Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD652514696711EEA4F205414AD9E6FC.roa
File: CD652514696711EEA4F205414AD9E6FC.roa (raw, json)
Hash identifier: OL0AUhD2T8t6n3bpHC4HGdj2YjA6GpZd5JXDPpBLdds=
Subject key identifier: 8E:2D:DA:05:20:C7:C5:24:F3:82:1D:00:B4:B4:22:CB:B7:19:78:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 45BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD652514696711EEA4F205414AD9E6FC.roa
Signing time: Fri 13 Oct 2023 01:28:24 +0000
ROA not before: Fri 13 Oct 2023 01:28:21 +0000
ROA not after: Mon 30 Sep 2024 01:28:21 +0000
asID: 201411
IP address blocks: 154.205.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17854 (0x45be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 01:28:21 2023 GMT
Not After : Sep 30 01:28:21 2024 GMT
Subject: CN=65289d38-ff25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:8b:50:45:47:cb:9a:21:a0:eb:f0:86:0a:
c4:ea:bd:f8:60:7e:28:6c:09:40:26:b3:fb:40:8e:
92:d2:96:8e:34:76:f2:eb:29:bf:7e:2a:7d:61:23:
91:29:8b:dc:d3:be:14:f0:87:cd:98:37:47:e4:2e:
f0:64:96:0f:b2:10:aa:b7:d2:5c:cc:05:15:77:b4:
02:31:44:76:ee:55:c3:f5:3d:6d:96:f4:b9:9f:d0:
cf:d9:2b:cf:7d:4e:5a:59:42:1a:9a:2f:1b:e9:f1:
b4:96:e1:6c:5e:8d:0b:24:68:96:5d:47:9f:47:ad:
1f:fd:3e:6e:4b:28:de:59:03:a3:d4:26:8c:74:bb:
ce:9a:87:88:91:d2:d4:56:c1:a7:55:ff:35:9d:01:
30:05:9e:6e:6d:02:ce:31:af:4b:a6:14:ca:5b:e1:
f3:38:57:34:69:e5:35:38:85:d2:7e:f7:71:a0:6c:
bf:77:b8:2b:6d:04:cc:bb:58:92:bd:6e:66:52:35:
2f:31:8b:fc:76:45:19:63:75:13:b4:6d:0d:70:3b:
bd:8a:61:15:f0:c8:81:a6:1a:f1:e3:1a:93:54:48:
4e:e5:78:a7:39:ef:7b:94:2b:3b:ee:2b:8b:fa:4d:
9d:d3:13:07:89:8a:64:86:43:3c:f8:e1:43:46:a2:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2D:DA:05:20:C7:C5:24:F3:82:1D:00:B4:B4:22:CB:B7:19:78:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD652514696711EEA4F205414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:38:32:47:46:84:f5:82:db:90:67:77:43:2b:8f:47:8b:88:
c7:df:eb:18:5b:1a:0a:de:b6:3b:3d:39:32:71:79:18:d1:4b:
90:83:0f:39:36:30:01:f5:d8:d5:37:f5:25:4b:1b:bc:0a:d2:
f4:76:94:00:58:9d:1e:f0:a4:db:a2:0b:44:89:22:94:82:5e:
f0:ed:b7:74:49:c7:08:14:20:aa:ea:4f:a1:25:28:bf:31:19:
e6:ef:83:45:41:f6:a3:c5:22:f8:30:fa:63:2d:b4:e2:1f:75:
42:9c:20:f2:f5:69:7d:0b:fc:87:7a:09:5f:79:02:35:44:8c:
1e:18:f9:07:48:f8:40:e6:10:fe:05:68:49:f1:c9:05:6d:7b:
59:be:3f:25:78:1b:44:b7:e9:a7:03:00:55:09:90:aa:70:b7:
ac:35:c2:91:61:e4:af:33:d4:87:6c:5e:c6:88:dc:de:1f:da:
cb:5e:b2:4b:af:e1:6f:20:cd:f4:53:ad:e8:c1:2a:b3:5e:97:
f1:f6:51:97:75:1b:84:c3:c3:90:7c:56:84:98:1a:c7:24:50:
26:c7:ed:f7:bf:f1:43:a0:58:ae:85:55:36:05:60:46:ad:96:
8e:e4:56:5f:55:18:79:ed:23:f1:39:e8:25:82:e4:c7:fa:bf:
f0:76:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org