Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62918288E75B11EE8D04B766775412E6.roa
File: 62918288E75B11EE8D04B766775412E6.roa (raw, json)
Hash identifier: P3fU88lLMfURyEGtD8ZynWnrhtBBhPF/jISwmhQNJEE=
Subject key identifier: 44:C1:D6:32:83:7E:AA:88:F1:17:CF:FD:AA:FB:F6:C6:3E:57:D2:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62918288E75B11EE8D04B766775412E6.roa
Signing time: Thu 21 Mar 2024 08:16:58 +0000
ROA not before: Thu 21 Mar 2024 08:16:54 +0000
ROA not after: Tue 23 Apr 2024 08:16:54 +0000
asID: 44559
IP address blocks: 154.211.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42197 (0xa4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:16:54 2024 GMT
Not After : Apr 23 08:16:54 2024 GMT
Subject: CN=65fbecfa-4baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:e6:a5:5d:f1:33:89:97:e2:24:54:3c:b0:
73:db:76:a1:01:f7:32:89:73:dd:7c:9d:fb:c0:a0:
c2:13:b9:05:e9:44:76:0a:8d:bd:90:74:46:a2:8b:
79:36:3c:97:77:37:f8:77:b9:76:2b:fd:e7:a5:95:
00:d2:18:71:a6:65:72:3e:97:ec:ee:0e:ec:8f:86:
02:36:56:75:57:84:a2:12:52:ea:0f:f1:e5:a7:b1:
76:c4:7c:23:13:4a:c7:9d:73:26:b3:67:1d:0f:68:
6d:fa:a6:48:81:41:80:4a:0f:c7:da:fa:21:b0:37:
28:a7:c5:b1:e9:12:1e:76:d4:c2:17:36:c3:f8:27:
9a:db:99:44:fe:5b:c9:94:7c:51:55:27:a6:9d:c1:
da:81:23:88:f8:89:c1:95:42:b9:c2:55:a3:09:3a:
0e:91:23:25:6f:f8:92:3f:ed:ef:31:58:89:e3:e2:
e4:1b:a6:c0:ce:c8:6c:76:7a:05:20:8a:e4:af:43:
0d:7d:e2:1b:01:f4:25:0b:37:08:95:9f:4f:92:cc:
e1:62:44:f2:6a:aa:2f:10:03:f8:25:36:e3:10:9e:
8d:73:9c:b9:a5:67:ae:a1:9a:de:4e:b7:84:26:49:
6a:71:fd:1b:bc:8a:21:f4:83:9f:4f:ca:0e:4c:ce:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:D6:32:83:7E:AA:88:F1:17:CF:FD:AA:FB:F6:C6:3E:57:D2:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62918288E75B11EE8D04B766775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:14:ee:06:7f:f0:88:be:19:ed:5b:d9:e9:58:de:a2:c6:e7:
37:d6:76:ca:b0:88:e9:bd:ab:e5:b3:9d:b8:87:17:46:23:af:
1f:06:d6:db:68:49:9d:10:c4:6f:6d:f8:bb:5f:bc:0f:d0:af:
ee:27:2e:f2:56:cf:8a:53:78:cd:1a:b7:1a:b1:88:44:a4:c1:
e7:67:1a:ef:8f:a8:cd:b4:3a:89:9e:d6:c3:0d:cd:35:2d:24:
8c:71:ed:1b:9b:d1:c9:15:79:f9:b2:3a:21:b8:9e:3c:2b:c9:
65:80:71:21:be:70:b5:33:09:5f:62:d3:27:a8:dc:6b:25:d4:
8c:81:5c:f6:69:d2:1b:13:3a:33:d7:93:88:97:ca:e8:8d:33:
c5:f9:4d:44:e7:bd:ae:e2:91:0f:77:95:26:23:31:12:d1:37:
17:28:fd:66:59:08:d8:13:ab:8f:c1:d9:4a:c9:40:36:38:24:
51:05:82:c0:9d:28:92:8f:ce:ee:37:a1:23:cb:11:45:c4:c8:
f3:59:90:3b:9c:b8:28:cd:07:41:ae:06:5d:4a:33:44:03:5f:
24:d7:e7:ca:e5:04:cf:a7:50:a4:4f:45:36:70:48:bc:46:90:
bd:b5:29:40:57:bd:1a:14:b9:d1:7a:79:8a:f5:d9:0f:b6:7e:
83:e7:4e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:19 2024 by rpki-client on console-fra.rpki-client.org