Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794EEB20E73B11EEB2FB1F6D775412E6.roa
File: 794EEB20E73B11EEB2FB1F6D775412E6.roa (raw, json)
Hash identifier: OFWVZK+3LD37F89qBoOMu/33hcJF5yfmuj2l2uoitNc=
Subject key identifier: 23:30:DC:E9:FF:65:5D:2C:C5:54:C7:50:23:D8:F8:34:82:99:76:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A39E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794EEB20E73B11EEB2FB1F6D775412E6.roa
Signing time: Thu 21 Mar 2024 04:28:32 +0000
ROA not before: Thu 21 Mar 2024 04:28:29 +0000
ROA not after: Tue 23 Apr 2024 04:28:29 +0000
asID: 44559
IP address blocks: 154.221.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41886 (0xa39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:28:29 2024 GMT
Not After : Apr 23 04:28:29 2024 GMT
Subject: CN=65fbb770-9cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:32:da:a8:2f:f6:44:c9:ca:97:1b:e0:c9:
29:b1:18:54:e1:e4:a7:20:ec:0e:66:47:6a:d8:e0:
18:96:85:94:5f:57:00:aa:99:0b:db:db:bf:cc:c3:
42:d2:20:1f:e3:ba:8d:cc:0c:39:fc:4f:9f:52:37:
97:88:1b:84:66:45:58:8f:30:4f:31:8b:da:03:00:
9d:69:02:42:f0:b8:bb:d3:59:17:de:f1:69:cb:86:
05:80:3c:1e:69:f3:31:1f:c9:a8:8c:0e:6b:ba:20:
78:15:1c:d7:15:36:e6:74:f8:14:02:fc:8b:18:4d:
a9:54:54:84:30:28:4e:a3:d6:56:f3:70:67:1b:4a:
2b:31:50:d0:b3:99:d4:25:40:e6:fa:06:aa:9c:ad:
32:87:bb:22:51:c2:a5:01:2e:2a:03:7c:2d:26:39:
fd:ea:3d:b0:3c:63:91:2c:c1:4c:cd:2b:03:14:a5:
3e:ca:a2:2a:9c:58:75:83:a6:a0:bd:eb:bd:be:63:
39:eb:69:cc:24:b7:37:73:ab:b9:23:4e:68:68:9c:
c1:ff:28:ff:f7:47:ed:fc:17:e3:c1:c3:b5:14:67:
09:46:54:36:19:0e:be:b6:16:c8:12:1f:14:eb:6e:
42:86:1e:fe:66:d5:e7:95:70:4f:85:e8:c3:bd:39:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:30:DC:E9:FF:65:5D:2C:C5:54:C7:50:23:D8:F8:34:82:99:76:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794EEB20E73B11EEB2FB1F6D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.234.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f2:3f:66:0e:f1:9f:b0:fd:20:84:bd:44:4f:65:8b:bd:58:
33:a5:ef:3a:eb:c2:43:d0:f9:53:ba:66:21:87:90:2e:07:d1:
7e:d4:d0:77:2e:94:4c:fd:80:88:96:56:35:23:f4:98:3d:73:
cc:b3:d6:5c:52:ff:7e:b0:3b:39:83:5f:02:bc:b8:6d:0b:a3:
8e:d8:ad:27:dd:2d:77:af:21:b7:e5:65:4e:ef:d4:3b:f1:a5:
1c:a6:08:c5:1a:e8:a4:cb:89:93:43:54:85:52:c7:c5:85:85:
4e:4d:ce:90:ea:41:ad:63:8b:37:a3:58:65:03:fd:fa:80:e4:
fa:9f:55:38:63:22:5a:fb:fd:f1:c7:12:23:03:fe:76:ad:5f:
f4:49:ec:86:bc:55:92:d3:a5:80:cd:93:71:27:01:da:71:9d:
95:1d:98:3d:05:47:27:fb:ca:88:6c:b6:2d:d5:c9:9a:fb:d2:
4e:b7:a1:c9:bd:7e:2a:10:12:db:d4:12:de:11:5e:6c:32:3d:
75:18:3d:be:17:3d:56:75:c5:0c:5c:b2:14:19:d5:81:12:a4:
14:f9:57:f4:b9:e9:1c:14:b7:5d:1b:5b:70:70:c0:0e:b8:27:
d8:19:3e:17:f5:3b:cc:59:5c:72:83:d5:a9:f6:7f:ad:83:27:
47:3e:d5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:22 2024 by rpki-client on console-fra.rpki-client.org