Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C52A356E78511EE85D627AC775412E6.roa
File: 4C52A356E78511EE85D627AC775412E6.roa (raw, json)
Hash identifier: Z5nEvJfBqHo/FThNKg1fL0+t52af+v7nrEPp/vATfIM=
Subject key identifier: AD:C9:01:EB:C5:08:33:F8:02:EF:8D:1A:9E:40:BA:DD:36:AE:F3:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A59D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C52A356E78511EE85D627AC775412E6.roa
Signing time: Thu 21 Mar 2024 13:16:59 +0000
ROA not before: Thu 21 Mar 2024 13:16:56 +0000
ROA not after: Tue 23 Apr 2024 13:16:56 +0000
asID: 44559
IP address blocks: 154.210.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42397 (0xa59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 13:16:56 2024 GMT
Not After : Apr 23 13:16:56 2024 GMT
Subject: CN=65fc334b-2890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:6a:e0:91:5a:4d:9a:1a:7a:4c:58:aa:a8:
14:de:5d:47:83:46:49:e1:05:86:8a:14:aa:42:e7:
74:bf:19:f3:aa:a4:9d:e6:79:bf:05:f3:29:73:63:
aa:82:86:f5:ac:1c:4e:3b:9d:a7:5d:7e:ed:c8:84:
6c:bf:49:03:07:42:b8:ba:fa:52:0b:8e:00:89:cb:
21:18:e7:2a:10:65:c6:a1:0e:c8:7e:b8:30:55:72:
2d:43:98:30:42:97:35:7b:5e:10:fe:a0:57:81:df:
51:4a:ef:9d:1e:9f:4b:6d:b5:b9:4f:26:a3:28:70:
d7:4d:b9:50:c7:2c:ae:9c:37:ab:bf:1c:80:24:28:
93:f2:9b:72:ed:6a:83:61:bd:c9:e7:87:20:54:d6:
e7:fa:28:4e:25:b3:79:41:6a:b1:e3:a3:7a:73:27:
a0:6e:24:54:6e:f3:36:c9:56:ad:08:d0:c3:2a:a8:
db:43:cf:96:b7:13:b3:0b:05:08:f5:48:48:1f:9e:
36:c1:b9:dc:67:5a:c4:9b:9b:80:fa:fe:e3:06:21:
6a:09:2b:c3:78:3c:15:f5:f4:55:77:b4:8d:2e:1d:
c8:ed:de:86:1c:ee:28:03:07:1a:eb:ed:b8:86:f0:
f8:ec:0c:9c:e0:b5:66:22:9a:d0:a5:de:ac:ba:93:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C9:01:EB:C5:08:33:F8:02:EF:8D:1A:9E:40:BA:DD:36:AE:F3:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C52A356E78511EE85D627AC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e2:ef:5e:45:3b:4c:bc:50:80:ee:2d:58:8a:88:2a:c1:d6:
f7:50:00:64:84:4b:c5:6c:ff:22:ad:d1:9a:5b:84:48:c5:bb:
9f:b5:c5:d0:13:94:e3:25:fc:d1:2d:46:30:61:4b:65:20:17:
90:5a:17:03:75:3d:a2:b4:4a:c2:a1:71:62:aa:96:fb:12:35:
1a:cc:24:e2:c4:4d:88:61:77:58:b8:9a:d9:a4:1c:3f:15:b1:
e2:52:d0:f0:f9:68:65:9a:6c:cb:00:fa:54:44:7e:85:65:5e:
91:9c:f1:db:3b:43:8d:0e:80:be:73:f5:99:c0:74:a1:01:4a:
d2:cd:b3:8b:ab:85:1e:29:d3:ae:0b:d3:92:47:5a:48:45:cf:
6d:07:04:cd:bf:1a:15:a9:a8:1a:08:03:ec:43:c0:08:fc:13:
d7:b6:94:b4:40:8c:5b:92:88:f5:e8:3f:8d:7f:41:c5:ad:19:
9f:fc:22:c3:6d:fc:53:f7:d7:3b:a9:9b:d7:25:ef:0c:d5:7c:
2a:a2:84:e5:44:65:ba:27:33:56:28:0a:1c:7b:8c:b5:c6:9c:
b6:eb:ec:54:9f:15:29:2d:2b:06:b9:27:dd:f9:5f:2f:f6:b1:
e4:8e:34:55:c1:d8:27:8a:c1:ce:a4:bd:b0:de:eb:b1:fe:6f:
f9:ca:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:19 2024 by rpki-client on console-ams.rpki-client.org