Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730F432AE73311EE88AEE1AD775412E6.roa
File: 730F432AE73311EE88AEE1AD775412E6.roa (raw, json)
Hash identifier: 4bZT1Q0UIszdr2IFYtn3mq+CXhqoKAmwAKAbgB8lMUU=
Subject key identifier: AB:C5:F5:F7:45:81:4A:D0:37:C2:F3:24:12:3F:72:3D:F9:9A:E6:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A34E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730F432AE73311EE88AEE1AD775412E6.roa
Signing time: Thu 21 Mar 2024 03:31:06 +0000
ROA not before: Thu 21 Mar 2024 03:31:02 +0000
ROA not after: Tue 23 Apr 2024 03:31:02 +0000
asID: 44559
IP address blocks: 154.207.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41806 (0xa34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:31:02 2024 GMT
Not After : Apr 23 03:31:02 2024 GMT
Subject: CN=65fba9f9-b5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:c7:5f:c5:6c:50:43:af:2c:18:2d:d2:09:
1c:00:9e:e6:09:f8:57:6e:ae:9f:bf:66:28:00:bd:
76:13:7d:b4:b5:29:96:36:40:7f:49:fb:8c:c6:95:
f1:96:52:92:cf:49:d4:19:c9:bf:29:03:0f:27:98:
db:7b:f6:32:23:ab:03:35:e6:4a:23:71:03:2c:20:
6f:8f:b8:2b:e8:af:83:88:14:2b:95:82:23:85:10:
b4:69:32:f8:c5:8b:fe:1b:4b:75:9c:02:57:52:bd:
e8:85:f6:5c:85:f5:0b:00:28:46:d4:8e:31:40:73:
f1:a9:92:5e:11:2f:2e:5b:09:6f:09:04:39:33:58:
42:ed:11:01:9a:c9:7b:04:a4:a4:04:52:d3:38:c9:
c5:8e:3b:08:25:50:4e:d8:f8:64:92:df:80:d1:bb:
c9:a1:a4:72:df:fb:60:52:61:f0:4f:b2:aa:ba:93:
15:85:4a:28:52:89:d5:75:89:d0:05:15:9e:ba:b3:
22:18:93:cf:ce:b9:e8:ff:c3:dc:f7:e1:b1:55:e7:
6f:09:9c:7c:dd:86:2d:04:c0:0e:ec:0e:e7:19:6c:
3c:5b:44:13:5b:dc:07:a9:f6:01:05:3f:7f:83:3d:
39:cc:6a:ae:18:e2:22:98:6a:84:b3:50:f5:dc:c1:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:F5:F7:45:81:4A:D0:37:C2:F3:24:12:3F:72:3D:F9:9A:E6:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730F432AE73311EE88AEE1AD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.18.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6c:81:92:80:cf:55:85:bf:1c:73:50:72:2e:8e:b1:5c:6f:
a3:a5:36:d2:05:a2:8b:18:b1:9a:ad:24:af:4f:95:1f:81:1f:
b7:1f:a4:74:1c:ca:6c:9e:a6:4f:5e:0d:c8:e8:e7:d4:fb:3d:
29:2d:94:47:e5:fa:0a:9e:27:40:9e:95:93:65:7d:d2:94:39:
12:80:2c:f8:cb:01:4d:87:a0:c7:94:70:eb:45:71:28:f1:b8:
ef:c3:db:d7:62:09:ed:7d:be:bb:eb:3d:cd:2e:34:0f:35:ff:
20:f1:0f:83:30:63:41:8d:cc:1a:82:09:ac:ea:91:26:06:92:
70:6b:ef:33:37:19:27:b0:6d:86:32:7b:23:c4:cc:9e:6f:5d:
7e:ec:b3:ba:2d:a9:b1:3f:3f:f9:d6:4e:f0:74:4e:81:4d:aa:
a4:bc:c7:b1:b4:e2:7a:52:92:dd:4a:2b:10:96:07:21:f4:01:
ec:d3:a5:20:e9:07:7d:90:7c:25:18:90:27:c5:d4:52:09:af:
d1:b4:3e:f6:05:fa:e7:55:81:f7:8a:4d:cc:7b:ec:f5:af:54:
67:45:eb:ed:ca:94:f2:eb:3b:15:a8:cf:64:e1:2d:ef:a8:82:
d4:20:ed:c4:66:08:a4:24:b8:9a:bf:59:51:d4:83:9a:92:cd:
00:7f:d9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:22 2024 by rpki-client on console-ams.rpki-client.org