Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696E46B4E73211EEBE04D3A5775412E6.roa
File: 696E46B4E73211EEBE04D3A5775412E6.roa (raw, json)
Hash identifier: RsGMLWzNcD4jyOWS46ddM7mERHsjpW3TPLfxSaHoWU8=
Subject key identifier: A5:04:A7:9B:1E:93:10:D9:F3:84:E2:59:95:7B:E5:E0:23:0A:5C:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A344
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696E46B4E73211EEBE04D3A5775412E6.roa
Signing time: Thu 21 Mar 2024 03:23:40 +0000
ROA not before: Thu 21 Mar 2024 03:23:36 +0000
ROA not after: Tue 23 Apr 2024 03:23:36 +0000
asID: 44559
IP address blocks: 154.207.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41796 (0xa344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:23:36 2024 GMT
Not After : Apr 23 03:23:36 2024 GMT
Subject: CN=65fba83c-f7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:be:2b:22:a6:35:3b:9c:c7:37:5a:0c:5e:
33:b0:40:ad:eb:80:52:d7:81:4c:da:c7:2f:6d:46:
4f:42:bc:56:66:a7:6b:45:78:0e:15:6e:e9:87:ed:
04:5d:31:f4:41:8c:e9:08:b6:b7:6b:63:aa:75:62:
76:db:c1:17:11:8d:38:a0:97:62:ba:0d:e8:24:69:
dd:ec:4c:78:a1:bc:4c:a9:3e:06:e2:bc:3b:a8:1f:
05:7a:85:4d:90:fe:6d:ce:2c:c7:ea:80:6d:c7:b6:
f0:1a:b3:55:df:bf:94:57:09:ad:c2:ac:d2:1a:ef:
42:9d:5f:6a:82:4e:b2:f7:20:bc:7c:9c:26:c3:12:
13:b6:bd:c7:d8:71:9f:75:30:34:df:ab:bc:91:c1:
80:68:fb:e0:3c:8b:d5:1e:a3:a4:ec:1b:8b:7a:75:
95:e5:26:1a:ec:45:88:9c:d6:7f:53:35:65:9c:11:
a7:c8:e5:b7:6c:0d:43:54:5d:f9:cc:1d:78:31:0a:
b6:21:52:e4:0d:03:57:83:7f:ce:2b:40:d5:37:63:
bd:d3:3c:81:1d:cf:95:6c:37:04:2c:08:63:73:dc:
d6:37:76:99:c5:62:25:ee:2c:76:64:a9:4c:63:12:
8a:bc:0e:3b:08:a7:cc:8e:73:c9:a7:73:9b:a8:11:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:A7:9B:1E:93:10:D9:F3:84:E2:59:95:7B:E5:E0:23:0A:5C:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696E46B4E73211EEBE04D3A5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.23.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bd:99:2d:d2:f5:0e:56:f4:61:34:82:2e:85:f5:19:59:30:
06:e4:be:7d:bd:cb:4d:be:c4:c7:0d:7f:65:9f:53:27:2d:57:
ab:a7:7c:12:3d:b6:18:a6:35:04:9b:57:ee:1e:34:0a:20:91:
73:3b:a9:2d:22:09:37:32:4a:fe:80:44:31:78:76:15:d8:8a:
4e:ac:80:1c:25:50:01:b0:30:a4:fc:0a:28:45:9d:72:f5:b9:
94:9a:a4:d2:dc:a5:47:0e:b3:6a:9c:34:d9:74:15:15:49:5a:
aa:a0:fa:a7:12:f8:fd:15:76:2b:b5:3f:87:12:d8:83:0b:65:
22:8e:46:3b:eb:90:0a:a1:57:e4:41:88:b2:6a:8a:bd:99:6f:
b9:16:b0:f6:cc:34:05:9f:f8:63:16:26:39:2d:0e:e7:c9:1c:
f0:7d:b2:a3:51:01:76:d0:25:b0:ac:41:7e:10:7d:5b:0a:8c:
b8:a0:fb:7b:05:65:11:6e:0b:e0:94:21:4c:00:d4:d6:3e:0b:
73:f6:7b:57:d8:a5:02:f8:28:03:f8:13:c2:93:1e:c3:40:a5:
22:f1:44:c9:8e:85:90:72:3c:0c:a8:98:31:3c:06:d0:9f:46:
67:fa:1a:51:36:6a:d3:65:b1:0c:77:50:f6:b9:b8:fa:e1:c8:
31:3e:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:21 2024 by rpki-client on console-ams.rpki-client.org