:dd:0a:ea:3f:b6:a6:1a:15:
b2:3f:e6:44:92:ed:eb:98:fa:49:75:0c:bc:ab:71:51:1c:57:
67:1e:52:e3:da:98:e1:d8:ff:c6:4c:2b:0d:91:0e:3d:4d:ba:
d0:49:e3:bf:dc:60:c5:0c:2a:52:19:63:6f:88:86:44:ae:bb:
3b:5f:3d:67:07:21:a5:39:a8:7b:77:38:7b:c6:b6:6f:a7:85:
c4:45:5c:7e:ee:41:66:7e:ba:67:c9:71:dc:71:2d:b8:33:a7:
36:be:f0:80:99:6d:dc:97:4a:a8:f6:21:58:34:a5:64:53:60:
10:00:29:7c:40:d9:23:4a:29:c7:f6:e6:a2:2a:2a:ff:ec:c7:
06:22:fc:41:e5:66:91:0e:7e:1a:03:c9:0b:7a:b3:77:9d:74:
07:c2:e0:1f:36:ce:bd:6a:92:77:73:03:22:c6:e7:95:8b:8d:
67:ef:9d:8b:38:3d:a5:aa:01:29:45:78:a1:7d:54:f1:48:9e:
b7:49:ea:54:db:5e:4b:8b:d9:88:2c:bd:e3:a0:eb:1c:cc:75:
ba:d1:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:38 2024 by rpki-client on console-fra.rpki-client.org