Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18F51CF4E74F11EE89F90E87775412E6.roa
File: 18F51CF4E74F11EE89F90E87775412E6.roa (raw, json)
Hash identifier: LAtOajT+t6UEwEHlf+7JJDhZv0V3wJjBMaXAgOtgne0=
Subject key identifier: DE:21:B4:A7:FD:59:92:3B:FE:8B:5B:43:3C:8E:31:69:CC:D3:43:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A45D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18F51CF4E74F11EE89F90E87775412E6.roa
Signing time: Thu 21 Mar 2024 06:49:00 +0000
ROA not before: Thu 21 Mar 2024 06:48:57 +0000
ROA not after: Tue 23 Apr 2024 06:48:57 +0000
asID: 44559
IP address blocks: 154.220.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42077 (0xa45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:48:57 2024 GMT
Not After : Apr 23 06:48:57 2024 GMT
Subject: CN=65fbd85c-93a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:6e:2b:a8:d5:94:28:57:37:ce:b4:1e:09:
38:8f:bc:77:f8:25:16:3f:7d:f4:37:5b:3e:4f:25:
a2:ca:1f:09:a9:12:67:8d:6c:41:b6:7f:2a:9f:43:
5d:ce:50:f9:b2:48:34:91:6f:6c:09:4d:d3:71:2e:
8f:7f:fa:c0:89:98:aa:69:14:4b:c4:39:c3:a0:45:
86:0b:2f:65:b9:46:5d:61:79:65:04:43:74:61:6a:
ae:0e:9b:96:48:1f:87:1d:d5:8e:f5:33:59:23:ca:
ee:28:de:ef:d2:3f:03:66:35:3e:4e:4d:bf:0d:13:
53:33:ec:bf:d7:19:b1:10:25:48:b4:f0:10:5e:8e:
ab:d8:f9:18:6c:f5:6a:f7:cb:f7:59:b2:fc:38:5c:
60:3c:16:ea:a7:aa:a7:ee:ba:ea:61:93:f2:a4:08:
cd:83:be:68:99:0f:4f:e1:a9:d1:f0:46:15:55:52:
12:a4:e3:10:48:96:d9:40:38:ec:74:d1:3e:56:27:
9c:4e:d9:12:22:19:14:10:ad:bd:03:a3:79:4a:49:
9d:00:65:fb:5d:c5:fa:01:7e:15:fa:ab:7e:b2:54:
76:96:69:27:80:00:54:46:59:9e:04:4f:09:a5:1b:
1c:c9:56:45:76:37:05:2b:6e:d1:d4:42:9b:3b:97:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:21:B4:A7:FD:59:92:3B:FE:8B:5B:43:3C:8E:31:69:CC:D3:43:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18F51CF4E74F11EE89F90E87775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4c:01:e2:da:63:f4:dd:57:f0:9e:70:ca:d5:90:6d:00:b5:
54:12:e8:b4:4c:aa:fa:88:7f:85:a6:51:9a:a9:55:14:d1:61:
85:c5:9c:ff:70:a4:78:ca:c9:83:c1:8a:be:ae:85:8a:15:d2:
82:5e:d2:9c:73:2e:44:b3:5b:ae:09:9f:22:52:15:c9:a0:52:
99:8d:fd:12:3c:cf:5c:ff:e2:b2:60:eb:14:f9:0f:4f:d4:0d:
f7:24:cf:9b:ae:a7:f9:0d:ae:81:c9:f7:03:a3:83:80:87:be:
a9:52:3d:8e:61:a7:7e:94:ac:d3:b1:b8:63:30:e5:34:3f:4d:
8a:07:c4:fb:01:9a:95:ea:37:24:23:30:15:78:0e:53:d0:32:
bf:b7:b6:c7:19:db:15:3d:e9:09:3b:a1:70:bc:4c:0c:96:85:
0b:5b:0f:fa:1a:b5:64:f3:7e:c2:cb:e5:d5:f4:96:ea:c0:7a:
20:1a:8b:c3:a5:c3:13:83:8b:6f:4e:7b:f7:d5:79:b4:18:17:
e9:60:7c:ab:a9:c3:ec:8e:46:26:88:86:9b:fc:3a:df:ce:4b:
91:6a:f4:2f:15:0e:fa:63:53:d8:f3:d4:b1:92:07:02:51:da:
d1:a9:ad:6e:fa:17:04:c3:cf:89:4d:42:1f:7d:39:63:0f:af:
71:9b:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org