Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77ADB60EE74D11EEBA42E878775412E6.roa
File: 77ADB60EE74D11EEBA42E878775412E6.roa (raw, json)
Hash identifier: JFAqskxjHgyXPW8jmLGxyXzaowuOVvrJGlxZPzBP4hw=
Subject key identifier: C9:F9:7B:6B:85:2F:A3:15:EA:4D:BF:CC:38:03:1A:2D:D2:92:81:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A44D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77ADB60EE74D11EEBA42E878775412E6.roa
Signing time: Thu 21 Mar 2024 06:37:20 +0000
ROA not before: Thu 21 Mar 2024 06:37:17 +0000
ROA not after: Tue 23 Apr 2024 06:37:17 +0000
asID: 44559
IP address blocks: 154.220.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42061 (0xa44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:37:17 2024 GMT
Not After : Apr 23 06:37:17 2024 GMT
Subject: CN=65fbd5a0-71a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:f0:8c:21:35:f8:50:a1:67:2d:e8:93:d0:
ec:68:53:66:0c:f7:e3:06:70:76:07:9c:ba:55:1a:
e0:00:62:19:2e:5c:24:80:1e:e4:c6:c7:d1:87:d8:
2c:85:29:36:78:81:82:5d:ef:e2:e9:e7:68:68:ef:
79:b0:71:98:7b:6e:50:ba:5e:fa:be:6d:3e:35:03:
37:be:e1:d1:35:47:3d:e8:54:a1:ec:f9:45:db:69:
bc:58:f6:2b:8d:f8:f3:51:cb:24:58:67:d4:02:6a:
ee:8b:7f:70:aa:01:18:7a:93:a7:ff:3e:91:01:04:
26:55:d5:13:28:8c:e2:b2:7d:f2:21:a5:3e:11:db:
db:a7:08:77:68:80:cd:8e:c4:cc:09:06:34:77:59:
7c:3e:8a:7f:76:4b:85:bb:c3:47:0d:ab:a3:d7:78:
6c:d6:b1:48:31:3e:7f:04:3f:f4:01:68:8f:2f:c6:
2b:e2:13:ad:d2:dd:2d:ba:8f:2f:d3:9f:b4:80:87:
68:49:56:49:87:3a:c9:6b:4d:78:d1:b8:05:7c:96:
a6:15:dd:aa:4d:55:5c:83:27:dc:a7:d1:73:91:0a:
6c:b5:24:06:36:d7:ec:cc:a8:04:cf:d6:3a:1f:74:
4e:88:ae:c7:ad:8e:4a:6a:d2:c1:a1:f4:af:79:28:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:7B:6B:85:2F:A3:15:EA:4D:BF:CC:38:03:1A:2D:D2:92:81:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77ADB60EE74D11EEBA42E878775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.146.0/24
Signature Algorithm: sha256WithRSAEncryption
16:08:c4:37:fe:e7:97:ac:35:39:03:dd:d9:3b:0f:a9:fe:54:
5b:11:e3:8e:68:ac:86:0d:fe:02:e2:94:2c:ef:5a:5d:d7:44:
5b:21:ee:7f:65:11:6d:92:dc:60:1e:6d:fc:95:89:e2:fa:8d:
30:27:5c:2a:33:54:61:43:15:98:14:f8:56:e9:b4:38:7f:d2:
1d:02:db:90:2f:10:d9:61:9e:c8:74:03:a4:6f:1d:37:06:e7:
8b:a8:5f:db:5f:57:3d:ff:79:a8:14:ed:49:95:aa:88:7c:da:
b5:d0:91:ef:ea:7e:99:2f:21:60:38:43:2a:8f:c0:36:22:d5:
2d:45:8e:e2:41:0b:30:d4:e1:d8:86:7d:77:d9:62:e1:ae:8a:
1e:b9:ab:b6:75:0e:88:f2:91:96:b8:3c:67:55:e5:af:42:2e:
e6:05:cf:70:ca:10:e0:49:17:ad:ab:30:8f:aa:25:f4:f9:36:
55:74:8b:c6:1c:1d:92:da:7a:ad:18:5e:03:96:f3:e0:35:a0:
46:c7:fb:ec:90:07:5c:a0:07:df:9c:b4:53:a1:3c:fd:8d:9a:
ce:0e:bb:4a:a2:c1:18:3b:db:2b:ab:73:2d:85:a1:83:97:5f:
54:ba:7d:87:f1:82:87:f6:c1:3f:a1:b8:c8:23:48:a3:49:a2:
8b:37:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:22 2024 by rpki-client on console-fra.rpki-client.org