Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C14DB6B34111EE87CAE862775412E6.roa
File: E1C14DB6B34111EE87CAE862775412E6.roa (raw, json)
Hash identifier: +GUIKDTTD/BXaQb46T2AkUbEmEtK4Onhz84l/kv255o=
Subject key identifier: 70:E4:9F:CC:11:0E:FB:65:B9:35:47:E0:E4:44:FF:38:64:6D:14:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 750C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C14DB6B34111EE87CAE862775412E6.roa
Signing time: Mon 15 Jan 2024 01:03:24 +0000
ROA not before: Mon 15 Jan 2024 01:03:18 +0000
ROA not after: Fri 13 Dec 2024 01:03:18 +0000
asID: 8796
IP address blocks: 154.205.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29964 (0x750c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:03:18 2024 GMT
Not After : Dec 13 01:03:18 2024 GMT
Subject: CN=65a4845c-032e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:42:b8:2f:8c:07:ee:65:17:c0:1b:7c:97:
99:77:9a:c0:a0:6e:f1:94:aa:20:d9:2c:0e:ad:11:
ed:ec:36:7b:5d:3d:b3:d0:de:54:3a:db:91:5b:69:
20:e5:14:dc:cf:50:d0:4d:60:e6:7b:a1:7d:df:17:
38:85:32:2c:1f:17:39:76:eb:79:b7:e3:51:82:78:
b5:ef:83:f4:39:a2:52:8d:0f:36:1d:4d:b2:82:d9:
38:da:7c:51:a1:e6:00:8d:3a:aa:c1:32:ec:7d:dd:
f3:a8:ae:be:6d:0c:a8:c3:d2:01:ce:98:49:25:4c:
b3:0c:d0:05:c4:b0:9b:3e:5e:2b:b8:ab:b4:a5:d3:
90:25:02:c4:15:f8:ca:78:09:b5:10:d7:e9:49:dc:
1d:69:54:20:90:78:ea:a9:06:b9:9a:7f:8f:b1:63:
84:07:7b:bd:02:03:89:1e:b3:07:fe:14:80:c8:60:
67:98:29:d9:6a:e0:e2:29:c0:cd:5a:cf:5a:17:78:
4f:60:16:89:4b:dc:71:b1:eb:4b:ef:c5:12:ef:1e:
6d:3e:60:01:fb:c0:aa:e6:c9:cb:0f:37:13:5a:d0:
2b:a8:60:ff:87:e4:0f:c5:aa:bc:4c:92:9a:32:f5:
d4:07:3f:ad:a8:04:cf:60:22:fb:b7:e5:40:87:ec:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:9F:CC:11:0E:FB:65:B9:35:47:E0:E4:44:FF:38:64:6D:14:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C14DB6B34111EE87CAE862775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.192.0/19
Signature Algorithm: sha256WithRSAEncryption
14:99:fc:5c:53:13:9d:ef:99:1c:78:b2:a3:a0:a7:4e:0a:95:
60:05:10:fa:f0:ca:fd:e8:e7:66:6a:bc:4e:08:b5:7b:90:09:
30:af:b0:21:f6:45:9b:8c:86:b5:98:9c:7f:a8:59:6e:b4:a0:
d0:7a:08:e8:6f:33:b8:60:90:a6:42:c6:9f:0f:14:78:f0:d3:
04:b4:31:dc:b1:4b:26:94:59:54:1f:74:8c:a8:26:0b:1c:84:
3c:6a:de:cd:69:22:8a:1a:24:ed:68:4c:e0:e8:b3:c9:77:68:
78:22:c4:e7:ce:2c:db:85:c7:8e:4a:72:cd:bc:e6:bf:f8:45:
b2:c3:78:c7:68:8a:57:a2:f9:85:77:e3:28:6b:ab:f3:4f:bd:
72:f0:15:2a:97:bc:5e:e7:51:9a:3f:09:00:2e:36:37:db:9a:
55:82:ed:d8:50:80:b7:42:da:40:20:70:2d:8e:bc:d9:f1:8c:
47:d6:54:c6:67:4d:26:a0:f1:b2:31:33:ee:14:16:37:1b:3c:
c4:f6:fa:c0:23:99:dd:17:2d:04:10:b4:4b:09:65:7f:3d:66:
c8:90:8d:89:b2:22:e2:6a:6e:8f:3b:11:5a:d3:5b:6d:f4:79:
d2:54:56:ba:45:63:84:bc:e4:c4:8f:e8:ed:f7:73:01:b1:d6:
cb:fe:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:31 2024 by rpki-client on console-ams.rpki-client.org