Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6705442B10111EEBC999862775412E6.roa
File: F6705442B10111EEBC999862775412E6.roa (raw, json)
Hash identifier: Q1L8xodjxKrMGdS4xQ1I6A6+HJuzxaue3EVAalaeISc=
Subject key identifier: 18:6A:58:A4:16:CF:03:20:27:55:7B:99:F2:46:66:91:F1:02:A3:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 749D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6705442B10111EEBC999862775412E6.roa
Signing time: Fri 12 Jan 2024 04:20:48 +0000
ROA not before: Fri 12 Jan 2024 04:20:45 +0000
ROA not after: Fri 13 Dec 2024 04:20:45 +0000
asID: 140224
IP address blocks: 154.205.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29853 (0x749d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:20:45 2024 GMT
Not After : Dec 13 04:20:45 2024 GMT
Subject: CN=65a0be20-b165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:a5:7e:d8:bc:3d:61:c9:ff:b1:d7:cd:37:
82:dd:48:39:9e:d9:55:8c:4b:be:d9:9d:40:4b:2c:
37:83:bd:3c:12:46:cc:92:40:4c:7b:8a:11:20:3b:
07:4f:3c:b5:b5:03:18:f2:88:af:f9:30:3d:2f:04:
83:4d:72:a0:65:23:59:2b:82:95:9d:fd:82:26:6e:
41:14:5a:e8:15:85:91:e7:3e:d7:c1:b3:c3:30:a3:
54:63:7a:23:17:b5:a1:d2:52:2a:e7:a6:9c:e5:0b:
3f:08:cc:7d:f1:0a:4c:e3:fd:a2:7e:49:5e:5c:18:
8b:0e:80:ae:ba:32:46:e2:fb:b2:9a:ef:e0:09:5f:
5c:1a:9c:7a:59:46:22:30:7d:c8:0d:62:d1:4f:04:
27:77:96:c2:b9:6e:87:6f:93:cc:d5:c7:a8:fd:b7:
9e:91:4d:cf:c5:bb:b5:75:80:f4:39:82:61:8a:fc:
d3:20:7a:ef:d6:e1:13:c0:9c:f6:04:27:a7:bf:55:
ec:83:ea:33:e8:5d:2a:8d:42:6c:4d:77:d4:ed:aa:
cd:4e:d5:d9:61:fb:cc:52:e1:8f:00:78:33:eb:00:
42:57:c4:f9:a4:72:92:76:e0:fd:f6:51:ba:06:8e:
30:7d:ad:99:f3:df:22:e2:98:fb:bf:2c:7c:7a:01:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:58:A4:16:CF:03:20:27:55:7B:99:F2:46:66:91:F1:02:A3:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6705442B10111EEBC999862775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ac:41:c6:fd:41:04:02:86:20:a0:b9:01:44:9b:fb:70:d5:
cd:6d:88:4b:66:80:51:91:d8:93:ce:ea:93:15:39:cb:71:9e:
88:06:bf:20:62:96:2b:bd:2d:d0:07:6f:39:46:bb:69:46:46:
7b:17:39:99:e6:17:8f:08:64:d3:56:bb:0f:88:ed:06:8c:7b:
b7:50:71:eb:95:2b:b4:33:01:ec:f1:77:06:0d:fc:32:6d:fa:
58:69:bc:f5:61:bb:02:f2:0d:4b:50:8a:13:2c:71:e8:96:93:
c6:6d:9d:10:c8:ff:2a:1a:e1:61:d9:8d:32:8a:14:8a:a0:4d:
f6:a9:1d:b4:5a:b6:91:be:e4:fd:11:c7:93:9e:74:1b:f5:26:
75:d9:b3:1b:65:86:88:e0:8a:bb:17:7c:7f:b0:e0:64:bb:04:
67:7a:00:a0:47:a5:16:c6:76:86:21:4e:95:d7:fa:e1:99:b1:
ef:2b:79:ac:6b:b2:ab:5e:bb:cd:ac:02:de:c5:7f:a5:7f:7f:
9f:54:22:44:34:a5:c6:64:39:8f:f3:da:54:59:0b:e2:e1:38:
08:12:28:c0:e0:96:9c:a6:14:a6:7e:c1:0b:3f:fb:76:e4:39:
06:6f:49:1b:0d:ea:03:c8:de:0d:f1:d6:11:75:cc:1f:44:43:
6a:5a:1c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:35 2024 by rpki-client on console-ams.rpki-client.org