Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0442B372FAE911EE9CA48166017001B1.roa
File: 0442B372FAE911EE9CA48166017001B1.roa (raw, json)
Hash identifier: y74wXTbSp+0XxjG10GxJtBuUr8MjQ2zB8vGb9ck/PFU=
Subject key identifier: 12:13:2D:06:A0:49:41:C7:94:8B:57:A1:AD:96:FB:E2:76:67:99:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0442B372FAE911EE9CA48166017001B1.roa
Signing time: Mon 15 Apr 2024 05:28:40 +0000
ROA not before: Mon 15 Apr 2024 05:28:37 +0000
ROA not after: Wed 29 May 2024 05:28:37 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44176 (0xac90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:28:37 2024 GMT
Not After : May 29 05:28:37 2024 GMT
Subject: CN=661cbb08-bea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:6c:ca:df:16:74:a4:18:41:51:92:c2:67:
e7:8f:33:fb:c8:a3:8c:10:2b:c8:f4:86:93:95:c1:
13:21:1c:04:8b:5d:a5:75:87:0e:71:cb:8a:22:8a:
38:8c:a1:c9:54:13:d4:9c:04:e6:34:54:83:7e:9c:
1a:c9:4e:34:7a:6f:ef:7c:d2:5d:88:ae:2f:e6:32:
35:aa:16:d3:3e:37:5a:03:32:4e:9c:3c:9f:93:ba:
1c:e9:5a:67:56:e9:aa:7d:66:0a:41:5b:48:d6:1f:
f9:f2:8e:e3:42:92:99:59:b5:83:b9:78:f9:4d:1f:
a8:8f:80:91:e0:40:4a:66:4d:43:9e:70:32:cb:33:
25:df:02:06:0e:19:e7:3b:39:90:e8:d9:b3:2c:30:
48:b0:51:61:79:17:4c:d2:7c:f0:b2:a4:86:3f:3f:
f1:60:cd:86:02:12:37:33:1e:51:32:e6:77:a1:ef:
22:22:a0:52:aa:e1:55:90:ec:3d:ad:73:6e:c3:3b:
26:34:9b:f6:76:51:46:07:23:98:93:65:48:37:0b:
cc:3f:3a:7f:14:79:26:d1:59:a4:02:91:dc:7d:39:
ba:55:67:a3:57:fe:5d:7f:92:68:b6:10:25:4e:ad:
bf:1e:e6:2a:c9:c3:08:ee:54:b8:88:23:d7:92:88:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:2D:06:A0:49:41:C7:94:8B:57:A1:AD:96:FB:E2:76:67:99:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0442B372FAE911EE9CA48166017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0f:d8:2b:b0:a0:1c:fa:76:2b:0e:ed:59:60:61:56:39:83:
86:df:63:22:9f:55:24:ab:0e:fd:3f:bf:9f:ea:bb:b9:f4:aa:
f2:22:f1:8d:2d:59:ca:e2:fb:cd:e7:30:bd:0c:e5:44:53:fe:
79:19:45:d8:98:9c:f0:55:7f:a0:ca:4d:b4:5e:68:db:7d:bf:
31:f4:22:5a:fd:6c:03:4a:af:84:f0:61:00:d7:04:21:61:b7:
cc:79:61:92:88:96:9f:0f:ee:62:a1:f8:75:e9:e1:88:3c:4a:
ff:3a:8b:39:e7:b4:b2:bb:ae:d4:f6:d9:2f:69:6e:8a:48:b7:
cd:0a:41:2c:14:ed:a4:60:39:8b:68:8c:66:24:86:5b:1a:1b:
3f:3a:21:1f:d9:68:34:42:36:8e:27:b8:15:ef:fd:7f:3e:d6:
a1:3f:f4:34:39:48:be:c5:08:76:2c:e2:e3:4e:31:65:d4:a0:
4d:ad:06:e4:ba:41:e6:4b:68:0e:df:fc:c7:ad:f1:b1:2a:85:
b6:1f:a3:e9:43:07:24:d5:60:98:5c:7c:84:96:27:49:07:4b:
cf:6c:36:89:a6:72:33:7a:6e:5b:15:73:9a:fe:d9:1a:2f:6e:
b7:06:ff:78:f1:81:29:aa:6f:fa:6e:a9:b8:06:a3:0d:ba:32:
33:f8:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:46 2024 by rpki-client on console-fra.rpki-client.org