Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16CA301AE76611EE91FDF2B9775412E6.roa
File: 16CA301AE76611EE91FDF2B9775412E6.roa (raw, json)
Hash identifier: 0y2r+t20n+/Ng51RE3L8wQ7/0mPPhiz6fKVFg/ljh7k=
Subject key identifier: 11:38:92:86:2B:7D:C0:40:C4:85:C2:D1:A9:46:F6:B7:09:E3:6B:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A515
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16CA301AE76611EE91FDF2B9775412E6.roa
Signing time: Thu 21 Mar 2024 09:33:35 +0000
ROA not before: Thu 21 Mar 2024 09:33:32 +0000
ROA not after: Tue 23 Apr 2024 09:33:32 +0000
asID: 44559
IP address blocks: 154.208.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42261 (0xa515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:33:32 2024 GMT
Not After : Apr 23 09:33:32 2024 GMT
Subject: CN=65fbfeef-1743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:38:09:17:c3:82:20:fb:dd:cb:26:b1:4f:
93:8c:41:65:f3:0a:31:1f:0a:ef:58:bc:96:05:ee:
79:c8:f6:51:2e:f9:1c:da:48:78:1f:02:20:e5:10:
f2:1b:42:6d:cf:fe:5a:5c:c5:5b:fd:6c:d3:69:29:
91:86:62:9f:df:e7:21:75:45:6a:6c:d7:51:3e:f7:
5d:f4:0e:85:0a:9f:1d:2a:e9:1a:ce:8f:c9:78:9c:
ca:3a:ad:1f:fc:26:ef:94:a0:a8:04:ed:34:33:ab:
e2:6a:54:a9:cd:f5:a1:96:3d:6a:89:4d:92:d9:c9:
94:af:10:31:25:d8:f7:e7:fe:e1:c7:5f:e3:34:90:
31:ba:27:9b:89:ff:e2:a7:f8:fd:04:8e:98:c0:27:
1c:8d:75:b7:f2:b4:e5:f0:03:38:ed:85:7a:ff:f6:
05:d6:e7:4c:82:0a:98:36:44:e1:a9:32:40:ef:b6:
e6:e0:c0:d1:e5:e4:90:f8:a3:c1:65:d1:7b:e3:e6:
89:7f:9e:f6:8c:3d:c7:8e:67:79:ce:b0:1b:61:1f:
d9:50:c4:3a:0b:3c:80:87:95:7a:2f:44:b9:19:41:
29:a8:d0:59:bc:39:da:ff:fb:ee:eb:67:c1:59:19:
70:cc:e5:42:44:13:28:1f:3f:b1:86:ae:f2:cf:d2:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:92:86:2B:7D:C0:40:C4:85:C2:D1:A9:46:F6:B7:09:E3:6B:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16CA301AE76611EE91FDF2B9775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e4:42:ed:d7:f6:fb:e0:ab:90:f1:9a:d1:8a:f7:52:4e:88:
78:2a:13:d7:5b:68:9d:0b:70:0f:57:7b:15:c4:06:79:73:66:
8c:4d:3c:f8:f5:83:1a:8f:15:7a:03:6b:16:6f:d5:56:67:03:
d5:0a:bb:ce:35:7e:c8:df:8f:4b:05:d3:72:49:36:26:76:26:
45:17:51:94:a4:0a:0f:b1:d3:39:c8:eb:30:d5:2e:9b:13:cf:
df:78:4d:a5:09:3c:a3:fc:3c:f6:3d:7b:1d:56:59:21:78:f0:
68:2d:c0:a5:34:c0:74:b1:f6:4c:ea:41:5a:48:07:f1:15:69:
9d:c0:b3:de:eb:e0:a0:b1:9c:2f:36:99:0c:85:7d:ba:b7:02:
02:33:74:b9:91:21:d6:e8:d8:80:81:58:3b:d9:42:56:93:30:
c1:24:c9:4c:80:fc:de:0a:e5:c1:df:31:74:26:a7:7f:21:ce:
1d:a1:96:bf:dc:37:74:52:32:a8:7d:bd:a6:f1:6c:62:80:80:
f9:d6:95:5c:9c:9c:8f:5f:a9:48:12:01:48:89:b4:78:99:09:
31:c4:63:42:af:3f:fc:78:fc:7b:d5:0b:dc:39:03:92:67:3d:
4b:18:d1:fe:b6:db:76:60:03:c3:4f:d7:ba:5f:aa:34:10:d2:
d5:35:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org