Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105B7DEAE78111EEA9DCF98B775412E6.roa
File: 105B7DEAE78111EEA9DCF98B775412E6.roa (raw, json)
Hash identifier: E3Yn+uOCQJumNpdg0QCliSOqcgKC4snKhMzsx0K5oPM=
Subject key identifier: 11:F2:46:75:CF:C6:04:C6:F0:60:0A:E3:B9:4A:EA:C0:A1:C1:D2:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A571
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105B7DEAE78111EEA9DCF98B775412E6.roa
Signing time: Thu 21 Mar 2024 12:46:41 +0000
ROA not before: Thu 21 Mar 2024 12:46:37 +0000
ROA not after: Tue 23 Apr 2024 12:46:37 +0000
asID: 44559
IP address blocks: 154.210.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42353 (0xa571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:46:37 2024 GMT
Not After : Apr 23 12:46:37 2024 GMT
Subject: CN=65fc2c31-14b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:cd:8b:1f:2e:cc:1a:bc:91:8d:a6:bd:4d:
e7:dd:c4:b0:1d:7b:2f:8e:e2:cd:e0:f6:2e:74:32:
ac:20:16:2f:1e:b8:f2:0e:f4:30:3e:0b:8d:11:a9:
cd:08:4d:e4:3a:2d:dd:05:8c:0c:85:24:f7:63:0d:
68:b9:6c:ef:a9:f1:0a:81:a4:29:87:f9:b0:89:fa:
d2:2d:52:34:bf:3e:4b:fa:b4:5a:3f:5d:43:66:6d:
33:5d:c6:2d:c4:fa:04:6c:b0:ca:d8:09:10:5c:22:
c0:6b:1f:13:5f:9c:b1:ac:d5:f6:6e:ca:09:7b:18:
f3:62:d1:a2:26:d0:9f:6f:29:82:9a:ce:68:4c:90:
67:16:c8:b9:8a:85:9a:3e:d7:7a:ea:7b:04:94:ff:
03:2a:a3:14:46:5c:95:b2:5c:a6:c0:0f:5e:f6:54:
d5:18:56:3d:ab:10:3b:3a:b3:be:94:cb:a8:91:dc:
9a:b5:3a:37:e1:f9:ad:4d:83:a3:43:10:9e:61:0f:
cb:54:45:ca:05:94:84:91:24:20:4c:c8:64:23:7c:
47:2b:2a:5c:db:e1:11:db:03:24:dc:47:74:25:fd:
af:68:a0:ae:01:a5:bb:11:95:fa:09:ce:5d:ea:c6:
1b:6a:ba:95:ec:bd:c6:23:ce:90:f3:0d:0b:8f:e4:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:46:75:CF:C6:04:C6:F0:60:0A:E3:B9:4A:EA:C0:A1:C1:D2:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105B7DEAE78111EEA9DCF98B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.100.0/24
Signature Algorithm: sha256WithRSAEncryption
75:92:a0:17:38:af:91:df:9b:4c:dc:3e:2f:19:df:db:ea:c6:
72:23:2e:4b:8f:b3:4b:e2:93:20:2d:05:b2:0e:92:64:9a:f1:
da:99:21:65:57:34:af:87:70:ba:d7:eb:1a:fe:4f:a3:70:f3:
a5:7b:34:49:55:e4:f9:3b:bb:9a:38:d2:9a:d2:96:1f:77:b0:
9e:bf:88:17:f7:ec:58:95:03:2a:b2:77:62:14:8f:34:c4:6b:
79:c8:e3:a3:53:53:59:e7:c2:50:f9:8e:7e:97:33:b2:dc:7b:
70:65:c7:c9:81:fe:72:0c:00:d8:a2:83:87:7d:57:72:88:6e:
af:f1:48:c2:5b:f5:ba:0c:3e:f2:e2:0c:d8:29:96:05:1f:f8:
f3:79:f8:ac:90:66:45:6f:82:a5:87:43:7e:4c:7c:fa:0a:cc:
2e:20:6b:30:80:e1:83:99:92:0b:e4:dd:e8:8f:74:82:00:dd:
dd:b2:9b:6c:98:3d:cc:d5:b0:d8:26:8c:03:f9:ff:a1:8d:83:
0c:91:18:b2:d3:dc:11:18:5f:bd:fe:90:27:a3:ed:49:95:08:
3d:5b:84:08:4e:00:2a:82:e9:4b:82:ba:58:78:e1:49:c6:bd:
49:55:40:e4:54:ec:04:0f:58:93:61:19:d9:9f:71:4c:15:4c:
41:7e:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org