Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C52D6CADF6D11EE9FD5B84C775412E6.roa
File: 4C52D6CADF6D11EE9FD5B84C775412E6.roa (raw, json)
Hash identifier: ymYRG9ca1Jql9gZ/Aok8q+RacBy42FLlCPs0Ddd5p4A=
Subject key identifier: 29:65:A8:C2:CF:4C:3C:D1:10:71:A6:41:C9:C0:66:CA:AD:66:48:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A060
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C52D6CADF6D11EE9FD5B84C775412E6.roa
Signing time: Mon 11 Mar 2024 06:05:02 +0000
ROA not before: Mon 11 Mar 2024 06:04:59 +0000
ROA not after: Sat 19 Oct 2024 06:04:59 +0000
asID: 135423
IP address blocks: 154.205.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41056 (0xa060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 11 06:04:59 2024 GMT
Not After : Oct 19 06:04:59 2024 GMT
Subject: CN=65ee9f0e-af43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:8e:8d:6e:98:72:05:12:6e:84:4b:71:f6:
31:f2:aa:19:9f:98:6c:39:82:55:91:5f:04:cd:ee:
64:e9:5c:3c:49:10:83:61:7d:a4:77:59:92:c7:93:
1d:14:92:5f:34:b4:f6:b1:d6:7f:64:6f:f0:d4:26:
3d:50:5e:f1:03:cb:13:ec:b4:50:35:d6:66:2e:af:
c9:9f:76:19:2b:4c:06:8a:dd:c7:32:d3:3a:e9:72:
2e:a4:ea:ed:d0:a8:dd:0f:2d:bc:2a:0b:17:54:78:
fa:69:e5:8c:b1:f2:f4:ff:c8:e9:76:f4:e2:1f:e8:
88:a2:c0:14:40:49:7a:a0:4e:58:5b:1a:b6:52:9b:
17:29:28:c4:34:c5:d1:ae:d5:a4:15:44:0f:1b:68:
3a:e5:53:26:11:26:77:a2:fb:32:23:b9:c7:81:0c:
1d:47:91:51:e8:20:71:4e:d2:40:2f:20:64:1c:a0:
dc:af:06:f4:ef:a0:b5:8d:5a:78:88:20:69:86:81:
b0:86:b6:0c:ae:ab:d4:e3:44:2e:5c:b5:43:17:e0:
a5:b1:14:8d:c8:bd:eb:3a:d6:2f:15:27:eb:18:23:
3e:37:6b:55:97:1e:5d:3b:98:18:54:0c:a4:b5:84:
83:16:d5:e9:94:76:22:ce:53:5a:88:3f:cc:00:67:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:65:A8:C2:CF:4C:3C:D1:10:71:A6:41:C9:C0:66:CA:AD:66:48:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C52D6CADF6D11EE9FD5B84C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4e:10:a4:71:f6:b2:67:96:d5:0c:f0:f9:aa:01:86:84:8d:
50:6a:8d:70:95:0b:54:fd:ce:71:e6:9c:41:a9:59:cf:71:59:
0e:12:9b:3f:8d:f4:30:ba:5b:03:c0:d3:15:ff:7d:0f:f0:66:
cc:a9:ab:6f:1e:c7:8c:68:50:8f:6e:19:f0:9d:15:22:9a:50:
e3:a2:e8:eb:be:99:22:bf:27:65:fb:17:3d:32:12:ae:4a:e4:
bf:08:d6:89:60:db:5a:50:b7:fd:c3:46:2b:e1:88:a7:db:bd:
90:90:16:b8:f2:19:b1:b8:ce:e3:20:5f:68:9a:06:06:2a:06:
67:8c:a7:a2:53:93:96:2e:23:3a:3f:7b:4b:dc:ca:82:83:11:
ff:3b:b4:1f:b7:02:bc:fb:a5:d2:91:e9:4b:9b:ae:f1:86:97:
d9:0d:52:79:91:b0:ac:e0:ba:cf:d8:55:1b:18:25:2f:d1:b0:
8d:3c:27:a8:8a:b2:5e:bf:a4:d9:de:64:a1:f7:f5:4e:75:ca:
92:89:f1:86:d6:3e:68:3a:dc:fc:a0:ff:be:86:37:4f:83:2d:
c3:0e:d9:05:bc:c0:3c:a0:90:6d:53:32:d2:5b:d7:a4:b2:1a:
3e:5d:39:d2:6e:81:d1:eb:fc:4c:bc:31:30:a5:c0:cf:30:e5:
60:35:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org