Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10758CD6E74E11EEA3EEFC7D775412E6.roa
File: 10758CD6E74E11EEA3EEFC7D775412E6.roa (raw, json)
Hash identifier: MNjhXRLuDdzJEr8v7COC3lfXX243bLJi4U+Iiv6Msv4=
Subject key identifier: 5E:E8:AA:03:E3:3D:64:D2:34:E0:89:28:88:BB:C4:F7:1F:11:D0:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A453
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10758CD6E74E11EEA3EEFC7D775412E6.roa
Signing time: Thu 21 Mar 2024 06:41:36 +0000
ROA not before: Thu 21 Mar 2024 06:41:33 +0000
ROA not after: Tue 23 Apr 2024 06:41:33 +0000
asID: 44559
IP address blocks: 154.220.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42067 (0xa453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:41:33 2024 GMT
Not After : Apr 23 06:41:33 2024 GMT
Subject: CN=65fbd6a0-fd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:e5:e3:cf:c2:07:2a:8b:c3:34:04:90:74:
27:ac:36:09:94:e7:e9:ce:4f:8e:93:f9:1d:bf:d9:
eb:70:26:3b:b9:1e:8c:ff:1b:c3:ec:39:00:bb:50:
75:d8:cc:63:42:06:16:30:fc:cb:30:d0:72:a3:10:
81:47:f1:9f:3d:f6:bd:4a:80:90:88:91:e6:d9:6e:
c5:6b:d2:c6:c8:8c:65:0a:7e:ee:37:6d:f2:3a:7d:
77:c1:ea:66:1e:e1:17:76:34:b0:26:68:5c:93:7d:
45:7b:9e:c2:a9:f3:ae:83:57:66:fd:02:08:41:ab:
2c:a7:59:a1:7e:90:f3:28:65:eb:82:30:9d:42:2b:
d4:aa:0d:de:2c:e1:9b:4a:52:9d:b8:e5:27:71:7b:
0c:6d:8c:bf:d4:53:7f:64:cc:e1:b6:fa:f1:42:ca:
b5:13:3a:12:df:a8:76:59:52:eb:c6:c3:a1:28:61:
31:53:9b:26:34:cc:ae:a9:86:31:34:42:88:7a:f8:
15:73:0f:20:5c:09:2e:81:d7:a9:85:b3:6a:8b:9a:
0f:20:1f:65:6c:09:11:0f:51:48:82:ec:d6:df:28:
98:13:94:6c:20:69:13:09:e9:b9:64:6f:60:8b:3c:
cd:41:20:1b:1e:81:2d:08:82:65:bb:35:9f:71:7b:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E8:AA:03:E3:3D:64:D2:34:E0:89:28:88:BB:C4:F7:1F:11:D0:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10758CD6E74E11EEA3EEFC7D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.143.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7a:b3:e8:f0:10:eb:7e:ac:67:0d:82:3e:1c:ed:29:b2:bf:
d2:0a:ff:ae:c9:09:c0:b5:79:ae:de:cf:93:96:46:70:b1:24:
e0:19:fb:a5:6e:ba:e1:0e:b4:ec:5a:c3:74:e9:d3:c3:cb:73:
e9:18:a0:40:56:2c:0e:1c:40:15:d6:3e:5c:f1:eb:e4:b0:fa:
4d:14:f4:69:fe:96:c6:77:d5:85:3b:2a:05:c7:17:73:25:c2:
f5:f4:30:df:3d:8a:d4:ff:76:71:3f:81:d6:01:df:9e:eb:40:
6f:a9:9f:41:ac:db:87:b5:ab:2e:a8:02:6d:c3:4e:34:f3:f7:
51:3a:c7:53:78:12:1a:2b:b3:09:0e:46:6e:fd:b6:9f:2b:f5:
57:cb:d0:af:3b:b8:8c:d5:d5:8a:5e:f1:f8:ad:46:f4:71:75:
35:6f:e4:bf:25:ca:2f:df:29:b6:45:4f:85:39:28:56:1b:5a:
07:3d:86:8c:33:c9:b1:20:bb:30:70:f9:c1:07:37:0d:d6:8c:
e4:c6:cd:fa:ef:e6:50:56:51:06:b9:71:16:79:2f:f3:f2:f0:
1d:b2:51:f2:02:14:7f:e2:72:41:87:7d:b6:b3:1b:8b:e0:30:
6c:d8:b2:57:42:3b:55:b4:f1:49:d0:5e:f3:be:48:5a:ef:52:
54:83:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:13 2024 by rpki-client on console-ams.rpki-client.org