Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61EACAE4E75E11EE83BB6C7E775412E6.roa
File: 61EACAE4E75E11EE83BB6C7E775412E6.roa (raw, json)
Hash identifier: UcTsXNQXqxKMV0ltXrrpehYjjNCEjWmBmsPTo+yZOv0=
Subject key identifier: 69:31:3C:C4:A7:7E:B3:10:BC:B1:4E:55:30:28:99:DF:70:0B:8C:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61EACAE4E75E11EE83BB6C7E775412E6.roa
Signing time: Thu 21 Mar 2024 08:38:25 +0000
ROA not before: Thu 21 Mar 2024 08:38:22 +0000
ROA not after: Tue 23 Apr 2024 08:38:22 +0000
asID: 44559
IP address blocks: 154.211.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42225 (0xa4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:38:22 2024 GMT
Not After : Apr 23 08:38:22 2024 GMT
Subject: CN=65fbf201-03f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d5:21:c8:8c:8d:fc:28:92:df:f7:51:6d:03:
46:78:82:c2:8b:fd:17:56:fd:b0:f9:64:92:2d:9e:
91:75:07:80:ef:e0:eb:ca:4b:e4:cf:68:ce:90:1b:
8a:cd:aa:e4:52:4c:98:a2:14:a2:3f:8e:2b:77:f1:
c0:78:82:91:cb:2b:0e:50:9e:57:6e:bd:a2:8f:cd:
b0:ea:7c:bb:7c:5e:91:45:a0:aa:d1:1d:f9:a6:e3:
4e:1e:70:b4:01:74:5a:ac:38:e4:39:6c:f4:de:a5:
01:a3:ae:f3:2d:b0:4f:ec:5b:fc:c6:12:0b:fd:04:
14:b3:56:ec:a9:4f:46:2e:96:36:24:8b:17:73:17:
14:2a:8b:ea:a1:1d:3a:4a:a0:0f:0b:69:73:4e:30:
c5:50:b1:e4:8e:09:00:26:0e:29:ed:85:e1:ae:ab:
6e:e0:83:58:17:6f:9f:e5:20:99:5b:41:ef:cb:2f:
1f:e4:4c:84:98:79:84:b2:ed:51:cd:9a:e3:de:92:
41:e1:a8:f3:bc:54:7c:dc:d2:74:2d:65:47:79:fb:
cb:63:78:47:80:4f:5c:40:bd:b9:7e:10:61:a9:28:
b8:5e:48:8c:13:cc:20:72:7e:7b:3a:84:d2:61:26:
31:a9:f3:fc:02:e9:7a:24:4b:a9:71:92:5f:15:f5:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:3C:C4:A7:7E:B3:10:BC:B1:4E:55:30:28:99:DF:70:0B:8C:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61EACAE4E75E11EE83BB6C7E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:86:ea:58:9d:9d:bc:af:79:0c:dd:c4:e0:89:a3:42:b6:24:
97:f9:70:40:41:64:db:a6:8b:4f:b4:e8:e6:ea:32:c3:53:ba:
b4:60:51:4f:02:b8:e5:d0:a8:44:ae:1b:e8:ce:28:e3:8a:ef:
68:99:9e:9a:5f:de:8a:62:d1:68:57:43:c3:ee:b0:ce:18:d3:
06:8d:36:64:59:f3:b6:c2:3f:55:d1:96:0d:f1:a3:9b:68:8b:
0e:87:63:73:fb:79:c9:88:52:7d:ef:83:12:bc:aa:1a:84:fa:
a1:24:07:d0:1e:d7:ad:ca:ab:52:fd:07:be:03:a8:2d:e0:19:
2d:1f:1e:8f:7b:1b:84:08:89:d5:9b:a0:0c:9f:94:3d:96:16:
a2:1c:49:69:65:f0:fe:3c:ea:89:f9:fa:6f:8d:67:24:81:3b:
e7:17:db:37:82:06:55:ed:91:d4:a8:0e:75:28:82:06:4d:ee:
80:b6:b4:f3:00:6f:61:59:78:cc:35:0e:b8:3b:73:1d:80:ef:
7d:21:74:d3:f0:73:0e:eb:4f:8e:56:7e:d1:1e:ff:54:20:a7:
b4:30:d1:ac:d5:6f:e3:dd:26:0e:10:34:35:bb:f1:a1:a5:e4:
0f:a2:5d:67:17:ef:03:da:a5:02:88:49:40:ba:3b:8f:63:2c:
ed:2a:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:21 2024 by rpki-client on console-ams.rpki-client.org