Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B5F9C30E76011EEBE71A491775412E6.roa
File: 9B5F9C30E76011EEBE71A491775412E6.roa (raw, json)
Hash identifier: Toxk9c6PhE4CUpLtIMd06Dgi4mGylMGyWCftVca1KJ4=
Subject key identifier: 8F:30:DC:C0:71:7F:3A:74:2D:6A:BF:6D:24:33:AF:00:4A:76:A3:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A507
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B5F9C30E76011EEBE71A491775412E6.roa
Signing time: Thu 21 Mar 2024 08:54:20 +0000
ROA not before: Thu 21 Mar 2024 08:54:16 +0000
ROA not after: Tue 23 Apr 2024 08:54:16 +0000
asID: 44559
IP address blocks: 154.222.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42247 (0xa507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:54:16 2024 GMT
Not After : Apr 23 08:54:16 2024 GMT
Subject: CN=65fbf5bc-59de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:28:88:cb:c6:34:f5:40:7b:14:1c:7c:f1:
11:54:6e:5b:b9:ad:d6:30:73:81:04:b9:9b:08:5b:
20:34:86:f8:5b:07:52:4d:f2:59:0d:c6:e9:f9:2b:
bc:cb:15:0f:6a:a8:74:1b:a2:6c:87:78:f8:15:69:
17:06:77:10:36:f3:9a:1b:c7:ab:41:20:cb:9e:71:
4e:08:ff:f9:c6:45:92:01:5a:39:86:c5:a0:40:9a:
da:82:6a:3b:86:f7:44:73:c5:37:81:69:73:a1:90:
1a:ac:9c:75:a3:fe:00:74:00:37:91:76:e4:4e:ef:
0e:8d:34:36:60:21:6e:18:60:64:d2:0c:59:37:12:
76:cd:62:3b:ac:68:c3:8d:67:b2:b8:5c:6c:88:73:
06:f7:09:c7:67:f8:f5:4f:4a:07:1a:b9:3a:28:8f:
cb:cd:a3:5c:66:e1:c2:2c:1e:30:00:25:f6:9e:de:
f7:1f:da:11:5f:56:30:bb:77:bc:9c:43:bd:50:26:
3c:61:92:f2:7e:93:86:bc:0f:23:e0:73:f0:81:e1:
97:47:3e:01:6a:c7:7c:18:32:41:a6:4e:8b:be:1c:
3c:60:2d:15:3c:1a:c7:28:fe:71:28:ab:90:e0:a3:
6e:55:d9:1d:74:f8:d8:61:01:37:8d:15:ee:6b:87:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:30:DC:C0:71:7F:3A:74:2D:6A:BF:6D:24:33:AF:00:4A:76:A3:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B5F9C30E76011EEBE71A491775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.21.0/24
Signature Algorithm: sha256WithRSAEncryption
83:44:ab:54:83:ec:dd:95:6d:a2:10:78:7a:85:cb:f7:75:a8:
ee:9c:ab:7f:0f:b8:f9:fa:b2:27:fa:a3:17:aa:61:03:7f:a2:
25:12:72:3a:b0:aa:d7:c9:3d:20:30:1c:b0:1b:42:4e:15:7a:
ff:6d:58:1e:d1:0b:94:ca:4b:33:54:7f:ce:81:16:aa:8f:79:
6d:7a:d8:38:7c:a8:a7:4c:13:71:9b:6d:cf:02:8c:29:a7:78:
24:09:b0:40:0f:2a:33:ef:3a:4c:92:a4:b8:ed:90:a5:5a:87:
7b:b5:af:86:99:95:d4:73:e1:8c:72:c3:a7:fc:47:86:dd:a0:
ad:8c:98:85:f1:4a:7f:60:3b:93:69:5d:97:26:e3:26:68:93:
a3:e2:0c:08:09:20:16:96:58:46:dd:07:da:43:8c:10:f4:33:
23:2b:39:d5:69:7e:22:7e:22:8f:0a:ed:89:8c:0c:ba:b5:39:
c2:9b:25:af:10:09:81:5f:ad:d5:23:fe:12:03:3d:86:e4:0f:
cf:10:00:e7:61:a4:d7:6d:5c:46:04:45:4f:d6:b9:b8:40:07:
23:a8:3f:25:07:f1:c3:86:c4:94:38:a5:c6:f3:ac:24:bb:9d:
52:68:f1:d8:50:6b:ac:53:4d:9d:c7:5a:f1:7c:52:fe:e0:93:
ff:75:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org