Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F589EB86B34211EEA34B2166775412E6.roa
File: F589EB86B34211EEA34B2166775412E6.roa (raw, json)
Hash identifier: zqHeJpqHYtIp0zp2hZm/o/3BFD4bkm7WPOSnEpud4r0=
Subject key identifier: 7C:CA:D0:42:DA:91:6A:30:30:6E:2B:75:A6:56:4F:17:F7:DF:C4:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7516
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F589EB86B34211EEA34B2166775412E6.roa
Signing time: Mon 15 Jan 2024 01:11:06 +0000
ROA not before: Mon 15 Jan 2024 01:11:03 +0000
ROA not after: Fri 13 Dec 2024 01:11:03 +0000
asID: 140227
IP address blocks: 154.205.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29974 (0x7516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:11:03 2024 GMT
Not After : Dec 13 01:11:03 2024 GMT
Subject: CN=65a4862a-41ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:d8:33:7a:cb:7c:9e:3c:6e:64:96:b0:b3:
28:bf:86:5b:c2:8e:c6:8c:a7:dc:0a:69:86:91:13:
9e:e4:61:4a:2c:54:04:20:55:24:59:a3:71:4d:bf:
ce:16:cb:e7:8a:3a:c2:88:3d:15:62:c7:3b:02:91:
bc:7b:27:5a:bb:dc:b4:82:47:26:94:33:b2:fa:a2:
58:e7:d4:89:01:2e:4f:81:a3:17:3a:e0:5b:5a:c8:
14:59:6e:a5:48:d7:da:bf:d8:1e:80:b5:fa:61:ce:
2d:7e:4e:7f:ee:e1:5e:69:37:ff:66:6a:6f:2d:50:
3a:aa:43:2a:10:5a:18:48:b5:f1:98:14:9a:5a:fd:
11:99:ff:65:80:52:25:e6:3a:a2:28:7b:20:46:14:
87:44:20:de:02:48:a9:2d:df:08:e1:b1:95:ce:4f:
d9:5c:61:cf:dc:bf:35:79:1d:cd:c4:b3:26:72:7e:
2f:d9:1f:63:4e:08:43:41:3c:f0:15:e7:cc:61:43:
a4:fc:e5:c4:3a:7e:e7:12:9c:2c:32:95:f6:61:81:
55:d9:05:33:fd:77:9b:8b:fd:7e:fb:67:f9:ef:3b:
dd:7b:2b:84:56:b8:bf:56:2f:b5:0f:02:06:79:27:
a9:8e:50:23:2a:8c:84:75:f6:00:ac:8f:ef:a1:11:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:D0:42:DA:91:6A:30:30:6E:2B:75:A6:56:4F:17:F7:DF:C4:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F589EB86B34211EEA34B2166775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:3d:65:c1:78:3c:dc:d7:fe:f7:ee:aa:5d:69:00:ad:8d:7f:
b9:df:1e:81:56:c9:70:67:3c:e6:e0:0c:1c:75:7e:34:81:5f:
29:fa:80:3d:ec:1f:3b:06:cc:41:4e:ec:f8:ec:10:f1:1a:e3:
d0:58:f5:fa:ea:73:87:97:fa:e1:b5:59:c3:7a:69:53:69:f3:
c5:83:e7:ff:14:59:8e:44:6a:c0:95:be:55:46:d3:42:4d:a2:
1f:b1:eb:d3:9e:95:9b:6a:b7:21:4a:0d:30:e3:0c:ad:90:94:
0a:80:61:b9:5a:9e:ad:0e:34:66:74:db:37:fb:90:f8:7e:8d:
17:2d:bd:68:74:40:ba:1c:06:3e:be:26:37:b1:85:18:a9:be:
5e:95:2f:2d:da:22:a5:c5:94:04:34:b3:d2:af:01:cf:1a:69:
c3:ef:75:c3:cd:ae:22:fc:e0:8b:05:7f:7c:aa:a3:99:c2:1f:
72:97:da:fc:bf:3e:2c:a9:3a:2d:80:ec:b7:4c:dd:49:09:7b:
93:81:e2:8b:59:bd:e6:a1:be:c1:bf:e1:ff:ec:8a:a6:42:3d:
4b:14:d9:b2:27:0f:6c:7d:5f:09:91:ef:f4:00:18:35:ed:3e:
c3:dc:24:4c:46:0b:69:fc:94:81:b5:f4:65:72:72:e0:c0:53:
3f:b5:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org