Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C72DC36AE20511EEA81BB64D775412E6.roa
File: C72DC36AE20511EEA81BB64D775412E6.roa (raw, json)
Hash identifier: PAdJsLuD8HkFi2Nw2fekZp0+IQvgpMpwveZjst+Ug04=
Subject key identifier: A0:3D:65:DD:0B:8B:41:E3:91:A8:86:04:3A:9D:24:1C:31:04:46:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A16A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C72DC36AE20511EEA81BB64D775412E6.roa
Signing time: Thu 14 Mar 2024 13:21:34 +0000
ROA not before: Thu 14 Mar 2024 13:21:20 +0000
ROA not after: Fri 20 Sep 2024 13:21:20 +0000
asID: 2914
IP address blocks: 154.214.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41322 (0xa16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 13:21:20 2024 GMT
Not After : Sep 20 13:21:20 2024 GMT
Subject: CN=65f2f9de-89e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:09:45:6c:a9:40:82:e1:f2:67:00:38:e6:
8a:91:8e:70:ed:9d:e8:74:83:26:1a:d0:1f:13:8d:
9c:ec:8d:ad:f3:3d:14:9d:04:32:78:7e:72:b6:bb:
81:80:91:2e:37:46:42:bf:b2:e3:4f:21:fa:97:bc:
10:e3:26:b4:96:f4:4e:db:14:2d:67:29:a2:39:04:
e1:b4:44:66:56:2f:68:ff:db:d6:c3:c6:c0:e0:dd:
89:7d:e3:73:b2:37:af:f4:35:22:29:c1:e6:f8:32:
de:80:fe:56:27:1e:94:c0:12:7d:2a:30:e7:0e:e8:
d0:e6:d8:3e:72:12:5e:b6:76:bc:05:89:57:5d:f4:
e1:6e:2b:ab:bb:de:43:d4:45:9c:dd:75:5c:d3:88:
92:ed:6d:8a:12:00:36:8d:88:1b:fd:0e:12:b9:71:
34:4b:21:0c:4b:03:e7:21:74:de:64:b8:38:53:1c:
a3:2b:2c:91:19:ae:a9:5d:5b:8f:8d:c5:2e:90:e6:
d8:5e:5c:f7:27:90:3b:3f:f8:92:fd:a1:58:dd:b4:
1a:ef:ff:44:b0:e4:9d:a7:f9:cd:27:57:90:92:ab:
a4:36:ce:c4:00:e2:da:a6:5e:66:f1:79:c9:5e:7f:
e0:e7:70:27:0e:af:16:ae:47:88:e6:a1:8f:e3:b4:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3D:65:DD:0B:8B:41:E3:91:A8:86:04:3A:9D:24:1C:31:04:46:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C72DC36AE20511EEA81BB64D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.203.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:60:a0:31:f1:a0:35:dd:a4:c6:ae:88:3b:a7:3f:43:d3:15:
4d:4f:e2:a8:d1:28:25:33:6d:9a:ca:18:f0:d0:be:53:dc:88:
b1:fc:23:c9:49:3d:65:6b:09:50:00:66:3d:e9:32:be:14:90:
25:4b:c4:cb:d8:4c:17:49:f3:42:1f:ec:98:e8:29:cc:d8:ae:
ff:fe:cd:48:ab:d1:85:cd:46:48:00:b0:ae:cb:8f:b7:7b:4c:
aa:b9:ed:e0:a3:59:21:41:46:90:78:87:a2:f2:bf:a4:22:b7:
a5:cf:a6:ef:65:c3:a7:b0:a2:27:8b:bb:8e:b4:05:9e:e6:f5:
26:c5:c4:74:19:82:e8:9e:03:e1:45:32:ab:e4:e7:12:74:1a:
9c:52:6d:6d:1b:89:63:f5:c1:42:2a:e0:bf:99:95:32:38:1a:
82:c9:45:c0:a9:e6:1b:25:60:68:4e:d9:dc:78:80:3e:06:69:
a2:35:bc:6e:ab:65:e4:f0:87:ea:f2:ee:f7:32:12:52:8c:ab:
01:cf:ca:82:d6:24:a0:4e:f9:19:5a:50:90:85:26:a9:f9:6f:
08:f6:66:35:49:41:90:81:21:09:ab:43:af:63:ae:c4:2f:d3:
a8:a7:cd:95:30:ba:5f:14:8c:8a:c9:3c:bf:ca:12:25:bf:4e:
02:47:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:38 2024 by rpki-client on console-fra.rpki-client.org