Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F298DA5AF1A311EEA0BBA662775412E6.roa
File: F298DA5AF1A311EEA0BBA662775412E6.roa (raw, json)
Hash identifier: aYQffUcdIZ3VPCfAbzOXvwAsyZ2GuiULiFEAuTbMufU=
Subject key identifier: 13:25:1F:ED:F2:75:B3:C0:5A:48:77:B7:64:9E:41:75:EC:D6:FE:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A952
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F298DA5AF1A311EEA0BBA662775412E6.roa
Signing time: Wed 03 Apr 2024 10:21:35 +0000
ROA not before: Wed 03 Apr 2024 10:21:31 +0000
ROA not after: Thu 09 May 2024 10:21:31 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43346 (0xa952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 10:21:31 2024 GMT
Not After : May 9 10:21:31 2024 GMT
Subject: CN=660d2daf-e504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:41:0e:4c:cf:68:8f:e4:a9:55:4d:85:df:
7d:d1:94:92:0c:7b:30:2e:9c:c2:48:85:2f:6b:b5:
ab:28:60:71:6d:5c:6b:38:aa:01:ff:a2:cb:f2:b3:
13:b9:e3:5c:d2:6c:f0:ef:76:b8:45:09:e3:4f:d1:
8c:82:5d:bb:13:48:d5:9a:bb:27:55:e9:8e:23:26:
5d:a8:a1:dc:4c:5b:72:46:bc:e2:33:b2:d4:dc:d3:
0b:c1:ea:d7:2c:92:31:e9:38:0c:29:c2:43:13:d0:
4d:a0:8d:08:04:c3:33:6b:30:b9:aa:29:60:df:3b:
e2:4f:cf:51:fe:b2:87:11:82:d8:d7:8c:13:35:d0:
99:8a:0d:be:6c:87:d2:43:eb:fe:16:39:13:31:58:
04:e6:de:88:f5:6a:84:ca:70:b5:36:d6:9b:35:b4:
6d:7b:2d:18:d3:3d:58:51:9b:96:38:d0:f4:25:39:
fa:5a:6e:8f:dd:6b:64:6d:eb:fc:88:84:5f:45:f7:
17:50:5d:22:1d:15:6d:17:8e:af:ac:ed:ef:c9:e4:
1d:a6:4b:2a:a6:bf:35:4b:13:18:78:3a:7e:0d:a3:
89:28:b7:32:b0:e2:37:12:c5:8d:b3:55:02:c9:5f:
99:26:9e:28:42:e5:68:bd:fc:66:d1:e4:6b:49:ab:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:1F:ED:F2:75:B3:C0:5A:48:77:B7:64:9E:41:75:EC:D6:FE:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F298DA5AF1A311EEA0BBA662775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a7:b7:b1:82:50:1d:78:0e:47:b0:7e:29:c8:64:66:7c:94:
2f:8a:5c:60:06:22:dc:a4:9d:23:79:30:e8:2f:5a:3a:8d:2b:
93:38:00:9e:69:b6:a6:18:f1:2c:1f:b2:2d:3a:e9:a7:22:92:
66:2f:aa:ff:21:54:c1:bd:49:cd:ad:bd:c4:a1:16:8f:10:f6:
f3:9e:2d:e7:17:e8:5f:c2:80:91:c1:01:25:2d:75:0c:b1:85:
f6:a3:f2:c2:5a:5b:31:41:c7:31:a5:da:a2:fc:41:1a:ed:a4:
c0:60:71:a1:7b:c5:d4:e5:60:d4:34:e3:b0:2b:b3:ed:f0:43:
e5:b7:34:1e:3f:ba:b0:c8:b3:71:35:e2:8c:12:77:db:7b:56:
06:93:2c:c0:92:3d:49:91:67:58:11:9e:9c:f4:6b:eb:e3:02:
d3:92:df:ea:e0:0a:6c:4c:df:c0:02:8e:94:6f:ad:2f:7c:15:
37:e9:45:96:8b:3a:7e:35:e3:0a:f7:94:65:69:07:46:aa:18:
a7:93:79:1b:5e:30:75:be:2d:3d:2b:13:4f:a1:13:6b:63:61:
8b:93:85:b7:b2:82:f9:2f:38:aa:c9:6f:39:a2:f8:73:2c:a1:
81:28:34:b3:44:69:ee:7c:cd:5c:65:c3:50:49:df:47:37:ca:
4e:7a:3f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:29 2024 by rpki-client on console-ams.rpki-client.org