Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5362E9FCE4F211EEBF7388B0775412E6.roa
File: 5362E9FCE4F211EEBF7388B0775412E6.roa (raw, json)
Hash identifier: icFnCtV7wi3etup4gVyzpjJk5hf7pXEOdQniz3bnLMI=
Subject key identifier: 28:C5:F4:DE:9F:7F:47:8E:58:C3:5B:B9:C7:8F:EA:60:D2:6B:51:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A29F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5362E9FCE4F211EEBF7388B0775412E6.roa
Signing time: Mon 18 Mar 2024 06:39:53 +0000
ROA not before: Mon 18 Mar 2024 06:39:49 +0000
ROA not after: Sat 20 Apr 2024 06:39:49 +0000
asID: 39600
IP address blocks: 154.94.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 06:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41631 (0xa29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 06:39:49 2024 GMT
Not After : Apr 20 06:39:49 2024 GMT
Subject: CN=65f7e1b9-180c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:4d:92:e6:02:a1:f4:c2:85:dd:83:34:05:
28:0a:28:be:9a:a9:53:5f:05:1b:09:3a:85:8c:72:
87:f9:1c:61:bc:11:01:48:2b:62:11:ba:6e:53:c2:
4b:2a:a0:7e:f9:68:82:c2:6a:09:28:a5:5d:0b:b5:
99:d5:3f:71:cc:22:64:b9:19:b3:ac:b4:8f:0c:55:
72:de:d0:91:e4:a3:8c:7c:40:9d:e5:30:13:b3:93:
32:56:5e:fd:0d:f5:19:b4:ae:9b:5e:72:ff:71:0c:
b0:d7:96:5a:39:75:9d:a3:be:07:34:06:8b:2c:ff:
cc:40:c7:ca:24:fb:50:b5:6f:76:31:8d:b2:e0:cd:
f1:dd:dc:b8:fc:09:fa:a1:3b:2c:57:08:88:b2:6c:
e3:63:ac:94:7b:98:fa:1e:e3:79:4d:9b:ab:13:33:
38:bc:b8:13:63:9a:99:10:d1:49:58:7b:86:31:f3:
d0:3d:d0:a9:9d:77:db:45:6e:9a:08:f8:3a:e8:28:
c3:8f:29:da:d3:9b:67:5f:01:d5:bb:1e:8d:97:76:
67:b3:5b:a1:08:57:58:e7:f1:da:29:ec:e4:71:d2:
9a:85:c2:39:5f:f0:5e:a1:6e:45:4d:29:89:b2:0c:
ad:88:00:38:67:17:b8:6d:71:8a:1f:32:1e:89:09:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:F4:DE:9F:7F:47:8E:58:C3:5B:B9:C7:8F:EA:60:D2:6B:51:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5362E9FCE4F211EEBF7388B0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:46:29:76:47:1c:4a:f9:d0:8a:76:32:1b:52:17:0c:ba:b9:
88:66:f5:e0:a1:df:e4:9d:ad:10:04:d3:22:c4:c5:e8:c8:50:
31:82:68:2a:59:ef:05:41:11:03:68:74:87:ae:5d:4c:7d:70:
b7:93:d1:a5:6a:9c:26:2e:88:09:65:ef:59:bc:7e:19:6b:26:
d1:9d:3e:05:8c:f4:24:b1:5b:b5:c5:0e:d4:2a:c8:1c:b0:1a:
73:f7:69:6f:a7:b3:ee:b2:55:53:34:b0:93:fa:76:8e:75:7b:
bb:71:58:b6:5a:5e:14:0a:17:ec:1f:46:a5:a0:78:f3:78:d6:
bf:a0:6b:06:c3:1c:1d:2a:b7:01:f2:49:64:38:e0:dc:7f:29:
b8:e3:81:26:4a:b5:52:b1:3e:87:f8:4f:30:0c:8f:ca:95:28:
85:9e:38:01:b1:6e:ee:2d:fd:f2:57:66:7b:82:b4:96:09:bd:
35:f4:7a:a0:5b:a8:d3:2c:40:0e:13:ea:d8:13:f7:b4:a0:0d:
7f:46:c5:69:fb:9a:f5:39:93:bd:d3:a4:9d:b5:66:62:a7:a6:
00:b2:28:65:b5:62:46:02:f0:d7:a1:31:f3:ae:96:e2:a4:3f:
74:70:88:e9:b5:82:64:a5:e8:8f:da:57:7b:04:9c:2a:ba:33:
72:d5:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:39:03 2024 by rpki-client on console-ams.rpki-client.org