Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7845E4E6E74911EE8399285B775412E6.roa
File: 7845E4E6E74911EE8399285B775412E6.roa (raw, json)
Hash identifier: Oev48eh+40l/4d6vAZhzHp00cJEkHR/u9BeoHiD0+uA=
Subject key identifier: 1C:34:A5:B8:13:07:70:7F:60:AB:D5:D2:C0:3C:44:3C:BB:C0:46:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A425
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7845E4E6E74911EE8399285B775412E6.roa
Signing time: Thu 21 Mar 2024 06:08:43 +0000
ROA not before: Thu 21 Mar 2024 06:08:40 +0000
ROA not after: Tue 23 Apr 2024 06:08:40 +0000
asID: 44559
IP address blocks: 154.220.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42021 (0xa425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:08:40 2024 GMT
Not After : Apr 23 06:08:40 2024 GMT
Subject: CN=65fbceeb-2313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:91:a5:56:85:7c:0b:36:2d:46:ec:34:55:
37:d9:1c:ab:28:7c:21:7e:a7:ca:88:0a:33:84:8c:
c2:ed:35:ad:bf:6d:d0:a5:15:9f:45:ea:f8:f4:df:
d6:35:a4:3c:9f:eb:f1:bc:13:6f:d7:30:bd:cc:28:
a3:62:6b:07:a1:24:f2:8e:90:31:11:05:35:52:7e:
1b:cf:1b:59:b2:7a:a9:f4:d9:f5:81:c2:75:a2:12:
95:41:c6:87:b1:d4:54:01:c6:5e:00:7d:c2:1a:9e:
79:85:10:65:99:ef:05:11:79:1b:1b:61:30:d4:f9:
f1:90:b8:8d:77:30:0f:11:de:b7:0f:1b:0e:3f:de:
2f:f6:2f:bf:3c:af:c1:a6:8a:80:5e:2a:f6:6e:e2:
91:ad:ec:c1:a8:69:73:88:3b:d1:7c:17:2b:54:f7:
30:5d:69:55:91:af:02:64:ba:33:ff:e9:75:fd:fe:
fe:91:9e:b9:3a:3d:61:b3:7d:7c:c4:7e:0d:1e:c0:
c8:73:34:42:8d:ea:e7:a1:34:84:84:3f:08:50:52:
9b:4d:1a:49:d1:68:62:13:10:9b:45:93:34:d4:ee:
3c:cc:64:c6:62:15:32:96:4c:71:d6:b1:1e:20:af:
02:c6:6a:8b:bc:07:3a:47:1a:1a:36:57:39:97:38:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:A5:B8:13:07:70:7F:60:AB:D5:D2:C0:3C:44:3C:BB:C0:46:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7845E4E6E74911EE8399285B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8b:93:3f:0d:39:b4:65:a5:df:88:15:07:2b:90:d7:fb:34:
34:f5:0c:1e:ee:f4:ea:f9:f9:50:cb:26:c7:5a:fb:c2:c2:e3:
1d:b1:83:22:25:d4:cc:19:02:f4:39:77:a0:03:f1:d1:50:a7:
0c:36:90:ac:9a:b8:ba:d9:2f:d7:e0:d9:96:6c:8d:ab:3a:ce:
8f:9b:db:dc:10:4a:fb:8b:bf:a8:b1:19:b0:71:e2:bd:16:2e:
a7:da:04:15:d6:45:85:18:31:43:4a:c6:6e:c1:b2:95:9b:82:
65:7f:f8:aa:3b:5a:e6:f0:19:0d:86:58:fb:4c:92:78:b3:bc:
b6:6a:7e:0e:b9:9c:df:c5:ac:4b:8c:83:2d:66:cd:9e:7e:1e:
34:f2:fd:a0:9d:b8:75:e0:8d:df:ac:f6:6f:4f:38:90:17:ae:
73:48:a0:81:05:e2:cd:52:f2:b2:8c:48:20:a0:10:aa:06:76:
e3:51:a9:ed:77:3e:83:33:99:c1:75:44:f2:5b:31:fe:30:f7:
8e:d0:11:3d:59:ea:39:d4:53:ef:eb:aa:14:80:8d:e8:8b:7d:
30:bd:9d:85:19:b3:3e:e3:e7:b2:22:71:32:db:c9:8c:34:d8:
b4:20:ba:ee:22:ae:70:e2:eb:a7:b0:5e:24:fc:cb:aa:ed:55:
8e:c4:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:22 2024 by rpki-client on console-fra.rpki-client.org