Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/753A2E16E73E11EEA8E9CB85775412E6.roa
File: 753A2E16E73E11EEA8E9CB85775412E6.roa (raw, json)
Hash identifier: by7BHaScoiCFSKuv6TWqAY4pOz9S35ctO+zvvvr8Xv8=
Subject key identifier: 5F:94:78:5A:FA:C8:AB:BD:B7:98:85:BE:71:22:2E:A5:3B:61:07:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/753A2E16E73E11EEA8E9CB85775412E6.roa
Signing time: Thu 21 Mar 2024 04:49:54 +0000
ROA not before: Thu 21 Mar 2024 04:49:50 +0000
ROA not after: Tue 23 Apr 2024 04:49:50 +0000
asID: 44559
IP address blocks: 154.221.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41916 (0xa3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:49:50 2024 GMT
Not After : Apr 23 04:49:50 2024 GMT
Subject: CN=65fbbc72-028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:23:05:2d:68:5c:39:6a:0b:09:cd:c7:91:
d8:60:85:96:e2:29:8b:f7:0b:5b:48:53:cf:d3:c6:
19:77:93:1b:45:9a:83:2f:a1:e6:f6:dc:f3:f6:18:
79:e3:1b:94:06:b2:f4:20:e9:be:64:a1:88:6e:a5:
e0:e9:38:40:dc:3b:e2:93:b4:df:f4:70:74:08:8e:
5f:bc:bb:d2:f2:de:c4:f0:56:f7:20:38:7b:31:f0:
f9:d1:8f:4c:60:00:6c:57:0e:a3:a9:90:d6:00:b9:
f4:a4:dd:29:14:2f:4f:e9:7c:78:50:77:fc:11:ee:
bc:2c:05:40:af:97:04:b3:19:71:74:f2:f3:2c:18:
6e:8f:e4:a3:d7:ec:75:e8:71:12:4e:2b:ab:58:48:
d9:d7:2a:de:21:04:a2:2d:52:6e:7d:4e:0c:3d:5f:
f6:f6:8b:ea:6d:48:55:89:8b:86:a4:99:6f:d6:90:
c8:41:a4:5e:79:8a:88:4d:36:7e:1f:e5:89:70:48:
1e:96:a3:d1:83:d9:d3:bd:28:1a:25:2f:85:2f:aa:
e5:63:04:93:71:97:d4:53:af:19:59:71:c3:7b:ae:
7e:16:91:7e:a7:ce:e1:aa:21:ff:ba:4b:f3:d1:60:
48:9b:14:af:53:06:82:4f:68:7f:23:31:ea:fe:0a:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:78:5A:FA:C8:AB:BD:B7:98:85:BE:71:22:2E:A5:3B:61:07:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/753A2E16E73E11EEA8E9CB85775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.219.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f3:5e:c9:ae:0e:fb:84:a3:91:39:76:1e:13:a4:30:7b:78:
c2:0b:42:b6:18:e6:db:b0:a3:ac:11:b6:0a:3b:59:5e:67:ac:
be:45:df:13:2f:5a:6d:d4:d0:ee:00:9a:3e:1b:19:33:65:14:
6b:65:a4:fb:eb:5d:2b:5a:6e:1c:75:6c:65:45:2a:f2:f5:50:
8b:92:32:1c:a3:64:39:20:e5:63:9b:62:ec:f0:95:50:7d:8f:
a4:63:ac:ee:75:f5:ea:e4:9b:57:02:b0:d1:1a:b4:71:cf:b6:
93:c7:15:b4:f9:09:7e:71:36:d3:64:33:80:d3:66:fd:68:ae:
82:4e:f6:f1:db:ce:1b:2e:1b:fe:fe:d5:2b:95:97:52:a5:56:
bc:c5:f7:fd:9c:04:38:82:74:64:f4:0a:fe:65:ce:ba:70:3d:
9d:f5:5d:f0:a1:dd:0a:ad:5b:19:36:01:69:f4:03:24:e3:4a:
b4:4a:bb:7e:08:2d:a1:3c:e8:e1:7f:74:23:56:2e:51:a1:7a:
83:a3:24:fb:30:92:92:cc:43:94:82:cc:1d:b0:39:17:59:b9:
0d:83:56:b3:7b:14:45:29:cb:e1:53:3a:2f:62:59:34:64:7f:
91:ae:bb:23:fe:11:5a:ef:59:a3:4b:4c:4c:b4:d4:12:8b:b7:
ec:39:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:21 2024 by rpki-client on console-fra.rpki-client.org