Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1778287AE75011EE84B3F28E775412E6.roa
File: 1778287AE75011EE84B3F28E775412E6.roa (raw, json)
Hash identifier: qDkFo8qkSC86PbZ5zJeW+B7K1kWPnen+6xxln7jGRi0=
Subject key identifier: 06:6E:E9:56:24:AA:AA:8D:6A:D8:72:CC:CE:14:49:A6:60:CF:FE:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A467
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1778287AE75011EE84B3F28E775412E6.roa
Signing time: Thu 21 Mar 2024 06:56:07 +0000
ROA not before: Thu 21 Mar 2024 06:56:04 +0000
ROA not after: Tue 23 Apr 2024 06:56:04 +0000
asID: 44559
IP address blocks: 154.220.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42087 (0xa467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:56:04 2024 GMT
Not After : Apr 23 06:56:04 2024 GMT
Subject: CN=65fbda07-f77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:67:56:d7:4f:8e:7b:50:79:05:57:64:13:
6f:2f:fb:c3:16:73:29:b5:da:58:30:6f:5f:25:54:
0c:bd:1a:66:e0:2c:72:ac:44:03:c7:20:d4:ab:fa:
9a:e0:b1:39:06:40:51:35:ec:97:1c:4c:35:85:fe:
22:cf:9d:ce:85:cc:d9:c9:f9:fe:a2:13:cf:90:82:
54:2c:ad:ce:47:9d:2f:8f:a2:b7:48:30:19:00:5d:
63:c3:4f:c6:f7:a8:f6:70:df:70:2a:0a:53:4c:34:
f7:78:bd:e8:ca:be:22:46:c5:6c:f7:16:a5:40:fb:
e3:d6:fc:41:3e:c3:d2:76:35:b6:1c:ea:11:df:94:
84:ac:3a:3c:ce:68:44:a8:fb:cb:a5:7e:3c:ec:e0:
37:98:77:1a:e2:48:37:bd:12:09:0c:8d:c5:1a:a8:
32:ef:d1:ec:e4:7e:06:c9:03:66:93:fa:f4:d0:16:
1f:0f:39:5d:10:94:5c:18:96:7c:77:58:d5:c8:7a:
36:52:85:47:01:6d:34:79:7d:6f:99:2d:e5:35:47:
4e:27:a3:ce:71:61:6e:22:79:5d:25:f8:ff:ea:3f:
ab:68:2d:89:0d:58:7c:7c:e7:8e:e8:0d:2d:62:69:
cd:98:9c:fa:31:8f:1e:2e:52:8f:8c:7e:fc:19:d7:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:E9:56:24:AA:AA:8D:6A:D8:72:CC:CE:14:49:A6:60:CF:FE:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1778287AE75011EE84B3F28E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:87:e7:e8:ec:ec:8f:a8:60:c7:ad:63:23:5c:f7:21:93:b9:
66:30:cc:90:6a:27:04:28:f4:91:db:fd:cb:e0:8e:aa:aa:e1:
91:b8:9a:8e:07:7f:6b:0a:ef:3d:1d:72:5f:fd:71:52:49:a6:
3f:0d:2a:33:f7:17:b7:ea:48:ee:d8:9e:1a:a9:d9:ce:d3:3c:
1b:2d:17:10:11:27:71:57:76:36:89:ca:da:12:02:d5:9f:79:
55:0b:35:03:19:43:12:85:33:ff:26:be:96:9a:65:43:12:e9:
53:d5:1b:49:49:6e:2f:5b:0b:78:5d:8f:8c:d4:f6:0e:b6:9c:
bd:64:e6:b7:a5:e6:70:bb:84:82:56:11:42:07:f6:f8:e5:ef:
4b:00:6c:ee:ed:76:e1:85:71:d8:66:8f:f1:e4:d2:86:89:43:
58:eb:08:0b:be:a6:be:15:6c:c9:5a:01:e0:43:7e:e9:35:ee:
33:98:9c:10:2f:71:78:0a:52:b5:1c:54:35:06:ec:bb:f8:08:
89:af:67:9d:ed:9f:e1:1e:15:50:af:14:13:d1:af:5a:04:fc:
23:50:82:58:7f:4d:cc:8f:9f:2a:f3:e3:ce:3c:97:9e:13:7f:
71:e6:03:22:c1:e4:cd:f5:a4:4a:de:93:37:31:2f:34:3c:31:
d4:10:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:14 2024 by rpki-client on console-ams.rpki-client.org