Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1067E212E74311EEBDC1B5A8775412E6.roa
File: 1067E212E74311EEBDC1B5A8775412E6.roa (raw, json)
Hash identifier: J+XFMkY+kNGcw/X//0e/taW2wqdSTkIBOjBVMIpSbY0=
Subject key identifier: B5:18:BE:53:4B:FC:37:15:00:A0:84:B2:5E:ED:DC:30:A7:61:CE:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1067E212E74311EEBDC1B5A8775412E6.roa
Signing time: Thu 21 Mar 2024 05:22:52 +0000
ROA not before: Thu 21 Mar 2024 05:22:49 +0000
ROA not after: Tue 23 Apr 2024 05:22:49 +0000
asID: 44559
IP address blocks: 154.221.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41962 (0xa3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:22:49 2024 GMT
Not After : Apr 23 05:22:49 2024 GMT
Subject: CN=65fbc42c-2eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:8e:bb:db:a2:74:01:3d:21:0d:7b:f1:c7:
3c:66:6c:20:00:12:02:75:c7:4c:df:46:f0:59:99:
be:cf:8c:7a:65:f4:e2:04:e7:9b:be:2c:d4:a9:70:
7b:f6:78:ce:a8:1e:bc:c3:97:a7:02:13:ad:3e:ad:
86:c0:2a:6c:1a:29:62:77:3e:76:b3:3f:9f:9e:4b:
cd:07:26:17:a9:e1:fb:f7:8a:38:1d:ed:5e:92:3b:
66:5d:ef:fb:ba:49:ce:1b:bd:4a:0e:ab:79:b1:ac:
0c:ac:87:8c:b3:5d:64:7b:d9:b7:96:74:e4:d8:ff:
24:18:4a:00:ca:22:a2:ea:65:5e:3b:3b:1e:49:30:
5a:8c:27:a2:0b:15:e9:6e:23:57:a9:8e:e5:5c:4e:
08:d8:e4:4b:cb:68:79:12:0c:1a:ce:da:74:e5:30:
70:d8:c9:7b:54:3c:b5:1f:16:99:45:9c:0c:02:0d:
d1:ec:31:c7:ed:41:5a:6b:dd:d5:49:49:39:32:eb:
18:da:eb:af:f8:c2:79:29:f1:23:50:c3:a4:89:40:
55:d2:5d:4d:31:e0:e8:94:95:72:1b:fb:75:9f:df:
1c:7c:68:cc:00:13:43:3d:b2:04:47:b8:48:69:af:
4f:fb:fd:55:06:a8:1a:49:00:bc:8e:76:fc:9c:0f:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:BE:53:4B:FC:37:15:00:A0:84:B2:5E:ED:DC:30:A7:61:CE:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1067E212E74311EEBDC1B5A8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.196.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ec:a5:50:76:6c:6f:4c:7a:5f:a5:d7:9b:7f:c7:46:f1:af:
b9:40:f4:d3:32:87:8d:44:78:6b:29:ec:85:25:a6:e0:92:36:
e8:79:e4:70:ad:b2:82:bb:5b:8d:dd:6c:73:9c:c6:76:9c:72:
a9:93:6f:04:c1:e9:ec:c8:c1:95:8a:bf:5f:b5:58:a7:1a:46:
66:9a:d4:c0:56:94:63:8d:a4:3b:bf:82:f6:7e:10:52:f4:f7:
27:b1:d2:ec:e6:4a:94:99:1e:f7:dc:53:fa:1f:22:10:ea:60:
51:26:28:7e:82:bc:20:0e:8f:69:bd:1b:d6:3e:3c:ee:cf:8f:
c2:13:8d:78:1f:62:5b:14:94:81:9b:53:da:10:d4:38:25:67:
0d:4c:93:1d:39:4d:6e:d3:f0:8e:bd:13:4a:13:fe:44:0d:d1:
59:82:44:29:fa:b8:b6:4d:40:1b:9e:3c:32:e0:4f:f3:ab:80:
10:39:45:65:2f:88:99:af:55:81:b1:ce:9a:02:d8:4e:4e:70:
d6:b4:b5:4d:06:d3:40:a9:d4:50:21:35:ad:42:14:49:bd:fe:
86:75:cd:55:eb:e0:9b:c7:a6:7d:24:3f:12:db:9c:5f:b1:1c:
67:33:94:2e:9d:3c:75:9e:54:c1:bb:db:5f:00:ec:45:c0:61:
32:61:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:13 2024 by rpki-client on console-ams.rpki-client.org