Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A05F82E77B11EE8FC45A60775412E6.roa
File: 70A05F82E77B11EE8FC45A60775412E6.roa (raw, json)
Hash identifier: 6WU37jC6iZNPpW8SwEGTeTo56iOlU/E7Ella7oyxysE=
Subject key identifier: A9:37:5A:82:79:1D:83:AF:6E:16:29:96:FD:CB:50:17:87:6C:20:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A54B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A05F82E77B11EE8FC45A60775412E6.roa
Signing time: Thu 21 Mar 2024 12:06:25 +0000
ROA not before: Thu 21 Mar 2024 12:06:22 +0000
ROA not after: Tue 23 Apr 2024 12:06:22 +0000
asID: 44559
IP address blocks: 154.210.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42315 (0xa54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:06:22 2024 GMT
Not After : Apr 23 12:06:22 2024 GMT
Subject: CN=65fc22c1-127f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:f8:e9:61:a7:c5:86:82:9a:dc:24:96:a2:
88:22:eb:1f:db:0b:79:9b:74:ae:8b:67:c4:a1:62:
e7:8c:cf:a0:10:9f:69:53:1a:72:1c:ab:50:4e:15:
32:68:53:5b:01:ba:11:00:c3:2f:0e:86:ae:b0:97:
62:a7:f6:08:bd:f8:e1:c2:ba:af:ef:32:ca:fb:b8:
43:1a:b8:8d:a2:06:e5:ba:4c:42:d5:89:91:d4:6f:
28:db:ae:ea:d7:2e:4b:5f:70:0e:d0:dd:d5:bd:74:
f5:1e:50:f6:1d:43:9d:bb:20:96:68:eb:cb:ff:fe:
7b:7e:29:9a:a5:7a:2e:6d:eb:5d:9b:63:b8:6b:3b:
e2:39:c9:e4:ea:58:fd:1e:96:ea:85:a7:45:c4:06:
49:c8:46:2d:93:28:12:6e:5e:cf:7a:0a:d0:5c:31:
10:7d:bd:23:f5:bf:30:14:4d:1e:56:7e:40:71:71:
3d:a6:6c:f3:23:10:4d:7d:50:24:16:cd:3b:66:ca:
2b:73:09:59:b6:94:73:19:36:7e:d5:6a:1a:32:3b:
d3:52:68:34:b2:f4:23:a1:24:70:f3:6c:46:79:85:
fa:f0:bc:aa:8a:63:7d:c7:07:31:af:10:07:77:97:
f7:e1:1b:f6:65:cd:e2:28:e3:89:b8:ad:1a:06:bc:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:37:5A:82:79:1D:83:AF:6E:16:29:96:FD:CB:50:17:87:6C:20:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A05F82E77B11EE8FC45A60775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.119.0/24
Signature Algorithm: sha256WithRSAEncryption
37:da:a1:ba:fc:8a:b4:9f:58:3b:60:25:73:00:86:9f:74:e8:
d3:43:b3:da:08:da:46:7b:bf:58:d0:7f:52:be:05:cc:3a:db:
8f:6b:fc:b0:e4:da:35:3f:da:cb:5d:97:e5:6d:17:47:b9:6b:
bf:53:bc:bd:c1:bd:7b:e7:77:a8:3d:b1:32:aa:fc:f5:ea:bf:
f7:6a:59:b4:23:5c:e8:0a:31:aa:00:d1:84:bb:14:57:cf:3b:
e5:20:51:1c:77:6d:f6:55:25:44:a3:63:75:ab:f2:d0:be:e2:
47:0d:bf:c4:74:96:48:f9:33:91:e7:6e:76:13:40:77:6f:df:
2a:e2:cc:bc:86:80:c9:f9:73:46:c9:d0:e9:54:29:f3:5e:f4:
00:7c:65:2d:26:5a:82:56:e4:81:42:7d:c7:cf:81:38:79:2c:
63:e3:35:f2:a6:04:e7:b4:f7:f6:38:24:00:e3:37:55:5d:02:
da:8a:a9:1f:66:2b:74:b7:c2:55:9a:68:30:4a:bc:8a:10:59:
0b:dd:d9:9e:d9:fb:e8:1e:f5:1c:b5:9e:2b:d8:65:a9:3f:3c:
b6:31:98:21:96:c8:a3:1b:9e:06:b1:ec:55:81:90:d8:66:3d:
a0:d1:8c:2f:6f:5b:25:c5:de:92:a7:71:5d:39:6f:15:73:80:
5c:26:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:20 2024 by rpki-client on console-fra.rpki-client.org