Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E42CE3CE75C11EEB3DCAC70775412E6.roa
File: 7E42CE3CE75C11EEB3DCAC70775412E6.roa (raw, json)
Hash identifier: qA1GAKwJ8rYnIrI1r26iLloqB8xdlXh1BRW+DF6OsoM=
Subject key identifier: 79:0B:12:3D:03:FB:45:0B:59:1E:85:DB:32:55:B6:6F:51:42:A4:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E42CE3CE75C11EEB3DCAC70775412E6.roa
Signing time: Thu 21 Mar 2024 08:24:54 +0000
ROA not before: Thu 21 Mar 2024 08:24:50 +0000
ROA not after: Tue 23 Apr 2024 08:24:50 +0000
asID: 44559
IP address blocks: 154.211.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42207 (0xa4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:24:50 2024 GMT
Not After : Apr 23 08:24:50 2024 GMT
Subject: CN=65fbeed6-2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:67:ff:4b:7f:0e:d8:79:4d:7a:b3:6d:c8:
33:2b:23:75:08:19:be:e6:4e:e5:0b:12:c2:be:cb:
72:1e:9e:52:52:42:85:a7:d3:ef:4a:47:8a:61:85:
02:61:7c:62:0e:45:74:16:c2:52:6c:91:3a:38:d8:
60:77:56:1e:4f:d6:6f:17:a1:0c:65:5a:74:e5:e5:
40:13:ee:8d:a1:22:71:cd:9e:33:33:59:50:cf:e8:
80:ff:3c:df:42:af:e1:52:69:c0:58:a1:08:cd:aa:
15:06:b6:df:0a:e4:14:61:c7:4c:e5:bd:f0:7a:30:
92:e1:fb:d7:ec:36:63:10:29:0b:e3:b0:a4:8a:de:
8b:b6:1f:32:83:f3:01:4c:ab:1a:a9:77:98:06:4e:
8e:cc:6f:ef:5a:ff:63:5c:a9:7b:66:59:a9:61:21:
23:c7:51:cb:3d:b8:c6:0a:3d:8d:ac:d4:77:9b:22:
08:73:1f:22:76:85:ba:0b:0b:01:ef:7c:77:4a:d6:
05:73:6c:00:ea:59:3b:9c:60:48:0a:86:ef:91:59:
f1:ab:61:d2:81:a2:0e:ff:a6:d3:03:bb:a9:f8:3e:
a4:05:f5:14:32:85:52:02:fb:e0:91:f5:89:81:a8:
d0:9e:3a:05:b9:27:ca:6c:4e:b0:d3:85:66:b9:e5:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0B:12:3D:03:FB:45:0B:59:1E:85:DB:32:55:B6:6F:51:42:A4:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E42CE3CE75C11EEB3DCAC70775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.41.0/24
Signature Algorithm: sha256WithRSAEncryption
56:86:3a:3f:2d:c9:32:f4:b8:e0:1e:52:7e:e7:aa:de:c1:9a:
12:8b:11:05:83:54:f5:95:ff:5e:54:fe:63:01:d2:b5:88:43:
7f:1b:63:11:15:01:ab:09:8a:c9:93:5f:e8:60:32:a0:b7:e1:
e3:31:c4:40:04:b9:5c:7d:c1:d4:42:1d:c9:8f:20:3e:48:19:
3c:d0:9a:14:d6:f7:7c:fa:7b:b3:a4:12:e6:16:6b:f3:f4:0b:
17:27:9e:f5:e5:67:4e:5d:71:8d:09:7f:19:fb:03:20:16:6f:
a0:8f:8e:96:a8:0c:5e:e4:8f:cb:60:cb:2b:ba:4d:f7:80:47:
c9:42:1b:7b:e3:c2:17:e2:5a:59:fc:63:dc:36:5d:9a:52:70:
ee:bf:dc:1f:64:c1:0d:3d:5d:29:0d:e7:a5:d2:be:8b:82:17:
c8:6b:5e:69:a5:27:bb:8e:f9:6d:b2:76:c4:7e:b6:d6:03:ca:
3e:81:fb:a9:b9:30:6e:93:5e:f8:2c:b1:8e:c7:24:15:17:ce:
e9:e9:02:fc:d1:0c:f7:be:c4:d5:04:65:f9:04:bf:c9:b9:cc:
d8:7a:da:ad:61:a7:89:02:36:91:ff:29:2c:ac:7b:bf:74:84:
4a:e5:97:1d:8a:2d:01:65:5f:35:c8:ca:a1:4e:e0:33:0a:da:
61:e4:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:23 2024 by rpki-client on console-fra.rpki-client.org