Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FA5000E28B11EE919EBAB3775412E6.roa
File: E7FA5000E28B11EE919EBAB3775412E6.roa (raw, json)
Hash identifier: 0FjNiwYXZCqGzIGvwwt3VmxDbjArcdpHZQI6OfUnz7E=
Subject key identifier: 5C:88:60:50:17:83:CD:17:5D:9A:80:61:B2:04:D1:3D:E3:67:88:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A187
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FA5000E28B11EE919EBAB3775412E6.roa
Signing time: Fri 15 Mar 2024 05:21:42 +0000
ROA not before: Fri 15 Mar 2024 05:21:38 +0000
ROA not after: Fri 20 Sep 2024 05:21:38 +0000
asID: 47890
IP address blocks: 154.214.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41351 (0xa187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 05:21:38 2024 GMT
Not After : Sep 20 05:21:38 2024 GMT
Subject: CN=65f3dae5-ac22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:7c:7f:b9:db:e2:fa:12:6a:5e:d1:1f:b0:
40:4e:f7:89:93:fb:f1:70:c9:7e:30:4e:3d:51:fa:
3d:12:1c:42:e3:46:78:68:53:a9:e5:ac:44:de:10:
5c:92:e4:50:05:ad:26:fb:5c:fb:78:cf:35:26:3a:
72:0a:45:47:e2:ed:6b:79:a9:7a:c5:7f:60:e8:a9:
35:67:a0:b0:7a:19:16:55:55:8d:1a:0f:1a:57:d7:
9b:f5:a4:91:2c:a4:63:02:5c:e6:77:4b:5b:0d:01:
c9:d3:06:a2:5c:f5:27:c9:3b:f4:84:76:d0:1d:86:
6c:95:7f:ff:bf:f7:fa:25:1b:b5:bd:48:74:12:ff:
fe:bb:b3:92:bb:26:e4:11:b4:10:42:da:3b:cc:3a:
ff:19:cd:21:5a:84:de:b0:2c:72:79:3f:e0:35:f1:
b0:ac:82:06:12:43:ed:a2:72:79:3f:5d:e3:fc:d6:
fa:db:f6:20:b3:02:4f:fe:4b:bb:21:fb:1e:c2:59:
ca:18:fe:16:2f:b7:ae:db:10:55:76:c8:d9:37:4e:
a8:7b:9c:f5:0f:98:62:31:11:b8:f6:32:89:4a:5e:
62:2e:d8:ba:05:a4:db:2c:64:99:a9:c2:e2:2d:a0:
d6:85:d9:e0:cb:1c:b7:43:0f:6d:d9:63:2d:ed:aa:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:60:50:17:83:CD:17:5D:9A:80:61:B2:04:D1:3D:E3:67:88:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FA5000E28B11EE919EBAB3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.198.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:04:7b:3e:6b:90:99:71:ae:51:3d:e4:f3:5f:74:f5:df:e7:
ce:d6:b2:f2:4d:5f:ff:6c:de:81:2f:21:3f:dc:d8:41:89:1b:
b5:ec:32:47:f0:36:7b:ea:0f:90:55:34:b8:0d:3d:fb:54:0a:
e4:cc:6d:8c:b2:8a:2f:c7:02:3d:36:0e:df:38:9e:fd:01:9d:
45:3d:15:4e:20:9f:65:c5:76:51:ca:aa:17:87:5c:e8:13:95:
61:fa:e5:d0:8d:8c:67:20:76:d6:d5:c3:be:20:29:68:6c:21:
f5:78:76:74:9c:f9:ff:f8:b3:a6:3c:56:63:90:17:3e:74:ab:
42:a4:ec:55:96:49:bc:7c:24:5b:6b:74:52:83:f2:f0:68:f7:
7e:68:63:67:be:1a:3d:0c:8d:8a:db:59:29:9c:af:7c:65:56:
2a:9f:9a:6b:26:04:61:90:08:5a:b6:16:2a:48:b0:aa:ff:22:
b4:43:7f:5c:a7:0b:eb:c8:8e:eb:95:00:7d:81:d9:ce:14:fa:
ad:78:ca:68:02:fb:c0:f3:c5:2d:e7:c1:ca:32:78:2c:e6:23:
cb:95:fb:79:d4:1e:5d:e3:70:dd:94:93:9a:45:24:3e:d7:f1:
df:b7:39:74:c7:68:44:86:3d:6d:52:e4:24:c9:88:b0:6d:74:
7d:48:48:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org