Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E02D1584ECA311EEAB5034C0775412E6.roa
File: E02D1584ECA311EEAB5034C0775412E6.roa (raw, json)
Hash identifier: 5IZnt67aFfDYYk8QGBDbZaQEuL9hJjD/G6y1ly+S1fI=
Subject key identifier: F4:DF:5F:0E:45:04:F7:74:16:06:B1:A4:D3:AA:97:41:BA:E7:EC:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E02D1584ECA311EEAB5034C0775412E6.roa
Signing time: Thu 28 Mar 2024 01:38:28 +0000
ROA not before: Thu 28 Mar 2024 01:38:23 +0000
ROA not after: Sun 23 Mar 2025 01:38:23 +0000
asID: 209242
IP address blocks: 154.197.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42686 (0xa6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 01:38:23 2024 GMT
Not After : Mar 23 01:38:23 2025 GMT
Subject: CN=6604ca14-3a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:de:b1:3f:b9:15:ef:9d:d8:b7:65:d0:ed:
70:a6:86:7d:93:4f:78:4b:17:b0:5f:ef:bf:91:93:
4f:fa:dd:2f:cd:55:41:7b:b7:91:fb:94:71:a9:6c:
c6:5c:96:40:8b:e2:c5:4d:0d:4b:e2:14:09:d2:ac:
47:91:46:5c:0f:e7:f4:74:fd:e5:72:df:fc:50:3d:
c9:2f:46:92:80:b2:2c:df:cd:a7:2a:49:00:4d:eb:
86:e2:c2:3a:3c:41:b2:a9:4f:18:6b:2b:32:78:20:
a9:ab:c4:99:4c:96:a8:c4:95:f8:b1:82:cb:61:8f:
74:07:58:6a:24:5f:78:c7:39:bc:b6:d5:eb:46:35:
86:2f:1d:27:ac:c7:5e:74:83:65:b1:26:29:cc:59:
01:40:96:a5:e7:23:13:d8:4b:78:80:7a:11:ce:bf:
d7:dd:3c:50:38:21:4c:53:90:3e:7f:7f:0c:e1:cd:
dd:4c:60:a2:ff:a1:56:7a:93:55:6b:7d:d8:62:58:
6c:f0:53:e0:f1:64:a0:b8:ad:c6:8b:31:70:2b:1d:
78:80:d7:2f:14:86:64:c2:19:5d:a6:b9:3a:98:3c:
9b:50:5d:86:01:9e:35:35:98:d1:c8:a0:00:ab:1e:
61:a5:04:cb:33:ac:8d:62:c6:1a:ba:7e:8d:08:2c:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:5F:0E:45:04:F7:74:16:06:B1:A4:D3:AA:97:41:BA:E7:EC:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E02D1584ECA311EEAB5034C0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.65.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:50:aa:40:5f:85:71:31:df:c2:a4:a3:78:58:43:75:90:17:
37:fe:90:5e:ea:76:15:f1:42:68:19:35:f8:14:4a:4b:23:ba:
2e:58:77:73:8c:ce:98:f7:88:5a:4f:a5:ed:80:08:99:31:f6:
80:80:45:d0:4e:7b:c6:f4:6a:e5:0c:8c:0d:e7:7e:50:cc:66:
bb:b0:96:e1:d1:2d:59:3c:d8:fc:91:0a:e6:97:79:d9:95:a5:
5f:74:2d:51:ce:b3:b0:c2:a8:77:c9:38:8b:a4:91:ef:00:48:
14:94:e9:27:e8:74:9f:3d:7f:d9:0e:08:b4:9a:e7:9a:d5:24:
bc:bd:65:b8:ee:23:6f:de:b7:67:a9:94:a4:c4:d3:00:da:ca:
93:e5:64:68:a8:a3:fa:58:6f:2c:d3:95:e2:76:c2:44:66:ef:
c6:b6:f0:74:8d:5a:77:8e:e1:27:70:3b:c5:6f:50:69:db:5b:
f6:aa:c2:17:2a:d3:cc:a7:b2:95:4d:cf:2b:34:df:3c:fd:28:
4f:fc:cd:9e:92:c4:09:73:1e:9d:e0:2a:47:08:8f:de:d6:f6:
57:1f:f2:31:0e:5e:7b:79:55:a7:ed:20:7c:3e:3f:ce:62:1d:
0e:f1:2c:35:be:48:2c:5c:67:c1:a2:10:db:8e:ae:9d:15:42:
e0:c8:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org