Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B6F310E73F11EEA755288E775412E6.roa
File: A1B6F310E73F11EEA755288E775412E6.roa (raw, json)
Hash identifier: g7MIXHtr+XcHzh4AQLUmDTIxCAcMJgO2pO0GMJeS3rQ=
Subject key identifier: A1:24:9B:D8:F5:15:DF:40:52:31:36:23:81:EF:B3:ED:66:EF:A0:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B6F310E73F11EEA755288E775412E6.roa
Signing time: Thu 21 Mar 2024 04:58:18 +0000
ROA not before: Thu 21 Mar 2024 04:58:14 +0000
ROA not after: Tue 23 Apr 2024 04:58:14 +0000
asID: 44559
IP address blocks: 154.221.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41928 (0xa3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:58:14 2024 GMT
Not After : Apr 23 04:58:14 2024 GMT
Subject: CN=65fbbe6a-7333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:2f:00:a2:4b:a4:9b:cb:44:91:4a:e6:39:
76:39:96:9b:5c:d1:c9:d0:4b:21:e7:ef:12:31:5c:
d8:d3:75:1d:d8:d4:07:97:51:f8:c9:12:0b:97:f3:
09:0e:0f:b7:fa:e3:99:d0:2d:ae:b7:3c:52:b4:b3:
8b:f2:b1:5d:9b:d1:1a:06:33:b6:06:55:c5:02:cf:
6b:0e:07:6a:37:5c:31:a7:a0:6f:c2:94:29:0a:ca:
8e:4a:59:58:34:4d:02:77:d0:f7:fd:98:19:08:a7:
46:18:68:cb:e0:1e:7e:2d:d9:ec:a3:b7:9a:9d:6d:
6a:3a:d8:8a:bc:88:13:0b:36:f8:b6:10:0f:d9:3b:
2a:1d:8e:05:7b:38:57:d8:81:90:af:91:4d:7b:2a:
0e:c0:10:7c:4c:20:00:c6:49:e3:5f:cd:df:f7:5f:
ed:68:de:74:4a:8a:8c:32:d6:7d:8d:ed:cc:76:20:
6a:c2:2b:14:92:7b:24:4f:ed:a6:4e:24:6e:d7:ea:
4d:b3:d9:66:d8:03:c6:73:6e:63:2b:d3:2e:5c:61:
1a:68:97:0d:ce:1c:49:f5:60:ce:f1:6e:29:77:96:
90:61:1b:81:33:e2:02:c3:57:3c:ab:1c:82:66:3b:
73:ed:19:60:ac:ae:6d:9e:c6:80:9a:5f:7f:0e:f9:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:24:9B:D8:F5:15:DF:40:52:31:36:23:81:EF:B3:ED:66:EF:A0:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B6F310E73F11EEA755288E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.213.0/24
Signature Algorithm: sha256WithRSAEncryption
35:96:33:11:cc:6a:c5:7a:be:f3:c9:6b:a1:d4:3c:a4:27:af:
c3:6f:7f:eb:74:04:4d:19:cc:fb:47:36:c6:64:5d:86:6e:6c:
fb:a2:fb:a2:8d:30:b8:90:90:6b:a9:b5:40:6a:39:13:5c:5c:
43:6b:0b:e8:58:60:48:79:b7:a2:a1:74:f1:a7:f0:fe:eb:96:
29:ea:72:6b:61:ab:74:8b:98:61:89:18:76:30:72:c2:ac:6b:
1d:ff:50:89:2c:7b:1a:e1:b2:a2:c6:f6:f8:d3:ed:fd:69:90:
04:ac:06:11:1c:0d:fd:f9:b3:96:0e:69:b9:ae:dd:f3:2c:28:
83:1c:b8:30:c0:d7:72:d4:f5:60:d7:57:3d:86:13:cf:81:39:
59:4a:42:19:70:96:8d:66:22:b5:8d:01:88:73:96:2b:b2:5f:
de:63:f3:1c:2f:76:db:9a:55:28:c7:46:eb:ab:d3:01:cf:b3:
05:e8:5b:15:68:d1:5a:b6:3b:61:c6:41:f4:75:de:39:16:94:
fb:79:2e:53:d2:da:5a:ef:9f:c8:42:a3:e5:2b:58:10:3e:fa:
70:11:cf:aa:59:96:18:dd:7d:dc:a0:c2:9e:45:f6:71:0b:c9:
55:37:13:42:9f:74:e9:79:d4:47:3e:bd:bf:ee:eb:05:d1:bb:
1a:83:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org