Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E612E4CE74D11EEA184E477775412E6.roa
File: 0E612E4CE74D11EEA184E477775412E6.roa (raw, json)
Hash identifier: HOShRALBGbLhRr1VkK22Hg7H3yHfzPvbA8+uQLLCa9s=
Subject key identifier: 00:D2:60:32:00:03:A8:66:B3:F7:96:D2:F0:25:D7:B0:E8:07:E3:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A449
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E612E4CE74D11EEA184E477775412E6.roa
Signing time: Thu 21 Mar 2024 06:34:23 +0000
ROA not before: Thu 21 Mar 2024 06:34:20 +0000
ROA not after: Tue 23 Apr 2024 06:34:20 +0000
asID: 44559
IP address blocks: 154.220.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42057 (0xa449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:34:20 2024 GMT
Not After : Apr 23 06:34:20 2024 GMT
Subject: CN=65fbd4ef-4fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:89:0c:0e:c9:2a:c5:ac:23:ac:6d:49:b1:
99:61:95:7d:3a:32:5e:95:09:d6:a2:c9:96:55:68:
bc:07:dc:9e:0a:72:50:35:8c:19:b8:4a:ea:16:2b:
3f:3f:86:26:f7:36:6f:e4:de:b0:81:30:be:f3:24:
e5:04:d3:f5:2b:70:e9:d7:c5:2d:44:73:df:22:d3:
5b:18:08:c9:cf:75:70:58:1e:a8:80:5d:c0:3b:9c:
63:12:f8:a8:0e:47:b6:fb:6d:18:59:ff:98:41:ac:
9b:73:93:03:56:56:89:bd:7a:d9:70:f1:27:1a:76:
99:b5:73:7b:9f:7a:5c:53:6d:fa:96:42:f2:01:a1:
80:6b:0a:ee:90:f0:16:d2:d7:e8:28:92:4a:6f:dc:
17:b2:d6:da:44:ed:34:9c:64:d9:4d:bc:1f:fd:05:
91:0d:72:e4:ec:f6:43:ba:3f:50:62:87:bc:31:50:
61:4b:2c:1b:db:a2:90:ca:15:4b:cf:78:5e:67:7f:
0d:50:90:0c:65:ff:60:1f:18:4f:3a:5b:7c:d4:0d:
75:8e:f0:fe:fc:2e:ec:72:1f:14:af:6a:d2:d1:af:
f9:00:1b:f9:0f:28:30:cb:a4:e5:7c:18:0d:b2:31:
29:7f:6e:06:57:73:5a:58:f8:0e:a7:d7:65:38:0f:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D2:60:32:00:03:A8:66:B3:F7:96:D2:F0:25:D7:B0:E8:07:E3:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E612E4CE74D11EEA184E477775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.148.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:3f:e1:d3:33:ab:be:b9:97:90:86:60:f1:f8:19:03:ce:a6:
5b:1f:7e:5a:25:97:93:dc:c8:c7:78:2b:3c:dd:f9:31:09:51:
b1:c8:e0:4f:91:bb:84:f1:e0:b6:57:4b:cd:7a:66:7b:19:60:
0f:65:90:4e:e9:3a:d4:69:d5:54:65:58:0f:f4:d5:fd:f0:56:
9a:de:30:c9:c9:1d:bb:ac:a9:76:c6:f4:55:f2:67:46:a8:27:
30:d1:ea:ca:c4:fc:80:3c:72:2a:d2:e3:f5:c8:91:72:c6:b2:
75:95:58:18:c1:2e:0c:12:18:2c:3f:9e:36:ee:d4:74:cb:4a:
38:ce:6d:17:02:af:71:d7:fb:d2:6e:99:a0:17:03:cd:2b:01:
dd:a1:d8:c8:0b:26:ac:0b:9a:73:78:fa:f1:fd:87:5c:8b:ed:
c2:7b:92:71:af:da:8c:94:bc:20:f3:ec:fe:16:f1:83:0a:50:
3d:77:eb:78:c2:ba:86:07:38:35:15:20:6a:c9:74:8f:34:01:
e3:49:27:9f:d9:b1:f5:ea:b8:08:d6:b3:12:a0:09:c0:be:ae:
5e:ec:c5:bb:b8:a9:77:59:44:5b:49:d7:58:1f:b6:6b:b4:5e:
29:1d:19:b0:e6:46:78:b1:57:d5:06:93:23:18:1b:9f:97:50:
11:c1:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:13 2024 by rpki-client on console-ams.rpki-client.org