Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699772C8F87611EE8AC4E1F7007001B1.roa
File: 699772C8F87611EE8AC4E1F7007001B1.roa (raw, json)
Hash identifier: 6IpQkMs9ZQLw0SfKF1UZ9eJh9pXjgvzswOzPo+TsH+s=
Subject key identifier: 4D:D6:1F:C6:6B:C3:28:F1:C6:2F:82:61:DF:E4:E8:94:E3:98:68:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699772C8F87611EE8AC4E1F7007001B1.roa
Signing time: Fri 12 Apr 2024 02:43:16 +0000
ROA not before: Fri 12 Apr 2024 02:43:12 +0000
ROA not after: Mon 22 Apr 2024 02:43:12 +0000
asID: 5065
IP address blocks: 154.84.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 02:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43958 (0xabb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 02:43:12 2024 GMT
Not After : Apr 22 02:43:12 2024 GMT
Subject: CN=66189fc4-830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:73:93:4b:b8:a4:18:ba:45:01:2b:c7:7e:
bc:fb:94:41:3b:ba:c9:e8:00:78:32:e8:ff:b0:34:
2b:3c:d6:46:59:81:77:d6:71:70:8d:0a:a0:8f:d6:
70:95:82:cb:cb:a5:d6:69:a1:a4:1c:44:14:69:2f:
75:83:88:d8:1d:fd:9b:45:44:a9:57:92:88:50:e2:
62:85:8d:72:d2:a3:11:ef:b7:04:7d:5a:d7:80:53:
77:5c:98:d2:3a:2c:44:30:51:e8:66:bf:d9:4f:59:
d6:78:9f:89:9b:8d:9f:54:ef:71:86:3d:8b:97:58:
74:cd:3b:f7:69:90:ea:0f:11:bf:a6:09:48:ff:ea:
59:de:9c:ce:e8:95:24:e2:07:6f:93:f0:07:d7:77:
a2:bb:fa:c7:2b:07:91:dd:c7:4c:04:ad:a0:fa:25:
69:bf:1a:1e:c2:4b:e9:7e:5b:1f:fa:9c:0d:dd:54:
2f:6a:12:ca:89:bf:c7:4e:7f:f7:b0:cc:2f:f9:eb:
31:0a:42:c6:8c:2f:35:1b:a8:9f:17:09:0f:34:91:
89:93:ef:c0:e9:b1:d7:d5:ae:a2:cf:7c:a8:0a:68:
20:ee:87:53:c1:cc:f7:95:41:1c:b2:4a:fb:f6:ba:
3a:71:a4:6f:64:20:7e:7e:6a:af:ce:bf:11:89:1a:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:1F:C6:6B:C3:28:F1:C6:2F:82:61:DF:E4:E8:94:E3:98:68:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699772C8F87611EE8AC4E1F7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.144.0/22
Signature Algorithm: sha256WithRSAEncryption
87:24:12:24:63:d7:dc:20:f6:5b:44:4b:51:a4:8e:e4:ac:ff:
84:3e:5d:e4:5e:2c:6a:d8:9d:36:15:18:ea:15:13:dd:d4:87:
8e:1e:ed:17:fe:03:26:85:97:48:f7:f9:90:a3:d3:83:2e:f0:
28:29:46:b9:a6:f1:1d:da:d9:1e:a6:31:25:ed:70:b8:2d:68:
04:f6:64:ec:8f:2a:e9:12:08:c7:4c:a7:f1:c3:f6:96:28:64:
99:b2:37:de:0f:87:d4:71:6c:80:a7:5e:8b:af:39:b9:e7:97:
fa:d2:7b:b2:02:b9:1a:89:a3:c3:c0:74:b2:8b:2b:5a:67:ac:
7c:81:41:a6:cf:05:26:11:cb:62:de:65:de:21:15:07:2c:3d:
04:a4:9a:9a:94:27:7f:bd:cc:c2:ab:53:f5:77:66:9f:ef:54:
c2:ed:7b:68:24:db:83:a3:00:f0:36:45:b7:1f:83:a3:07:0e:
ae:af:e6:6a:2e:5d:80:cc:66:a3:97:9c:7b:1c:ee:6b:29:41:
a8:c8:f9:2d:7f:fd:90:12:97:e9:df:5f:cf:73:fb:d9:9a:cb:
d6:ed:80:9b:bf:89:fe:1a:5f:57:5d:44:90:e9:f1:15:e6:32:
bd:d1:b1:aa:75:e5:cb:08:0a:cb:f7:c5:31:06:34:3f:53:f9:
a3:6b:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:21 2024 by rpki-client on console-ams.rpki-client.org