Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AECD1BAE78411EE8779A6A6775412E6.roa
File: 7AECD1BAE78411EE8779A6A6775412E6.roa (raw, json)
Hash identifier: iwZtAS2R9Li70LhwWYZZHQ7AP8O7zHbGJZWhW9VDIz4=
Subject key identifier: 63:5C:FE:ED:D2:DF:59:F7:31:8B:D0:24:14:90:8F:5E:AD:0B:45:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A595
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AECD1BAE78411EE8779A6A6775412E6.roa
Signing time: Thu 21 Mar 2024 13:11:08 +0000
ROA not before: Thu 21 Mar 2024 13:11:05 +0000
ROA not after: Tue 23 Apr 2024 13:11:05 +0000
asID: 44559
IP address blocks: 154.210.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42389 (0xa595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 13:11:05 2024 GMT
Not After : Apr 23 13:11:05 2024 GMT
Subject: CN=65fc31ec-00c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:4b:10:8e:68:a3:b9:28:ed:ad:46:1f:af:
3e:9a:bc:dd:64:4c:ef:5d:b6:87:5c:38:db:a6:cc:
57:6f:68:30:4c:0d:db:3e:02:55:b7:2c:46:22:35:
23:53:fa:5e:03:3a:e2:47:9f:a8:f1:be:80:0e:88:
60:23:a2:c5:de:3e:61:74:3a:dc:5a:1d:f4:a5:64:
a8:e3:6e:79:f4:d1:12:9c:c4:00:a1:59:91:df:3b:
a1:e2:2a:b3:dd:44:e3:65:7c:00:02:58:f2:a0:4f:
38:b6:3d:e1:5c:5d:71:72:b7:58:61:dd:aa:b9:f6:
03:75:a7:fe:4a:92:87:f0:df:dc:a1:ae:e5:19:d2:
25:a1:84:28:63:09:1b:4b:82:a3:22:55:44:72:8e:
35:f1:e4:10:92:a0:6b:51:d2:df:0b:3d:f4:21:c5:
3f:95:81:ce:90:8b:36:ff:01:16:e1:d7:45:63:99:
ce:af:aa:8b:18:9c:3c:57:64:ae:9e:d2:73:18:07:
19:be:0e:b1:e7:69:a0:1b:9a:e9:98:1d:77:6e:07:
a6:ca:97:59:e5:ab:17:b2:ec:33:cd:53:21:1c:65:
09:fd:9d:f1:a2:de:7a:88:2c:a2:25:2e:5c:6b:a4:
99:01:be:07:54:df:cb:b7:9e:92:f7:c3:ff:0f:a4:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5C:FE:ED:D2:DF:59:F7:31:8B:D0:24:14:90:8F:5E:AD:0B:45:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AECD1BAE78411EE8779A6A6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.82.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fb:e1:92:6a:8b:b2:e3:eb:13:8d:bc:99:67:9c:cb:32:66:
d4:12:6d:47:08:e4:27:6e:97:5f:63:37:b6:bf:59:cb:ef:8c:
bd:12:e7:c2:2f:12:48:8a:a6:f8:e1:1c:d6:69:9f:48:2f:bd:
e6:e3:3e:8c:69:68:c7:ce:4f:22:fa:6f:bb:65:07:1f:26:64:
ef:86:9c:01:0f:68:36:c9:f3:8e:87:05:a0:8a:6f:e1:bb:3d:
64:5b:b0:c2:88:9a:3f:21:22:e1:09:5a:70:0f:7d:92:c8:20:
64:47:7c:8d:0d:8e:d1:65:13:5f:bb:e0:4e:3e:dc:1a:6b:24:
65:8a:7f:c1:81:6a:c7:3e:94:ce:6e:9d:bc:53:18:0c:a7:30:
e4:cc:6a:0e:16:e8:8b:df:56:4a:61:74:af:1b:48:a3:03:e9:
38:71:18:93:bc:15:3a:7c:81:46:c7:77:1a:5e:27:f5:31:1d:
a0:65:66:86:dc:44:22:0d:4d:be:76:e9:74:08:a2:62:d6:27:
b7:0c:94:78:73:d1:a9:3f:73:38:e8:2c:49:57:00:e2:30:e5:
80:11:d2:1d:0f:1b:26:c7:a0:31:0f:fa:34:e1:61:e9:ef:87:
02:3d:78:7b:8b:4c:7f:ab:7c:02:71:46:6f:79:bd:96:fd:6c:
06:5c:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:23 2024 by rpki-client on console-ams.rpki-client.org