Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3DDACEE73C11EE83182572775412E6.roa
File: 0F3DDACEE73C11EE83182572775412E6.roa (raw, json)
Hash identifier: lWwbcRw6dNU/iYbdNJO6I4pcgvK6nCAs7ObWkFyoQ8M=
Subject key identifier: 87:F5:DF:F1:07:73:7E:A1:4E:98:8B:08:36:D3:80:38:0C:38:07:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3DDACEE73C11EE83182572775412E6.roa
Signing time: Thu 21 Mar 2024 04:32:44 +0000
ROA not before: Thu 21 Mar 2024 04:32:40 +0000
ROA not after: Tue 23 Apr 2024 04:32:40 +0000
asID: 44559
IP address blocks: 154.221.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41892 (0xa3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:32:40 2024 GMT
Not After : Apr 23 04:32:40 2024 GMT
Subject: CN=65fbb86b-6e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:b2:ad:47:cf:60:72:b5:7c:98:ee:a9:1c:
70:fc:8c:1b:d1:22:c6:0e:6e:b9:87:2d:20:99:04:
cc:b2:09:b5:f3:fc:c6:e8:db:49:5b:d6:6c:9f:95:
f5:4f:08:dc:bb:0b:27:41:65:38:ed:1b:ba:2f:f8:
08:52:a0:d9:77:68:fb:b1:f0:7d:ec:01:9c:ed:50:
14:9f:3f:83:7c:34:b8:8b:1f:5e:ee:31:22:4a:97:
d1:a5:13:e5:c9:1c:21:29:81:18:bf:11:24:d9:ca:
dc:36:62:a4:ae:3b:29:e6:bf:d9:96:d4:91:40:30:
c1:a2:42:24:d6:04:c0:4e:c9:7e:be:66:f1:96:e1:
74:13:d6:c8:93:e1:25:9d:c6:d8:63:75:56:e1:f1:
07:6c:0a:d0:1f:5e:a8:08:a5:cd:2a:67:01:34:13:
a4:f4:c7:d0:83:45:90:9a:16:0b:5a:ed:3b:fd:54:
eb:ec:7e:ec:fb:5c:e5:f8:96:73:64:13:12:2c:dd:
bf:77:d6:4a:e1:e3:d5:5f:94:68:26:bb:27:a8:45:
e2:1e:09:29:7a:b2:bb:dc:2b:cd:5f:6f:17:cc:fe:
a5:d6:ab:2b:13:9f:b2:13:24:d5:6a:cb:ac:76:5e:
05:ab:57:42:05:98:33:ba:de:4f:d6:4e:a4:32:0d:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:DF:F1:07:73:7E:A1:4E:98:8B:08:36:D3:80:38:0C:38:07:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3DDACEE73C11EE83182572775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:96:5d:5f:c9:ea:90:2b:b0:1a:f5:bb:a2:ce:d8:ff:56:9c:
6d:a9:96:10:55:85:6a:5c:88:91:8c:5b:60:19:13:e5:5e:d5:
63:c3:2e:55:ea:2a:6f:e3:2c:b5:8a:c3:ac:ac:c1:81:90:75:
54:5b:0f:04:69:24:c6:d0:3e:0d:4e:fe:1d:a7:a8:6c:bf:74:
01:79:55:3e:5c:07:b4:5b:1e:c9:9a:45:35:1c:5d:77:d0:9a:
6e:bf:39:c1:3e:95:5c:6a:3e:eb:4d:f9:f4:9d:0f:7a:b8:7d:
7e:7a:91:01:85:f2:c7:50:b8:83:4b:56:4b:65:0a:97:bb:9a:
c9:ab:a9:25:0c:b2:eb:0c:13:c3:f6:66:2f:c0:ff:92:54:65:
8e:c6:e5:fc:43:b9:a1:67:76:68:f3:1b:bf:64:87:24:3a:8f:
7a:84:46:ba:6e:27:b4:17:3a:31:c4:08:e1:a1:a5:cf:14:9b:
ef:4d:9b:f6:37:a1:92:68:dc:75:19:8f:b6:7e:d4:19:dc:3c:
f5:22:23:cb:ae:a4:09:24:56:9c:6b:33:26:4f:55:ee:e5:f7:
33:51:8e:61:a6:93:46:6a:74:f7:98:61:1f:7b:93:bf:bd:b7:
d7:dd:16:14:04:05:81:cd:87:8f:3e:11:ce:e5:46:f1:e1:7e:
40:5a:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:13 2024 by rpki-client on console-ams.rpki-client.org