Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FBF62B8E78111EE96F6BA8F775412E6.roa
File: 3FBF62B8E78111EE96F6BA8F775412E6.roa (raw, json)
Hash identifier: Gk2DdW5wwVayrRkXR964ZOIOrpRHIV+0xKDPr+SDzfc=
Subject key identifier: D9:A3:7E:F0:79:94:D9:41:B8:A4:A8:AE:18:4F:80:B4:10:C6:78:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A573
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FBF62B8E78111EE96F6BA8F775412E6.roa
Signing time: Thu 21 Mar 2024 12:48:00 +0000
ROA not before: Thu 21 Mar 2024 12:47:57 +0000
ROA not after: Tue 23 Apr 2024 12:47:57 +0000
asID: 44559
IP address blocks: 154.210.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42355 (0xa573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:47:57 2024 GMT
Not After : Apr 23 12:47:57 2024 GMT
Subject: CN=65fc2c80-0c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:ad:d1:11:1a:fb:c9:0e:c5:fa:fd:03:48:
2d:82:31:91:ac:84:20:bf:87:34:81:9a:e7:c2:15:
21:84:11:a0:85:fb:61:52:b8:d9:9f:39:c6:25:45:
89:18:02:a2:89:5a:04:a8:e8:6c:de:96:c2:e8:69:
96:31:5a:0e:40:78:ce:c0:94:65:66:83:df:46:b5:
a3:c3:8c:f9:a6:87:2c:80:9a:a5:fe:f6:62:e2:08:
47:9d:cd:b6:4e:8b:82:83:f1:7f:d7:69:34:a0:51:
d7:f9:d7:ea:4f:13:bf:89:7a:0e:ff:20:11:c4:e2:
9e:d6:ef:a3:89:f4:3c:81:6f:2d:f3:67:51:df:c2:
78:6a:0b:f6:50:a9:16:dc:21:af:1a:48:ec:ce:21:
33:8b:b3:0a:30:28:46:bf:1f:de:95:14:e7:f3:c7:
87:ec:53:41:4e:fa:19:9c:77:2b:55:0c:48:2e:55:
7b:6c:4c:e1:31:27:ad:22:99:f5:40:dd:5d:ef:c0:
c1:6c:18:42:ca:af:55:1b:4b:c3:34:44:56:f0:39:
e9:7d:3d:9b:98:12:99:78:bd:8a:d9:b2:44:b0:75:
fe:80:e6:30:6b:1e:12:1a:04:16:1c:ed:f1:30:cd:
30:24:e1:a6:21:15:65:23:ca:d4:48:cf:74:8d:a6:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:7E:F0:79:94:D9:41:B8:A4:A8:AE:18:4F:80:B4:10:C6:78:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FBF62B8E78111EE96F6BA8F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.99.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d4:d8:e6:87:23:78:9c:df:59:ed:34:70:0a:8c:a0:eb:99:
e5:00:c8:c5:48:1a:b9:85:39:30:46:3e:45:16:c2:23:1c:ea:
28:f1:c3:4b:06:38:5c:99:24:56:2a:65:98:8a:3d:aa:fb:d0:
a5:db:be:da:a7:d7:01:fe:4b:d9:b5:5d:8f:32:68:47:d1:f6:
39:fb:18:78:f8:fe:54:2e:56:41:d8:ad:13:78:98:fb:27:bb:
9a:1a:44:66:8c:47:2f:e2:60:bb:62:80:47:cf:67:d3:9f:5a:
b1:54:9d:37:56:08:95:c2:ee:b5:ec:01:83:fe:be:f1:94:58:
57:2b:15:57:54:5b:b6:3c:37:70:2d:9e:82:d5:71:ef:cd:3d:
79:cc:2a:70:e9:b8:c9:41:96:19:64:6b:eb:97:0d:04:37:84:
4e:ed:8a:fb:65:fe:d1:80:84:f0:a1:78:8a:41:a6:7a:a3:68:
99:71:75:00:2f:e6:94:cc:6b:03:7d:f1:c6:9e:28:32:cc:03:
c7:29:0e:2f:c8:56:db:c6:b7:76:1e:48:f2:f5:e1:36:98:42:
fc:09:7f:31:9b:bf:5b:af:2d:0e:0a:27:6f:f6:40:cf:10:0b:
d4:68:12:3a:c4:07:76:c7:5a:9e:c5:57:0c:e2:68:43:bf:f0:
4e:f1:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:16 2024 by rpki-client on console-fra.rpki-client.org