Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44EAB9D4E73D11EE8263A57A775412E6.roa
File: 44EAB9D4E73D11EE8263A57A775412E6.roa (raw, json)
Hash identifier: 4gY7OtbXhWpztu93Es963ZvMqPgvQsRLShm04bNLurY=
Subject key identifier: 5D:F1:BB:EF:EA:A1:5E:8E:13:E1:5C:0B:60:4E:BD:50:38:E0:1A:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44EAB9D4E73D11EE8263A57A775412E6.roa
Signing time: Thu 21 Mar 2024 04:41:23 +0000
ROA not before: Thu 21 Mar 2024 04:41:19 +0000
ROA not after: Tue 23 Apr 2024 04:41:19 +0000
asID: 44559
IP address blocks: 154.221.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41904 (0xa3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:41:19 2024 GMT
Not After : Apr 23 04:41:19 2024 GMT
Subject: CN=65fbba73-109d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:28:00:30:a6:bf:66:c3:ba:ba:3c:b5:4a:
5a:e6:1f:fa:e5:1a:c8:f0:e0:2f:60:c0:4f:9c:7b:
d3:4d:07:b3:2d:e6:46:76:9f:8b:1a:46:6d:8c:73:
96:5c:70:01:f3:7b:f1:2a:78:d1:23:56:c3:2c:7c:
01:62:51:3e:5f:de:c5:1f:3d:ee:4e:19:5a:38:d1:
2d:ef:f8:1f:a8:aa:19:8d:d2:81:01:a0:fc:4d:74:
7f:0a:e9:b8:75:ca:b3:b6:3d:98:8a:55:41:6e:c6:
0e:1c:f7:60:44:fd:4d:d9:ac:4b:95:63:a0:d9:10:
1a:48:5d:31:f0:07:41:2d:19:a2:bd:b5:b8:fe:1b:
e0:eb:4f:5c:8d:a3:8f:eb:65:67:07:9c:56:c3:f0:
72:b9:9f:74:40:f9:30:69:7e:3f:2c:e3:5f:40:57:
1f:5d:d3:87:c6:34:76:fe:2d:33:14:0a:e8:19:22:
87:94:9d:88:0e:85:d5:f7:f7:3a:c9:63:2b:e0:c0:
e7:7b:7a:c5:48:d5:13:7e:b4:9f:5a:e2:cf:86:59:
be:9c:e2:d8:0a:5f:e0:13:4d:d0:ee:2a:68:cb:15:
81:9a:5d:51:48:31:69:55:59:5b:8f:d8:f1:20:d4:
ac:42:59:d2:30:a3:ba:07:4d:04:d3:9f:85:a9:7e:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F1:BB:EF:EA:A1:5E:8E:13:E1:5C:0B:60:4E:BD:50:38:E0:1A:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44EAB9D4E73D11EE8263A57A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.225.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:19:5a:cd:fe:34:2d:fb:45:ee:74:21:19:25:24:86:48:5b:
de:20:21:c2:db:41:2e:04:cc:ed:6f:d8:8e:a2:61:a5:dc:62:
91:b3:c2:55:29:0e:ec:78:a4:09:b7:4a:cd:31:4b:e0:a1:2f:
95:9b:aa:15:b7:6b:7c:14:c5:31:e0:c0:65:f4:7e:9a:2d:94:
00:13:64:07:9e:f7:78:c9:48:7c:c8:12:91:50:b8:7f:92:03:
2a:57:9b:4e:76:99:ad:fa:a6:b3:52:d9:09:39:64:f1:b0:be:
30:9f:82:40:c5:9e:a5:74:99:c8:cb:a4:9b:fd:52:3d:00:da:
39:ac:3a:cf:86:d5:cf:ff:2f:19:1c:93:1e:cb:79:5e:13:8f:
08:2c:8e:64:94:7e:6b:29:26:ef:38:42:ee:ed:77:3d:ad:a5:
48:ed:36:9b:6f:c7:06:f4:de:3c:6f:85:fc:99:65:2a:bd:b7:
8e:e4:43:4f:43:33:1d:c3:89:33:b7:16:5e:94:4b:73:60:7d:
d6:8d:d4:e0:9d:df:7f:19:98:a0:66:bd:a6:11:7e:43:84:82:
7a:55:77:6b:c4:11:0c:65:5e:35:e5:fe:ce:90:6d:c7:85:9b:
87:78:48:2a:48:69:9a:90:d7:17:13:2b:85:45:00:c4:0a:0e:
cc:2e:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:17 2024 by rpki-client on console-fra.rpki-client.org