Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810C7302E76111EEB3AD6E97775412E6.roa
File: 810C7302E76111EEB3AD6E97775412E6.roa (raw, json)
Hash identifier: GeLxifnZ1Awnhl3LbxCLSoOfe5IPXzjcQNHGVy2lXQs=
Subject key identifier: A8:32:52:22:9D:CE:8C:10:35:6F:99:E4:28:9A:A1:98:A2:8E:AB:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A50F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810C7302E76111EEB3AD6E97775412E6.roa
Signing time: Thu 21 Mar 2024 09:00:46 +0000
ROA not before: Thu 21 Mar 2024 09:00:42 +0000
ROA not after: Tue 23 Apr 2024 09:00:42 +0000
asID: 44559
IP address blocks: 154.222.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42255 (0xa50f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:00:42 2024 GMT
Not After : Apr 23 09:00:42 2024 GMT
Subject: CN=65fbf73e-e11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:f7:70:5d:03:47:ed:e3:2e:cc:09:a8:c9:
15:33:c7:62:20:e9:f7:29:97:ac:3d:03:6e:cd:39:
64:fa:2d:74:73:2b:c1:c0:4d:6b:9e:df:48:60:aa:
d3:e0:d7:cf:df:82:3b:ef:16:90:82:7a:68:ce:bc:
a9:92:b3:15:9e:17:d1:c3:df:ae:0e:3a:ff:e6:1c:
a4:fb:29:2a:c2:9b:28:74:8a:07:b5:bc:b8:d1:ba:
67:db:4e:42:31:d3:da:f0:4b:4d:0e:de:20:24:ec:
42:60:8e:4c:f8:03:be:ea:ac:f2:49:ba:eb:27:9f:
9c:5a:58:ba:6a:89:4c:8d:3b:5f:1f:8d:7e:f0:c1:
68:f2:c5:c0:ec:f5:33:70:6c:28:30:1b:89:5b:7d:
ac:50:f5:3b:9e:c2:fd:14:49:8a:4e:b1:57:e8:ba:
b4:9e:b4:c1:dc:f3:46:fa:f8:e0:28:66:df:e2:8d:
c9:b3:a5:1f:52:2f:2f:66:f3:50:6c:13:94:4d:f9:
f0:d9:5c:c2:89:5d:80:3c:bd:83:38:e7:a4:a3:e8:
11:bd:16:ab:f2:f5:99:1d:ec:5c:15:58:27:39:1d:
50:7a:7c:d7:2f:35:f5:7a:56:4f:44:75:1a:e1:8d:
4f:08:12:3f:68:46:77:f0:ac:f9:54:00:59:3d:9e:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:32:52:22:9D:CE:8C:10:35:6F:99:E4:28:9A:A1:98:A2:8E:AB:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810C7302E76111EEB3AD6E97775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.17.0/24
Signature Algorithm: sha256WithRSAEncryption
07:89:b0:fc:45:49:14:f8:4a:ed:b9:a7:60:d6:7a:4c:4c:c2:
29:09:e0:57:bf:46:cf:67:b6:57:db:f3:b8:0a:93:c4:f3:bd:
f4:38:94:53:9e:b2:0b:12:13:3f:fa:cf:d9:12:5c:78:58:6f:
bc:1f:36:c7:55:eb:8d:da:52:fd:30:27:04:e4:3d:28:b0:84:
e5:6a:b3:fa:89:1b:9e:04:dc:1a:bb:2a:6d:2a:49:d5:19:90:
71:58:4b:85:0a:7d:18:e4:89:8a:a9:5d:b0:82:bd:e3:9b:9b:
77:fa:25:f2:44:7d:9c:b4:f7:ee:b1:a1:26:88:c1:d9:60:15:
76:4f:66:cb:14:19:7a:88:5e:7d:85:82:ff:bd:44:2b:d0:e9:
2b:f2:51:88:86:8b:5f:8c:07:0f:21:8d:40:45:ac:49:a3:d1:
df:42:e1:8c:1f:30:24:56:60:27:68:57:4e:aa:38:96:5d:04:
62:5f:73:57:c6:d3:9a:9c:96:8f:1c:f1:c7:20:90:77:84:00:
3c:ac:12:5c:bf:d7:6b:74:87:95:eb:8d:fb:c4:8b:bf:d3:b4:
56:19:56:3a:97:22:a7:71:95:f9:52:7f:b1:64:0b:7d:1c:cc:
76:3c:37:17:95:cf:c1:21:2f:11:6e:0e:e9:23:12:8e:9a:01:
c4:4b:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:23 2024 by rpki-client on console-ams.rpki-client.org