Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FCF3B4F87511EEA635D66B017001B1.roa
File: 65FCF3B4F87511EEA635D66B017001B1.roa (raw, json)
Hash identifier: 15c18fwovMhWdy//rQQG429J8+V9Qy78qDJDzQ1FqKc=
Subject key identifier: C1:4F:6B:7E:BE:02:E1:33:AB:A9:21:22:08:03:6F:A7:25:2C:89:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FCF3B4F87511EEA635D66B017001B1.roa
Signing time: Fri 12 Apr 2024 02:36:00 +0000
ROA not before: Fri 12 Apr 2024 02:35:57 +0000
ROA not after: Mon 22 Apr 2024 02:35:57 +0000
asID: 5065
IP address blocks: 154.95.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 02:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43946 (0xabaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 02:35:57 2024 GMT
Not After : Apr 22 02:35:57 2024 GMT
Subject: CN=66189e10-7967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:12:cc:27:1a:c9:30:9b:69:48:38:30:2a:
78:06:4f:64:cb:ce:37:3d:63:54:19:4c:8e:5b:60:
a0:e8:d8:ec:4c:6a:2e:78:9d:20:4e:25:0e:6f:64:
24:16:cf:66:f6:ca:67:7d:ca:67:7a:f2:13:7d:0f:
83:2d:b9:21:32:92:0c:4c:ea:a1:70:04:40:37:b7:
64:64:3c:c3:10:55:da:fa:fe:c7:35:73:fb:f1:bc:
a4:de:3f:14:ef:d5:59:3b:f3:ca:2f:b5:6e:f4:f0:
55:d1:4b:32:39:3b:80:da:db:d3:82:44:69:78:be:
eb:13:5b:cc:55:ff:4c:3b:9c:63:ad:11:22:76:75:
ea:62:f9:9b:4e:8d:b8:2f:9c:f2:1b:ca:3f:8a:48:
76:1d:70:29:ea:3b:c0:d1:53:7b:91:73:cd:b8:0a:
40:f5:cf:d1:35:cf:a5:e4:3d:b2:29:45:e2:f7:f8:
04:97:a4:21:d6:c4:e9:9a:e4:20:63:65:94:8a:e5:
ac:aa:65:23:0b:22:28:17:92:aa:85:cd:e5:ee:75:
08:44:4f:3e:8f:6d:93:ec:82:f1:5f:d7:90:f3:68:
0e:9a:4e:ba:a4:0c:49:ed:6e:49:99:54:9a:01:4f:
9a:a3:86:c9:96:e8:dc:a2:f7:98:22:ff:86:d1:56:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:6B:7E:BE:02:E1:33:AB:A9:21:22:08:03:6F:A7:25:2C:89:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FCF3B4F87511EEA635D66B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.20.0/22
Signature Algorithm: sha256WithRSAEncryption
85:8d:1d:31:8f:c4:85:bb:ec:6a:56:f9:ff:3e:26:60:c7:87:
14:c6:ad:11:b2:77:85:cf:c2:e7:35:5d:7e:2f:f2:0d:1a:d0:
86:c5:8d:37:3d:d0:04:9d:04:9f:f1:66:ee:98:5c:bf:d3:38:
c6:e6:01:92:ac:2b:7c:89:7f:ce:14:5b:8c:c9:b7:03:31:eb:
56:1e:0d:77:cc:d0:fa:c9:89:b3:50:b8:c8:cd:f0:c1:e3:47:
12:af:c5:70:1c:0d:47:ce:59:8c:96:89:d9:25:29:9b:19:a0:
b4:a1:63:0e:7e:1f:3e:e7:0d:d8:de:a8:e2:e3:14:6e:94:42:
d0:30:25:df:f5:73:8b:54:70:89:fa:c1:f6:fa:e5:14:28:70:
a0:36:f7:a5:b9:1e:d6:af:0c:57:41:66:dc:3f:cb:de:cc:c2:
c7:b6:b7:af:ec:f0:b9:bc:cb:99:9d:3d:58:e8:f8:06:ae:dc:
cf:b4:c4:e7:fb:59:7b:9f:fb:66:07:e9:1e:e3:5d:dd:e1:f6:
6a:5c:9c:8e:bc:07:de:a0:8e:3b:6e:f6:c6:29:23:2a:99:d8:
95:04:c5:56:e1:ed:b9:0e:a8:aa:20:37:4f:8b:ba:a9:59:49:
7c:a6:c7:ec:c5:b6:68:7a:0b:8c:a5:e0:40:a3:54:e6:ba:87:
10:70:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:20 2024 by rpki-client on console-fra.rpki-client.org