Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8D7439EBBE811EE8732E4B2775412E6.roa
File: E8D7439EBBE811EE8732E4B2775412E6.roa (raw, json)
Hash identifier: pHdBJpZCGQUabrL4HiQB6fXFjv8LIdZEF150Mrc64Ko=
Subject key identifier: 71:64:72:0C:69:F6:3F:C8:30:C5:61:4E:30:92:6C:C2:66:4D:B9:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7D24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8D7439EBBE811EE8732E4B2775412E6.roa
Signing time: Fri 26 Jan 2024 01:19:11 +0000
ROA not before: Fri 26 Jan 2024 01:19:07 +0000
ROA not after: Sun 15 Dec 2024 01:19:07 +0000
asID: 38264
IP address blocks: 154.198.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32036 (0x7d24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 01:19:07 2024 GMT
Not After : Dec 15 01:19:07 2024 GMT
Subject: CN=65b3088f-e192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:b6:11:e5:8f:c0:f7:c4:be:98:2e:9f:7a:
76:e3:66:cd:19:f0:94:f2:18:a4:d8:61:66:06:a1:
88:73:a7:2f:99:d8:59:a5:6a:c6:4f:f6:e6:c2:02:
66:ac:58:e3:e8:85:44:ec:a0:c3:a7:5d:7f:98:49:
80:84:b2:a8:51:0f:9a:3d:06:0b:ec:a5:0a:88:6d:
9b:04:7d:aa:6f:29:81:0a:bc:ba:80:21:01:42:0f:
de:5c:4f:a4:e2:ac:57:7e:bf:31:94:e3:b7:5f:f0:
56:bf:6d:d1:d1:83:13:24:2a:f8:34:da:8f:01:1b:
73:de:75:61:e9:fd:f0:c8:2c:bb:4e:17:37:6f:ca:
a5:45:30:0b:48:11:c5:9d:ed:7b:e3:74:f6:b8:ca:
e9:88:78:d7:37:ac:0c:8f:00:b3:1b:a0:f1:c7:6f:
a8:94:76:46:a4:5c:c1:2d:94:dd:48:b5:c0:9d:f0:
a7:3f:d2:65:5b:7b:f7:36:ef:51:dd:2d:b3:2d:2a:
38:66:bf:f7:98:76:7a:02:71:af:6a:33:eb:f0:3f:
0f:9a:79:d7:1c:50:07:3f:04:6b:53:2c:0e:be:e1:
84:de:55:a5:d3:7a:e5:a3:5d:7e:2e:5c:da:34:20:
8c:c7:5c:a4:c4:39:7f:1c:6e:28:2a:6f:a4:71:8e:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:72:0C:69:F6:3F:C8:30:C5:61:4E:30:92:6C:C2:66:4D:B9:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8D7439EBBE811EE8732E4B2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d0:89:aa:85:2a:14:e8:02:73:51:86:45:3e:68:9e:3b:5b:
4d:ba:de:f0:07:00:60:0b:45:cc:ba:69:e0:c6:f9:30:a8:19:
6f:b4:90:0c:87:cb:e9:40:8a:66:03:d3:82:b0:b1:c1:f6:22:
34:3f:8e:8a:41:9a:08:2a:d2:34:15:dd:99:93:62:78:06:bd:
4b:5e:7d:00:9a:30:b7:c5:70:d9:83:6f:db:82:84:ea:4a:65:
55:4e:11:d1:8c:06:43:0e:2e:f2:d2:cd:34:a0:e1:14:04:7c:
9a:57:79:94:a3:b9:12:7b:4c:3c:e6:05:17:ca:5d:bf:7d:6a:
93:f8:2c:e8:03:a9:51:c6:02:4a:90:d5:57:8d:26:db:c3:8c:
b3:ae:34:dc:a0:a8:10:ba:92:79:87:db:5c:7c:09:05:4e:51:
37:13:86:94:01:3d:86:9f:0e:e3:41:38:f3:0e:ca:b9:b4:41:
04:26:67:52:8e:29:ac:93:6c:63:70:6f:9a:74:a1:82:1c:0a:
1b:df:f0:c2:d7:3b:19:bc:18:f8:18:c5:c4:e5:ed:a2:c4:ed:
83:4a:8c:a2:6a:8d:b2:3c:46:ca:04:5e:bb:4b:39:c6:46:f8:
d6:19:fd:e7:34:d4:7d:97:0f:2a:7e:d8:65:ae:03:bb:a8:40:
2d:53:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org