Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/121457A2E74911EEB2355A58775412E6.roa
File: 121457A2E74911EEB2355A58775412E6.roa (raw, json)
Hash identifier: soxVwPkJzmXJQr4Yfdxq9tj0sq/LXKNsT/wDBnWMHpo=
Subject key identifier: 18:51:83:3E:8F:2F:4A:33:96:C0:39:FC:60:91:E8:92:8A:5F:02:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A421
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/121457A2E74911EEB2355A58775412E6.roa
Signing time: Thu 21 Mar 2024 06:05:52 +0000
ROA not before: Thu 21 Mar 2024 06:05:48 +0000
ROA not after: Tue 23 Apr 2024 06:05:48 +0000
asID: 44559
IP address blocks: 154.220.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42017 (0xa421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:05:48 2024 GMT
Not After : Apr 23 06:05:48 2024 GMT
Subject: CN=65fbce40-4fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:9b:5a:a5:02:fc:b4:cc:41:c4:3f:dc:13:
dc:38:72:cf:8e:ef:66:74:df:c5:19:a3:50:0d:f4:
82:8f:a5:01:91:92:fc:2f:25:f2:4e:42:70:0f:73:
39:ed:aa:ca:6c:54:0d:0e:f5:19:e5:0d:1c:31:85:
0f:48:83:b8:29:5d:bb:3f:5c:c6:df:dc:01:e9:5e:
b3:af:5f:d2:77:90:4b:c9:a2:6a:35:63:ed:54:7e:
c7:19:68:0a:84:c5:e8:37:d1:62:8d:55:b6:7f:31:
55:f6:67:29:61:64:ec:7b:6f:9e:07:44:50:e7:b8:
c7:e5:8f:5e:44:4a:cf:9e:ed:c5:57:c5:9f:92:37:
ec:25:78:b4:8c:d5:72:d0:a5:a4:ab:f7:f6:70:11:
3c:26:a4:76:e7:e9:d0:5d:67:e1:85:c3:5d:11:d8:
3c:5a:68:63:eb:d6:32:49:d8:10:2d:a8:90:45:4a:
08:dd:c4:a0:20:cd:b0:ff:21:90:4f:39:21:59:24:
d1:2f:30:a2:6e:11:27:d0:2b:39:55:4d:ec:29:b9:
9d:d6:86:b8:f1:fa:21:f2:b2:f1:24:4a:fb:a9:9f:
ec:e8:6a:65:7b:d1:4c:bc:80:df:95:9e:99:36:bc:
b5:02:c8:5f:ac:d7:2a:e8:ab:e7:e1:7f:83:f3:86:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:83:3E:8F:2F:4A:33:96:C0:39:FC:60:91:E8:92:8A:5F:02:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/121457A2E74911EEB2355A58775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.168.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d5:f9:fe:01:4c:a8:84:0c:b3:4b:15:94:b6:62:f6:74:0b:
16:af:d2:c6:1e:1a:3e:a4:d4:fb:2a:53:97:7f:32:13:7a:cf:
b4:fc:50:7c:67:fc:bd:9e:d4:26:65:7d:3e:5b:bf:0d:24:28:
2d:88:c0:d5:5a:f1:00:0b:5e:ac:f6:e9:23:66:52:3c:06:ad:
87:a0:89:24:7e:d1:75:f6:fa:8b:24:33:e6:ba:24:4e:f1:93:
fb:40:89:41:4e:96:f4:f8:7d:d2:27:aa:68:a3:47:b6:52:c8:
ff:02:97:18:64:c4:ee:23:52:96:54:4b:99:42:80:3e:75:4d:
30:ac:fe:52:e3:de:05:a9:24:21:fe:ce:07:95:89:a0:f2:74:
80:3f:f5:59:48:26:d4:27:ab:1d:52:a3:af:15:bd:bd:59:49:
fc:29:2a:ce:69:2c:55:1c:b8:5b:4a:29:d9:ef:46:be:34:93:
43:e5:49:4d:f8:e7:96:cc:36:e5:ea:60:4f:b7:45:d4:13:fc:
b6:64:80:c3:bd:ff:37:0f:2a:e6:c8:16:07:34:41:5a:3a:1d:
50:66:82:9e:b2:fe:40:96:c7:e4:1e:1c:f8:9b:63:a0:38:a9:
9e:9b:33:05:89:dc:e0:b7:f8:cf:42:86:69:b8:a2:7c:ad:d1:
5f:c8:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org