Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA5E48CE73611EE966D4FC3775412E6.roa
File: 4EA5E48CE73611EE966D4FC3775412E6.roa (raw, json)
Hash identifier: YB95lvwI1gcMK9nfBipOMxjnUqFr/ghU6VjbJyjKgaQ=
Subject key identifier: 16:F8:F6:45:E7:AA:B7:D6:C7:B8:92:02:97:DE:CD:5C:32:6F:C9:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A36A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA5E48CE73611EE966D4FC3775412E6.roa
Signing time: Thu 21 Mar 2024 03:51:33 +0000
ROA not before: Thu 21 Mar 2024 03:51:30 +0000
ROA not after: Tue 23 Apr 2024 03:51:30 +0000
asID: 44559
IP address blocks: 154.207.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41834 (0xa36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:51:30 2024 GMT
Not After : Apr 23 03:51:30 2024 GMT
Subject: CN=65fbaec5-3ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:25:97:98:13:95:a8:99:67:c1:bd:32:2e:
7d:a1:80:df:1d:00:8e:2c:50:92:80:ef:61:ca:7c:
eb:79:c0:58:bc:6e:1a:47:b1:52:ee:45:aa:e7:52:
c3:4f:c0:27:35:17:a1:47:5b:91:dd:05:3c:5f:bf:
c0:5a:0c:ea:95:2a:21:b0:cd:c4:3a:5f:77:c0:85:
d6:01:20:20:c6:97:ed:e5:91:c8:18:9a:92:63:6e:
b1:48:44:bf:8e:10:27:70:25:90:2c:f8:fe:c1:9b:
95:0c:37:f4:b8:f1:e1:6c:13:21:2e:ed:c2:3f:ea:
28:cd:26:42:5c:f3:8c:72:6d:b0:3d:55:e4:e6:82:
10:31:af:9a:90:82:ed:11:8c:ed:16:2e:79:4a:0f:
ae:d5:9a:fb:b5:c5:31:c9:8a:22:fe:80:68:e3:d3:
65:da:45:73:c5:84:24:3e:c6:39:62:c9:9c:df:39:
2f:3b:9d:9d:22:6f:1a:bd:1a:fe:51:fd:f4:25:e0:
96:ae:b0:7b:f4:f2:d9:b5:a8:73:81:1f:3d:97:a0:
24:a4:7b:b2:23:29:32:4b:19:3c:a0:59:f9:88:6e:
7b:c4:1e:70:99:1e:10:5a:ae:d6:d8:67:53:20:00:
55:22:bf:e7:05:2c:6f:89:f0:3a:6f:6a:62:88:3b:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:F6:45:E7:AA:B7:D6:C7:B8:92:02:97:DE:CD:5C:32:6F:C9:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA5E48CE73611EE966D4FC3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.4.0/24
Signature Algorithm: sha256WithRSAEncryption
12:24:5b:bb:89:d2:35:f9:58:57:39:4b:d5:a6:fa:2b:96:ce:
e9:d0:49:f7:26:14:a6:d7:67:04:20:50:ed:83:ac:e7:d4:a5:
2d:0f:aa:5e:48:63:57:79:3b:91:81:41:e5:b1:a3:53:d2:53:
b8:b4:6e:1e:76:fb:b7:69:7b:b6:76:b8:15:27:1b:43:d4:ba:
cc:b2:4d:f0:5e:fc:45:93:d0:be:ed:5a:b6:ab:fc:a9:a1:5b:
a8:93:66:bd:63:0a:9a:45:3f:ef:f7:c8:5e:2c:35:7c:d3:50:
0e:25:53:4b:7b:b7:32:a4:0e:bc:9b:4c:0a:a4:8d:d0:12:b6:
de:43:65:86:cd:9d:1a:37:a4:26:e0:1a:80:1b:9a:2c:dd:eb:
3e:34:34:95:35:ce:fb:67:9f:a2:38:ea:de:55:22:87:64:53:
47:12:e2:0d:0a:37:c1:19:9e:30:67:18:7c:25:12:dc:3c:7d:
6b:5e:6d:18:98:ad:13:01:79:cb:15:66:d5:8a:14:b4:82:25:
66:38:d1:26:5d:0e:20:bb:ed:c8:b5:03:f0:17:19:28:b6:b5:
88:4d:d5:6e:77:3d:ef:e3:65:aa:d1:5c:07:6a:be:3c:47:21:
be:9d:62:5d:f7:66:c7:c3:7f:e7:a0:7e:b7:73:bf:67:ca:81:
01:04:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:19 2024 by rpki-client on console-ams.rpki-client.org