Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A4C34CE73511EE8918D3BA775412E6.roa
File: 16A4C34CE73511EE8918D3BA775412E6.roa (raw, json)
Hash identifier: KWXy/QuofK2VF1HEAUI7toJ2sgRJas8cc7TRZChEyYM=
Subject key identifier: 10:44:BD:3F:FB:6A:23:DB:E1:C4:7E:85:7C:CB:C1:36:1F:E1:F3:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A35E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A4C34CE73511EE8918D3BA775412E6.roa
Signing time: Thu 21 Mar 2024 03:42:49 +0000
ROA not before: Thu 21 Mar 2024 03:42:46 +0000
ROA not after: Tue 23 Apr 2024 03:42:46 +0000
asID: 44559
IP address blocks: 154.207.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41822 (0xa35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:42:46 2024 GMT
Not After : Apr 23 03:42:46 2024 GMT
Subject: CN=65fbacb9-83f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:b7:41:52:aa:56:f3:32:b9:36:ab:11:dd:
66:ca:01:a5:85:ea:60:dd:b4:8d:87:cc:37:6f:0a:
77:6c:cd:7f:7a:50:2f:88:11:32:da:6e:f6:29:d6:
de:fc:fe:bb:ef:e1:d0:8d:da:1f:ff:a9:82:ea:e5:
69:c5:69:1a:d2:fe:40:49:e7:02:f8:2d:ce:57:93:
4b:8a:17:02:67:1e:16:25:5c:5f:f5:f7:38:0e:0a:
41:cf:4d:fd:85:d6:91:b9:ad:57:9d:27:b7:93:07:
34:53:6f:a3:09:cf:c7:74:ef:17:09:68:b0:5c:c6:
56:d7:e8:79:90:8e:d9:38:0b:64:2b:f0:ae:2e:ec:
a5:ab:4c:0c:13:0b:a2:98:60:bc:65:c3:01:ce:a0:
29:6d:05:37:50:33:36:4a:65:e4:78:71:fe:c7:65:
57:fd:10:ac:c4:5b:4f:ff:e4:cf:17:d5:c9:5b:46:
f7:c9:20:a8:3f:a6:8e:62:4b:25:9e:fc:f5:09:fe:
da:3c:5e:fe:72:45:89:dd:b8:e9:d4:e5:80:3c:4c:
3f:26:0f:9c:51:0f:bd:f2:08:a3:ab:f9:85:3a:55:
aa:13:e1:04:cc:1c:29:12:d9:7c:37:11:71:25:7d:
fc:24:ae:f8:65:95:7b:38:c8:70:5a:e2:cc:1f:b4:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:BD:3F:FB:6A:23:DB:E1:C4:7E:85:7C:CB:C1:36:1F:E1:F3:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A4C34CE73511EE8918D3BA775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bf:f9:07:db:70:3d:d4:51:e4:f3:6f:d1:84:49:cb:d7:09:
1c:fa:71:2a:2f:22:9d:d6:1d:f5:70:bb:a2:d1:b9:ed:16:c1:
9b:ed:c8:d4:d7:97:2c:88:25:43:3f:57:51:e2:f2:d0:2b:a8:
dc:94:49:45:50:03:6a:28:5e:8e:d3:84:bd:18:ed:c8:97:a0:
55:e5:86:36:4e:ba:b3:36:97:c3:8b:96:3e:65:f1:c8:78:81:
64:0f:35:50:0e:1e:78:0a:69:87:cb:b3:e2:0a:78:93:b9:e5:
11:08:fe:62:67:86:2c:47:60:a5:3d:18:3a:74:ce:84:57:fa:
ac:f1:d8:a7:92:0c:f9:3d:8f:54:32:1f:9b:89:d2:c7:13:f4:
da:66:ce:d7:f5:69:1b:d8:5c:4c:ee:9a:85:f8:ca:8e:23:02:
7e:b4:1b:81:c8:50:b4:07:68:9f:56:fb:dd:e4:7a:38:61:98:
c4:66:b7:0f:b0:cc:3a:1b:cf:df:da:5b:0b:f6:1e:3b:d0:88:
04:e3:7d:09:de:62:51:3e:33:5e:41:82:e6:e0:22:3d:6d:ca:
6a:9b:6d:73:3c:b2:49:66:0c:f2:99:cb:17:76:69:e7:1c:5b:
3b:75:dc:80:3d:3f:4a:86:3e:d4:5a:eb:10:9f:6b:56:72:f0:
42:df:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org