Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE82C7A4B0FF11EEBC40EC5E775412E6.roa
File: DE82C7A4B0FF11EEBC40EC5E775412E6.roa (raw, json)
Hash identifier: OSnP9XzvYqnce4XE1OT8zf1YCeXNjI9ekhFVR4MQi9w=
Subject key identifier: 2F:F8:4B:55:34:C2:1D:0D:5B:3A:B9:49:13:F9:E5:5E:4F:76:A1:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7489
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE82C7A4B0FF11EEBC40EC5E775412E6.roa
Signing time: Fri 12 Jan 2024 04:05:49 +0000
ROA not before: Fri 12 Jan 2024 04:05:46 +0000
ROA not after: Fri 13 Dec 2024 04:05:46 +0000
asID: 140224
IP address blocks: 154.205.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29833 (0x7489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:05:46 2024 GMT
Not After : Dec 13 04:05:46 2024 GMT
Subject: CN=65a0ba9d-65df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:77:26:45:38:e5:b8:da:60:00:ab:f7:ad:
b2:1e:03:44:46:58:85:92:7d:61:33:4b:49:f3:53:
20:0c:1c:13:0e:85:c9:df:51:45:02:19:28:7b:a4:
58:23:c6:b5:5f:dd:91:b6:45:cf:7c:a7:f5:f3:79:
1a:5e:79:21:75:8c:1c:81:82:4f:a6:48:68:0e:e7:
40:89:c6:9b:d7:b0:91:21:3f:40:d0:48:11:8a:8d:
ae:0a:8b:52:27:58:46:46:74:60:34:c2:03:6e:f0:
d9:4f:85:6e:d9:c0:89:a6:2d:15:f4:10:d2:a4:c9:
bd:3c:59:14:c9:f5:fb:d4:cf:03:40:1e:3d:12:c6:
c3:86:08:11:fc:ea:cc:05:e1:ae:50:66:a9:30:19:
fb:b5:53:46:e0:23:ef:3f:47:7d:89:47:e9:7b:10:
8a:37:dc:97:97:22:d5:df:55:95:22:5d:ac:de:ad:
f5:d0:72:04:85:48:89:d3:2b:6b:1b:d5:fd:1c:46:
f5:22:b5:72:f3:16:1d:96:9e:6f:63:2f:c0:03:52:
c3:96:2d:c8:63:02:2d:b1:a9:d0:49:4d:66:a9:48:
d2:42:83:68:73:98:49:17:18:43:89:b1:7e:7c:a7:
91:1a:19:42:a8:9b:59:12:44:8f:30:8d:76:6e:d7:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:4B:55:34:C2:1D:0D:5B:3A:B9:49:13:F9:E5:5E:4F:76:A1:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE82C7A4B0FF11EEBC40EC5E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.207.0/24
Signature Algorithm: sha256WithRSAEncryption
49:52:69:79:ab:5a:6a:ee:0c:2c:77:0d:3a:e1:b7:99:95:67:
09:c4:53:3d:53:0c:b4:a3:b3:56:39:5f:fc:a5:77:c5:63:a1:
24:73:d5:cc:30:e3:9f:e0:cb:22:d2:77:7b:88:07:e5:98:9f:
47:2b:0e:05:e3:4c:5a:29:91:49:26:15:12:f9:ab:96:7f:4d:
63:42:13:9d:48:90:a8:96:a6:4b:c5:a1:c0:de:f8:5c:5a:32:
0a:bc:a2:da:15:dc:f1:16:79:35:a8:86:e7:69:c1:14:9b:3f:
e1:8f:dc:ff:42:53:ad:a5:25:d3:10:ea:c5:f6:db:c7:fe:df:
8e:73:ba:d7:32:e0:92:75:71:0d:cb:90:16:48:6d:04:b1:74:
4e:b4:2c:ed:a7:d3:75:46:a6:77:c6:18:ab:96:50:e9:25:b6:
83:b7:02:26:62:6b:ad:6e:37:86:94:a9:40:a2:1a:9a:ed:40:
e4:78:8a:69:3e:62:50:d7:64:94:c0:68:41:92:a4:1a:8b:ee:
df:73:c2:1f:de:c8:46:34:2b:6d:c4:63:f0:06:74:68:c6:39:
ad:a0:9b:80:d8:36:72:6a:e3:4e:f3:e3:a8:94:aa:26:08:ba:
52:1c:6d:d4:61:22:09:95:26:62:77:f0:0e:d2:49:7d:b9:37:
de:61:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:29 2024 by rpki-client on console-ams.rpki-client.org