Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3707A1BEE4F511EEA14248C2775412E6.roa
File: 3707A1BEE4F511EEA14248C2775412E6.roa (raw, json)
Hash identifier: ZO4VvaDl+Fj8Qw1kesRGXCP0L00w7eJ73YYxWv22/Jg=
Subject key identifier: 3F:59:80:1F:01:3E:13:8A:3D:C2:84:50:CF:53:C0:C9:B0:94:94:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A2AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3707A1BEE4F511EEA14248C2775412E6.roa
Signing time: Mon 18 Mar 2024 07:00:34 +0000
ROA not before: Mon 18 Mar 2024 07:00:30 +0000
ROA not after: Sat 20 Apr 2024 07:00:30 +0000
asID: 39600
IP address blocks: 154.205.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41647 (0xa2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 07:00:30 2024 GMT
Not After : Apr 20 07:00:30 2024 GMT
Subject: CN=65f7e692-f215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:51:36:c4:4a:9b:8b:c6:d1:95:83:22:2d:
22:f3:7a:cf:05:76:ab:55:11:98:38:f2:f6:80:64:
1c:98:19:f1:0d:7a:dc:e6:ec:d7:d3:ca:15:56:27:
91:be:87:0e:a3:a0:5e:c9:18:c4:44:55:65:ab:ef:
e7:bf:fe:a7:52:fa:8e:d6:d2:0e:47:96:db:9c:ee:
e2:2d:e8:e9:a6:99:e3:94:6b:cb:05:c3:05:a6:a7:
32:12:f7:45:1b:6b:68:e2:d6:8b:f2:31:f0:e0:c9:
c6:28:29:b5:8c:b0:30:a6:5e:d6:c0:ae:b7:a4:bd:
67:e5:a4:7b:05:06:d7:9e:09:f7:ae:07:78:94:73:
74:c2:25:24:89:94:b4:51:ce:f6:d2:27:23:83:52:
5f:6d:15:f3:7f:e0:e1:ae:7e:6c:5c:ec:61:16:7e:
59:fb:dc:cf:1f:94:ef:36:27:8f:6d:5d:de:cc:aa:
26:07:6b:35:f0:94:cf:c3:b6:5e:96:34:2c:68:2b:
47:b2:de:c0:c0:d3:86:b5:38:f6:6a:24:f9:78:aa:
d3:e6:e4:c5:59:91:0b:7c:b8:61:20:d0:52:e6:d7:
e2:ee:68:1b:68:56:a4:76:47:9a:31:ca:83:8b:d3:
fb:65:9c:6c:f1:70:74:66:b7:28:37:45:35:4d:6c:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:80:1F:01:3E:13:8A:3D:C2:84:50:CF:53:C0:C9:B0:94:94:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3707A1BEE4F511EEA14248C2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.160.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:6f:e5:0d:cc:0f:1c:c5:9f:01:60:14:bd:9d:01:84:08:ca:
46:36:58:66:6d:4d:57:15:8e:30:d6:ce:ec:0c:d9:11:86:a4:
bf:ea:fb:ec:c8:26:ac:db:b3:3a:a8:9e:e4:f4:2a:c7:80:2a:
cd:3c:34:5b:4f:35:61:5f:ec:94:78:8d:7b:c0:48:ce:5e:a9:
2f:f0:a7:98:42:85:2b:27:3d:07:ad:19:46:5f:e7:82:7d:ae:
e4:f6:df:9e:76:69:58:b1:aa:4e:b6:1d:e6:bb:f5:3d:42:b8:
bc:1a:48:04:5f:51:99:e5:8b:0a:ad:23:1e:95:43:a2:cf:e2:
79:88:0b:bc:6b:df:b8:b6:fe:5d:3d:72:ca:ce:d0:60:87:ae:
72:e1:83:0f:6d:d6:24:cb:02:32:d4:3e:25:84:a7:4f:73:63:
f2:b0:43:e5:de:73:12:70:6b:8c:0a:2c:b7:77:43:ae:39:9c:
bd:a9:30:eb:2e:69:d7:b4:7b:1b:48:b6:52:6e:5f:f2:ac:6b:
b8:95:1a:8f:b0:ce:c8:52:fa:19:ad:7b:6b:7f:d8:79:f5:7e:
51:6e:bd:55:5d:8b:a2:fd:59:73:17:42:37:18:d0:c1:1c:91:
00:3e:d7:48:41:c8:bb:76:9e:fa:db:96:67:69:c2:f7:7b:93:
65:62:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:19 2024 by rpki-client on console-fra.rpki-client.org