Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F12B22AE75011EEA175C291775412E6.roa
File: 7F12B22AE75011EEA175C291775412E6.roa (raw, json)
Hash identifier: 5ABttNj7zzvT9HwDxfknRFM8tn6tF5CaBc0S7EBRR00=
Subject key identifier: 3A:07:D4:CB:8C:85:34:4A:A6:C3:80:55:08:99:DD:7B:A4:D7:F9:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A46B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F12B22AE75011EEA175C291775412E6.roa
Signing time: Thu 21 Mar 2024 06:59:01 +0000
ROA not before: Thu 21 Mar 2024 06:58:58 +0000
ROA not after: Tue 23 Apr 2024 06:58:58 +0000
asID: 44559
IP address blocks: 154.220.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42091 (0xa46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:58:58 2024 GMT
Not After : Apr 23 06:58:58 2024 GMT
Subject: CN=65fbdab5-1ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:81:d1:f6:a1:6e:22:58:02:43:3a:32:5c:
70:3a:11:67:44:75:de:de:da:b0:3f:9d:4a:82:1f:
62:cb:55:3f:53:be:7d:06:3b:ca:70:55:c4:a1:3a:
af:16:66:d5:3f:38:e8:a0:4d:d6:ac:2d:4f:fc:a3:
f3:e8:2a:42:3b:52:84:d0:7e:d3:d1:2d:c7:7f:55:
5e:71:b3:f4:4f:7c:f1:7e:97:20:5f:0f:0d:20:47:
b1:9b:b6:aa:0a:41:cb:74:15:a1:41:e6:37:f1:48:
02:7e:ab:d2:72:b2:7f:6d:85:cf:90:ef:47:b7:45:
1c:4d:c8:1b:ef:35:67:62:55:3f:20:24:18:1a:6e:
ac:b8:70:c6:b7:8d:26:84:88:e4:07:e9:01:36:52:
02:5e:cc:47:1d:69:39:d3:ea:b5:60:39:31:2a:63:
47:09:7c:8b:39:06:ff:c5:02:89:26:ba:d6:9f:42:
e4:db:3a:66:f2:b6:7d:f1:78:3f:13:60:fa:20:2a:
1d:e3:bf:4b:c4:f2:06:a1:1d:e1:6d:aa:e8:58:3c:
02:ba:b7:98:02:ed:f3:d6:a1:92:25:fa:5f:ff:08:
fa:5a:b5:71:1f:86:32:e3:3b:bd:e9:d2:4c:cc:b6:
24:d0:06:0a:76:1b:28:62:98:fc:c6:02:b5:4b:d4:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:07:D4:CB:8C:85:34:4A:A6:C3:80:55:08:99:DD:7B:A4:D7:F9:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F12B22AE75011EEA175C291775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.131.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cb:84:db:0d:e0:41:d7:20:b1:86:7e:e8:3a:b2:1c:46:8c:
56:27:26:20:37:ef:65:16:de:d0:24:1a:db:e6:84:87:54:fb:
8f:13:a8:9f:e2:de:9e:53:1c:32:8d:ec:dd:4a:9b:8a:71:25:
1a:9d:40:2a:e3:02:25:cf:68:37:47:62:5e:ec:e6:aa:25:53:
02:ec:26:35:52:86:8f:7b:c5:53:16:f2:e7:69:35:f7:c5:ff:
45:6b:3d:7f:a2:e7:8d:21:ba:38:fa:2b:66:f2:13:16:fa:f7:
67:38:0f:89:ee:ac:b9:22:7d:d8:e6:56:55:a0:72:90:77:f6:
b1:80:0c:76:4d:4c:ce:71:b7:f1:ce:a4:2c:4b:21:39:d7:d1:
a0:63:f1:3d:13:3f:f4:1b:8d:7d:24:70:32:d3:c9:ef:4e:d4:
4a:cf:da:11:40:a8:73:f2:a8:fb:d9:aa:5a:76:ac:74:eb:94:
5d:d4:03:d6:be:ba:71:1a:0f:24:2b:7a:84:0a:6c:ce:e9:58:
2c:da:f5:16:13:34:07:e6:2e:54:03:84:d4:5b:8a:6f:af:2d:
db:5f:7e:ea:5b:9e:db:d4:cb:a3:06:2c:6c:d0:ef:1b:ce:04:
e4:08:b8:db:e4:ab:17:d3:c5:95:d2:b0:67:de:0e:4e:73:89:
15:3c:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:23 2024 by rpki-client on console-ams.rpki-client.org