Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C30D1AEE76111EEA5C08094775412E6.roa
File: 0C30D1AEE76111EEA5C08094775412E6.roa (raw, json)
Hash identifier: 4iKyUH53v59Vh43uEs3NpIZ9i2/giuS63FEk4M58P8Q=
Subject key identifier: 53:FF:4E:E3:02:31:42:8F:29:16:7D:5A:A2:D5:98:DB:A8:92:68:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A50B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C30D1AEE76111EEA5C08094775412E6.roa
Signing time: Thu 21 Mar 2024 08:57:30 +0000
ROA not before: Thu 21 Mar 2024 08:57:26 +0000
ROA not after: Tue 23 Apr 2024 08:57:26 +0000
asID: 44559
IP address blocks: 154.222.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42251 (0xa50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:57:26 2024 GMT
Not After : Apr 23 08:57:26 2024 GMT
Subject: CN=65fbf67a-2b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:b8:d7:48:a6:f0:73:90:a5:6b:27:e7:b2:
25:67:40:0b:89:de:46:23:17:0d:11:8f:84:9a:f5:
97:6c:39:36:ea:a2:9a:ff:3f:8d:d7:eb:1b:bf:83:
23:06:5e:f1:ff:84:d0:26:cc:0b:5d:9a:4f:84:6a:
c1:bb:78:c1:8e:d2:c0:30:34:64:ac:89:73:83:f1:
7d:ee:e8:30:62:9f:d7:f3:5d:75:72:ea:f4:58:ee:
ae:58:4a:f0:bf:73:e8:a6:75:7e:1e:2a:5e:85:35:
1f:83:87:ab:cb:1f:89:52:2a:68:27:53:6f:5d:8e:
2f:e2:ef:93:d7:86:56:7a:b2:f4:9b:99:29:3c:2c:
b0:e0:ad:97:2f:3e:e2:4e:cb:56:c3:df:8b:8b:b9:
b1:11:e6:ec:17:44:5b:9d:66:b2:0f:62:44:e3:93:
8b:2e:d1:1c:3a:98:f5:31:98:ff:1a:8b:52:48:44:
e9:d0:f2:2d:79:ba:78:08:9d:55:5b:cd:c9:03:77:
de:75:76:9b:67:54:6f:c9:23:c4:c1:e5:a3:d1:b6:
49:cb:fd:3d:ac:27:83:9d:58:59:18:23:4e:9e:eb:
4e:31:22:1f:0d:d5:f6:29:c2:25:9e:bd:cb:7b:af:
0a:29:d6:6f:36:93:7e:93:4d:d7:ee:31:5f:33:bd:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:4E:E3:02:31:42:8F:29:16:7D:5A:A2:D5:98:DB:A8:92:68:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C30D1AEE76111EEA5C08094775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.19.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:bf:5f:29:c9:c0:68:18:8c:74:50:49:a6:86:ae:36:3d:df:
f6:21:fa:52:3e:75:d8:29:a0:f4:98:12:47:94:81:24:93:ed:
13:c5:b1:68:0a:72:23:58:f2:91:38:8e:b5:3a:74:86:3a:ce:
96:bb:25:bc:c0:46:3c:eb:31:b1:27:dc:9c:d4:34:2a:6a:da:
7a:bf:16:b1:c1:09:1b:02:3d:48:6e:99:a6:01:a4:5e:b4:03:
2f:f1:78:61:94:d4:0c:8b:ec:f7:42:0e:5b:51:4c:12:f3:79:
82:58:db:2c:32:3f:8e:e4:f8:7f:eb:a8:00:cc:90:46:03:e9:
19:c1:5f:dc:d3:ba:91:df:92:2e:53:ad:97:6c:94:9c:96:3f:
ad:88:e0:16:5d:01:87:3b:0c:6f:0d:af:f9:74:3b:d8:d8:11:
97:b6:87:d7:68:fb:4b:37:ca:6b:31:75:10:64:a9:85:10:77:
89:80:75:b8:ad:38:e3:3f:f7:dd:7a:10:50:7a:e8:48:ab:be:
d3:bd:19:89:77:cc:a3:7c:b2:1c:0b:ce:5a:be:eb:85:bf:51:
a7:a0:c7:4f:ee:b6:09:82:8a:f6:1b:a9:9d:79:98:61:a9:a1:
ff:aa:0c:5f:fe:84:0b:f2:d4:dc:73:0c:e1:4c:e2:4a:ea:6b:
39:f1:a4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:13 2024 by rpki-client on console-ams.rpki-client.org