Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9A6410E28C11EE9DF735BA775412E6.roa
File: CD9A6410E28C11EE9DF735BA775412E6.roa (raw, json)
Hash identifier: 8duVkk7TxTgmwjm2PMIG6xWnKQi5jPe1WhsDnM7f2GY=
Subject key identifier: 39:4D:4A:81:E4:C8:1F:62:90:30:AE:28:E7:BA:6E:6D:18:38:79:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A191
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9A6410E28C11EE9DF735BA775412E6.roa
Signing time: Fri 15 Mar 2024 05:28:07 +0000
ROA not before: Fri 15 Mar 2024 05:28:04 +0000
ROA not after: Fri 20 Sep 2024 05:28:04 +0000
asID: 47890
IP address blocks: 154.214.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41361 (0xa191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 05:28:04 2024 GMT
Not After : Sep 20 05:28:04 2024 GMT
Subject: CN=65f3dc67-713e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:e2:e4:13:8d:53:c8:c6:c6:ef:0f:ea:55:
6d:19:c5:9c:69:6b:1d:ee:ec:97:20:e8:c4:77:48:
86:5d:7b:d3:2d:11:f0:38:47:68:1b:ca:ed:5e:de:
db:81:59:17:3d:37:9b:f4:dd:21:81:d2:08:a0:30:
65:7f:ba:a1:d2:6a:99:c0:33:e2:95:87:2c:21:df:
4b:f3:71:7c:bd:fc:86:55:b9:08:b5:b4:4b:30:43:
2d:79:46:88:78:a1:be:e3:66:f3:80:7d:6d:c8:ae:
61:ad:52:ad:13:03:32:62:0c:15:41:87:b6:1c:84:
1b:f5:ec:e6:d2:41:47:e5:74:3d:47:22:d8:9d:27:
57:2b:bb:7e:f3:bb:ec:b6:df:df:e7:ad:7a:a3:fb:
cf:08:4b:ba:21:2a:be:3e:16:c6:ec:fb:24:a6:28:
31:c5:bb:93:77:00:09:b7:58:9b:01:f7:94:ce:c3:
2c:0b:c5:79:5a:8e:f3:2e:61:2a:34:bd:43:12:a6:
d2:a1:17:18:d6:08:4b:ec:ac:c0:45:7d:89:2e:74:
1c:23:8f:27:56:4e:e3:82:fe:08:ce:54:c7:23:1a:
fb:1a:01:b5:3a:d0:44:23:9b:4d:c6:f9:7f:79:1d:
69:95:bd:07:57:64:82:6d:03:b4:aa:96:9b:2b:e0:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4D:4A:81:E4:C8:1F:62:90:30:AE:28:E7:BA:6E:6D:18:38:79:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9A6410E28C11EE9DF735BA775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.215.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:5b:13:a1:53:0f:6c:01:fb:26:bd:db:3a:48:77:d6:5e:7e:
69:7d:2b:a0:eb:99:2a:cc:52:dd:57:2e:8c:00:9b:ee:1e:14:
cf:e5:66:4c:d4:37:db:d0:5c:44:f6:b6:19:1e:ea:35:56:74:
93:60:77:8b:3f:11:97:92:82:bd:28:10:13:b8:93:82:96:f2:
d5:4d:3a:dc:ec:6e:dc:ea:e5:54:ab:b1:18:d9:bc:0b:35:1f:
f8:11:84:f7:a1:58:84:99:44:c6:97:69:5c:30:56:90:70:3e:
52:13:d5:8a:1b:40:c1:ce:af:7a:97:51:cc:ab:fb:1f:62:b4:
5a:1b:76:05:63:9d:8b:7a:6e:67:ed:fc:e0:75:1a:3e:91:12:
71:a2:77:be:83:83:0b:79:95:9b:4c:62:ed:71:e4:32:7b:f2:
f3:41:7b:83:09:87:52:16:dc:87:46:c6:43:13:32:90:c9:d9:
b7:68:94:2c:0b:c9:a6:66:1a:27:cf:61:0a:a3:2e:d3:4e:09:
fe:f1:74:9c:88:95:25:3b:33:f6:61:1f:52:ef:84:0d:7d:61:
b8:f8:96:2f:20:66:0e:ea:39:2d:2b:4a:0d:14:47:48:a7:7d:
6f:cb:a4:b6:8e:57:e1:17:7f:43:12:f7:3e:f6:9a:35:fa:14:
6c:64:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org