Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/561A08CCE73811EE89691E55775412E6.roa
File: 561A08CCE73811EE89691E55775412E6.roa (raw, json)
Hash identifier: dSo0wjHBdtcwQhYq/MG+EG2EJe/UG5WwxJ0rVMzVBUQ=
Subject key identifier: BF:23:33:0E:0A:33:6D:CE:DE:31:FA:5E:87:B7:0D:4A:BC:5B:82:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A37E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/561A08CCE73811EE89691E55775412E6.roa
Signing time: Thu 21 Mar 2024 04:06:05 +0000
ROA not before: Thu 21 Mar 2024 04:06:01 +0000
ROA not after: Tue 23 Apr 2024 04:06:01 +0000
asID: 44559
IP address blocks: 154.221.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41854 (0xa37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:06:01 2024 GMT
Not After : Apr 23 04:06:01 2024 GMT
Subject: CN=65fbb22c-c074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:b6:2a:d8:04:d5:a5:54:40:9f:ea:ca:76:
ce:c5:b9:bf:62:dc:dd:f3:61:6a:5b:60:9c:b0:b0:
a0:62:f4:9f:7f:2d:34:2f:49:b8:1a:48:df:27:2f:
3f:11:ea:1b:22:f9:48:44:d9:b5:73:a9:07:71:7e:
71:18:7b:24:a6:64:9d:1e:de:8d:fc:dc:9c:fe:51:
51:0a:6e:96:a0:a3:a9:5b:58:28:da:92:df:2a:23:
7e:92:e6:26:f8:fb:c6:47:31:e2:75:bb:8a:e7:e9:
d8:f0:83:b7:b2:19:1c:bc:4a:37:56:18:4b:13:16:
f2:74:a2:bc:b1:20:0c:79:90:08:6e:55:3e:6e:38:
fc:a4:2d:cc:77:c9:48:0f:68:b6:72:cf:a0:a5:78:
72:bb:3a:68:6a:05:91:97:09:e2:4e:5f:a9:0c:df:
70:8a:d2:ec:67:c9:20:4d:b7:9f:16:35:a4:7a:31:
bb:cd:59:e3:75:e3:29:0a:b4:5b:f5:48:f6:e1:ef:
1a:27:8e:fd:60:b6:cc:d3:a7:4e:40:48:5a:13:17:
29:2d:a6:39:40:08:bf:a2:3d:d2:99:48:03:5b:10:
04:f3:e7:9e:64:65:a9:49:57:ff:22:e3:d6:75:b6:
db:85:03:3a:bc:d0:05:40:81:49:1d:45:87:4e:23:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:33:0E:0A:33:6D:CE:DE:31:FA:5E:87:B7:0D:4A:BC:5B:82:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/561A08CCE73811EE89691E55775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.250.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f9:39:8b:9a:8b:72:ea:9c:40:b3:df:bb:c9:a3:5c:fc:93:
6e:3c:4e:f5:b3:2a:c2:35:1c:64:76:36:2c:92:e5:6e:88:29:
05:96:04:66:5d:cb:70:88:6a:94:91:9c:a8:08:51:37:0b:4b:
35:9f:48:a1:0a:85:54:5a:50:d6:fd:f9:4d:15:d1:bd:88:0a:
7a:25:a5:9d:e0:d5:fd:3f:d5:15:5e:41:a9:88:45:40:74:e6:
0e:d0:d7:a1:cd:f6:57:04:e1:62:3a:90:c8:03:ae:18:c3:04:
38:aa:6d:4b:95:99:d3:24:c7:12:ba:ea:8e:48:c9:71:e7:80:
61:e9:47:5a:5e:59:fc:56:c2:d9:b4:30:16:8d:08:e0:f1:1f:
9a:e2:51:40:b9:dc:03:fa:fb:d5:a1:9c:a0:d8:b1:80:4a:24:
d1:d3:5e:a5:6b:5b:59:1c:7f:a3:ab:52:dd:5e:8a:6e:19:34:
85:dc:b7:b2:1a:f3:12:ee:f7:9f:43:d9:2a:e3:29:12:47:a0:
cc:85:29:f9:bf:4a:ae:4c:9f:25:6f:80:f4:e0:83:44:3e:c7:
bb:78:b6:f9:da:56:78:31:1e:69:8d:cb:46:54:3c:c9:ac:3b:
9d:c1:9b:a3:34:16:81:91:22:89:96:5d:ff:40:84:39:0b:f7:
7f:e2:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:20 2024 by rpki-client on console-ams.rpki-client.org