Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6847C4DCE73111EE9B9BF19D775412E6.roa
File: 6847C4DCE73111EE9B9BF19D775412E6.roa (raw, json)
Hash identifier: AbP6DcY0N4qpWffcUYoBnjxJB6Dq0ZXmVeq/V3bAfT0=
Subject key identifier: 40:8F:84:1D:78:02:40:A5:16:FA:23:BA:D8:A1:8C:F2:F9:63:78:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A33A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6847C4DCE73111EE9B9BF19D775412E6.roa
Signing time: Thu 21 Mar 2024 03:16:28 +0000
ROA not before: Thu 21 Mar 2024 03:16:25 +0000
ROA not after: Tue 23 Apr 2024 03:16:25 +0000
asID: 44559
IP address blocks: 154.207.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41786 (0xa33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:16:25 2024 GMT
Not After : Apr 23 03:16:25 2024 GMT
Subject: CN=65fba68c-7bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8b:6e:97:a5:de:ba:9b:05:84:e4:b7:65:6e:
70:eb:96:57:4b:80:a4:d3:8f:b6:00:9c:75:09:d5:
fd:e6:e9:82:cf:da:a7:b6:05:7a:2b:5a:24:6d:d8:
c3:b7:aa:ea:cb:a4:2d:59:2c:95:36:b9:13:fc:c3:
99:63:96:6f:10:a1:c6:01:c2:ab:4c:52:49:ba:71:
31:2a:c2:10:99:b5:61:3b:01:4c:c9:fc:5a:e2:2f:
90:89:22:69:f6:8c:79:72:c4:65:1d:e3:f7:69:66:
f0:d8:2e:38:80:84:a7:c0:7f:d8:3a:9e:dc:94:45:
94:c6:5f:d5:d4:50:f7:50:59:4e:30:b9:5e:17:9e:
8e:e4:9c:35:89:ba:6f:0f:11:58:45:89:ed:5f:86:
19:42:db:e2:f4:1f:2d:59:61:35:75:ff:23:c6:ac:
76:c7:68:3b:4b:a2:cf:63:98:85:92:43:ee:c7:73:
b9:06:26:01:42:1d:7b:b0:11:40:ae:19:00:93:bf:
0d:14:92:b9:97:b0:95:42:5f:3c:c5:df:1f:46:0e:
03:2c:4c:a1:46:19:de:3d:bc:ab:f3:6d:4a:00:8e:
fd:01:96:9c:9b:0f:35:09:34:2e:18:ac:14:55:34:
86:fc:12:70:5a:e2:6f:0f:32:1f:5c:0d:97:65:31:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8F:84:1D:78:02:40:A5:16:FA:23:BA:D8:A1:8C:F2:F9:63:78:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6847C4DCE73111EE9B9BF19D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:69:05:f1:4b:82:71:f8:95:68:fc:f4:9c:b9:54:02:b7:79:
37:4b:71:29:ec:f0:18:f1:dc:56:f0:19:71:62:b1:1d:b4:a0:
aa:93:d2:84:de:2b:c6:16:4f:12:22:ae:70:46:c6:9c:09:5f:
05:7d:f7:e5:d5:a7:92:e5:1e:ac:6d:1f:6a:77:8f:d9:29:a5:
9c:ba:9a:98:17:71:9b:79:86:b1:14:b9:97:e0:f9:88:14:48:
f7:c3:ca:02:25:11:39:b6:f7:b6:3d:2c:5a:79:72:5f:d2:f3:
8c:ba:ec:96:d0:21:9e:c9:bf:68:f8:ce:71:58:24:b6:09:93:
35:47:f3:5e:a0:db:95:13:41:a1:9f:1b:27:4b:31:7a:93:35:
8a:6d:f5:57:44:60:38:ab:54:ed:08:94:41:6a:63:11:2e:ed:
1d:b3:88:8d:32:27:03:cf:82:19:a1:18:bb:38:dd:52:e4:df:
2d:c8:04:36:c0:fd:35:2f:4f:50:ad:89:6c:64:29:a2:df:b2:
ea:6c:dd:e7:3a:a7:a6:d3:4e:d3:94:97:97:89:cc:3a:44:d0:
a0:dc:b6:f4:4b:b4:76:a4:92:d3:1d:ca:5c:f6:e8:11:b3:73:
fa:b1:00:b1:cd:7f:2f:9c:8c:cb:b7:b0:9d:55:c7:ec:68:24:
88:8c:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:20 2024 by rpki-client on console-fra.rpki-client.org