Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B571CEE75311EEAB26A9A6775412E6.roa
File: 20B571CEE75311EEAB26A9A6775412E6.roa (raw, json)
Hash identifier: ogBwDZHkjl7ct+Qcss8Em7f6L4jrgiLd6cQWQGdY4xQ=
Subject key identifier: 0A:61:6E:50:42:6F:9A:3A:55:38:52:19:4B:7C:A1:2B:55:DA:4D:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A485
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B571CEE75311EEAB26A9A6775412E6.roa
Signing time: Thu 21 Mar 2024 07:17:51 +0000
ROA not before: Thu 21 Mar 2024 07:17:48 +0000
ROA not after: Tue 23 Apr 2024 07:17:48 +0000
asID: 44559
IP address blocks: 154.218.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42117 (0xa485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:17:48 2024 GMT
Not After : Apr 23 07:17:48 2024 GMT
Subject: CN=65fbdf1f-5354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:3c:75:78:4b:4c:2c:c4:27:e9:7a:0b:90:
7b:6b:55:45:59:cc:26:4d:06:c3:fa:51:52:99:2f:
49:2b:63:9f:55:c9:ed:34:00:e8:cf:94:6e:35:e3:
48:18:d1:39:0e:c8:70:39:b5:99:ad:22:1c:35:65:
f9:93:4e:86:9e:ee:79:e7:7f:d1:f8:e8:5c:9d:20:
3b:21:46:e9:e5:98:52:68:0d:79:59:16:1a:3b:9d:
7c:9a:fb:39:7a:24:57:ab:ef:b5:c7:7f:47:2c:b6:
14:f8:3c:18:67:9e:3a:1d:59:14:6f:20:22:5b:03:
e6:8d:45:1d:4f:38:dd:b9:83:31:99:70:9c:64:c4:
0f:ac:56:98:bc:a7:d8:ec:2d:58:ad:d7:6f:95:18:
2f:8a:8c:6c:a3:a5:14:cd:6e:94:55:68:6b:c1:f4:
ee:29:91:e2:97:c6:28:bf:ac:8c:a1:c8:6c:92:d6:
19:68:94:d6:88:d0:7d:9c:ae:6d:48:69:79:64:14:
14:a8:50:d2:99:53:8e:19:e8:1a:94:e8:29:c2:28:
1f:24:2f:30:f6:04:f0:af:dc:a0:44:b1:ab:cf:5b:
d9:ac:5c:8b:90:cf:d1:8b:f3:b6:de:ac:ee:63:88:
a9:1d:6e:ce:b2:f0:92:4b:8d:61:88:1c:93:ef:41:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:6E:50:42:6F:9A:3A:55:38:52:19:4B:7C:A1:2B:55:DA:4D:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B571CEE75311EEAB26A9A6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.54.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e4:0f:f2:45:e1:e9:eb:5d:9d:ed:dc:bc:ed:92:5a:f9:da:
43:de:c3:39:b8:46:27:14:59:d4:c0:7c:41:51:2b:5d:62:25:
dd:83:33:17:d7:06:0a:f8:e5:3f:7a:ed:a1:8d:7b:27:7d:e8:
55:0a:75:e1:1c:67:55:5a:ea:4e:86:72:bf:1c:18:8f:a8:05:
99:44:18:ca:17:1b:47:a0:b4:35:09:91:5a:c7:23:e0:e9:aa:
d1:85:04:dc:1d:82:38:53:66:55:7e:77:5a:f0:e9:32:e9:e6:
1f:b7:7f:60:8c:9c:66:10:a9:3b:31:c4:f8:3f:17:72:40:47:
06:f5:41:07:50:7b:13:fb:2a:30:1d:5c:dc:54:05:a5:32:cd:
b2:b1:16:cf:07:bd:50:fa:84:b7:1b:01:e9:8a:2c:fb:79:4a:
c1:34:6d:5d:54:2b:e6:63:90:c1:9e:29:2b:03:47:90:56:18:
06:8a:61:e5:a8:dc:08:ed:75:38:f7:ef:f2:8c:2d:1a:68:06:
7f:a5:44:19:60:4b:ed:41:87:00:9a:61:f1:40:79:4a:58:2b:
31:d2:49:d0:35:c8:e5:2b:60:fc:59:ec:b3:68:9a:50:b0:ef:
dc:5e:6d:b1:7a:c9:41:a9:9e:51:62:09:05:55:a2:98:23:37:
f7:30:91:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:14 2024 by rpki-client on console-fra.rpki-client.org