Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/708FAD7CE73F11EEA801D48B775412E6.roa
File: 708FAD7CE73F11EEA801D48B775412E6.roa (raw, json)
Hash identifier: uQh9En+TQ4kyZNX0V5CSM5QylSJwalNFJnL+tFbQq4I=
Subject key identifier: 7D:25:FD:4F:2C:09:AE:89:74:A4:67:DF:46:83:1D:80:22:36:6F:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/708FAD7CE73F11EEA801D48B775412E6.roa
Signing time: Thu 21 Mar 2024 04:56:55 +0000
ROA not before: Thu 21 Mar 2024 04:56:52 +0000
ROA not after: Tue 23 Apr 2024 04:56:52 +0000
asID: 44559
IP address blocks: 154.221.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41926 (0xa3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:56:52 2024 GMT
Not After : Apr 23 04:56:52 2024 GMT
Subject: CN=65fbbe17-bd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:1c:15:66:4d:b4:51:2c:49:eb:25:0a:ca:
8e:8f:c9:21:10:1d:83:dc:a2:2e:58:d1:cd:9f:0e:
78:66:00:a6:f5:ac:87:70:8e:64:43:e8:52:ca:c9:
70:3c:b8:2f:f3:5e:94:d4:2b:e0:83:0d:aa:55:bc:
a8:fd:91:9b:c0:c9:a8:a1:fe:b4:ff:cc:2f:36:57:
97:f2:e2:73:68:60:b1:93:8f:35:5f:8f:3e:b5:75:
ae:0b:c8:bc:1d:67:a2:52:53:51:40:26:35:35:c8:
f3:71:bc:cd:c8:99:8d:1b:6f:30:10:4e:dd:26:68:
0b:2d:de:5b:2e:1b:7d:a8:b6:c4:54:bb:5c:f5:31:
40:94:1f:51:c5:5b:34:73:17:10:db:ca:79:60:13:
d7:2f:61:af:6c:58:1e:f4:eb:4a:d4:3d:db:86:c2:
d5:54:5f:d7:0d:66:8d:b8:f9:4c:74:96:f7:d5:4a:
5e:05:26:91:e5:08:cd:87:ef:02:ca:40:33:b4:fd:
03:f0:b1:b1:3a:70:71:31:1b:73:71:92:d1:c0:74:
4e:29:4b:35:4b:5d:78:13:48:83:11:94:23:33:2b:
f9:90:77:d4:b7:7f:9d:f4:d3:4a:ff:76:76:a0:00:
d3:87:18:91:04:8d:06:4d:38:dc:c6:e3:1c:4a:51:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:25:FD:4F:2C:09:AE:89:74:A4:67:DF:46:83:1D:80:22:36:6F:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/708FAD7CE73F11EEA801D48B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:8f:e6:31:7d:10:0a:45:5d:ac:4b:25:00:59:9c:1f:7b:86:
cd:da:67:fb:9f:c4:ec:1c:74:c4:39:e1:88:41:a9:87:8d:c8:
5f:20:d4:b1:4b:16:07:ad:ca:0c:b3:12:d5:a9:ed:36:08:b9:
5e:ac:2c:7d:16:40:1a:30:bf:0a:0d:97:18:80:a5:d3:f9:62:
b7:26:06:11:28:2e:2d:e2:95:78:4f:7f:38:6a:0d:97:3c:f1:
d0:43:f6:14:a6:02:96:0f:07:6b:ee:27:bf:ce:7a:dd:2a:b1:
0e:1d:07:cd:b2:69:2a:37:0f:45:e5:b5:b1:d2:d5:53:ae:28:
54:32:2a:94:5a:c5:af:37:15:91:3b:02:78:2c:e5:17:68:d6:
43:66:0a:12:ba:69:96:08:cf:4f:d5:a5:f2:7a:c7:c2:94:26:
0c:da:68:7d:d5:8d:e9:70:d7:88:a2:10:60:e6:70:6d:32:01:
7d:26:39:89:db:b5:ee:90:74:b0:20:95:1c:7d:f7:41:2a:d7:
c0:7a:c9:1b:08:b9:85:20:ee:2f:4a:45:d0:04:b3:26:13:cb:
14:7b:b3:29:39:0b:3f:6b:2a:b6:cb:62:eb:44:79:e2:d8:5b:
3e:26:1c:86:b4:fd:29:d6:b9:20:21:21:2a:b7:38:16:fa:1e:
a3:01:00:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:22 2024 by rpki-client on console-ams.rpki-client.org