Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F506C2CEC5C111EEB4CEF96F775412E6.roa
File: F506C2CEC5C111EEB4CEF96F775412E6.roa (raw, json)
Hash identifier: cf3/DwQ75TmfueIOC7RKV8M+pjwkdSMEFI3tRHQBtjc=
Subject key identifier: D2:36:91:64:78:E0:92:DB:67:0F:CE:0F:9E:58:4B:2F:2C:EF:DA:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 86EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F506C2CEC5C111EEB4CEF96F775412E6.roa
Signing time: Wed 07 Feb 2024 14:05:33 +0000
ROA not before: Wed 07 Feb 2024 14:05:29 +0000
ROA not after: Wed 31 Jul 2024 14:05:29 +0000
asID: 53356
IP address blocks: 154.214.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34540 (0x86ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 14:05:29 2024 GMT
Not After : Jul 31 14:05:29 2024 GMT
Subject: CN=65c38e2c-0cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:88:72:54:63:f6:96:59:85:f2:c0:c4:f1:
2c:8f:1e:e3:ce:c9:1b:b1:3b:8d:b0:2c:34:32:5c:
be:f1:70:2b:a8:32:11:68:fc:d5:b6:de:a1:42:37:
a6:5c:f0:f4:01:9f:a0:7c:4f:20:07:c3:94:4c:dc:
02:30:6e:ed:bb:39:60:58:d9:8b:99:94:93:81:9a:
db:06:f4:fe:f5:f0:f6:cd:32:1c:84:6f:c5:e8:e2:
10:8d:c0:76:50:c2:93:ea:e2:ae:78:a5:91:ea:94:
db:d2:a5:3b:62:4b:e8:26:4d:ad:b8:47:bc:70:10:
22:f1:8c:c3:4f:bd:e3:31:26:64:df:dc:3f:84:e3:
54:82:47:f5:e1:5a:46:fb:18:9d:cc:a0:23:70:a1:
f0:56:9c:6c:10:c2:60:cd:1c:de:af:b9:94:a1:e2:
c6:9d:a4:78:0c:48:5a:8c:05:eb:20:aa:60:34:df:
b7:fe:28:29:bc:da:fd:d4:ea:c0:e6:f4:94:c4:ff:
9e:2f:3d:bf:c4:bd:2b:75:2b:f3:9b:16:01:fa:3d:
9f:76:9a:b4:e0:f5:b9:75:c7:4f:b7:c0:2f:f4:f1:
ba:13:29:fb:35:c9:8f:8e:35:88:35:f7:92:69:c3:
59:0a:31:bd:8b:45:aa:ab:c3:e8:da:e9:c3:7e:26:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:36:91:64:78:E0:92:DB:67:0F:CE:0F:9E:58:4B:2F:2C:EF:DA:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F506C2CEC5C111EEB4CEF96F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.236.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:a4:cf:ce:44:e6:97:a3:82:e1:90:32:3a:41:ef:2b:2b:ea:
4a:bd:41:bc:7a:5a:a0:5a:df:55:92:49:8e:d1:99:76:55:87:
61:dd:83:e8:36:c6:e9:09:b4:fb:cb:26:f9:19:8d:bf:ec:4d:
c3:4b:a9:f2:ba:9a:3e:f8:a8:43:59:b9:0f:45:95:ca:ad:d9:
2f:32:a1:d3:d9:59:72:29:f8:59:70:26:b0:db:40:18:ea:40:
89:20:53:3c:a4:10:71:46:19:f2:c0:ea:07:79:40:29:63:d1:
ff:e0:c0:55:94:89:e5:1a:99:fd:88:24:13:b5:e6:41:b9:8c:
1d:ee:bc:2c:33:f9:f9:e2:14:af:73:7b:85:e2:f5:38:7d:e2:
dd:e7:ea:84:34:5b:42:e5:75:95:34:21:a6:03:49:3c:18:ed:
08:64:fa:06:6c:d2:c7:41:d3:07:d7:b3:a9:79:fa:8e:dd:4c:
f5:d1:eb:f0:29:3e:76:62:9f:81:dd:86:0f:10:62:3b:5d:4c:
35:a2:c5:57:85:49:0f:86:2f:5a:16:13:41:f3:33:d8:29:7a:
05:25:5f:35:db:ac:52:d8:0b:10:56:27:6f:45:b6:38:26:e5:
74:1c:03:3c:f2:da:1f:9a:79:91:06:31:68:75:f6:e2:6a:10:
94:cb:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org