Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D95C08E77E11EEBEB0117A775412E6.roa
File: A2D95C08E77E11EEBEB0117A775412E6.roa (raw, json)
Hash identifier: S1/KiyNyNjdtRjRZHzkHtmrMiuFyVb67XiV0+TJ9y8w=
Subject key identifier: 3D:B0:38:21:4D:27:92:5D:0C:AB:85:BF:72:32:6E:AA:01:84:EC:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A557
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D95C08E77E11EEBEB0117A775412E6.roa
Signing time: Thu 21 Mar 2024 12:29:18 +0000
ROA not before: Thu 21 Mar 2024 12:29:14 +0000
ROA not after: Tue 23 Apr 2024 12:29:14 +0000
asID: 44559
IP address blocks: 154.210.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42327 (0xa557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:29:14 2024 GMT
Not After : Apr 23 12:29:14 2024 GMT
Subject: CN=65fc281e-c5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:5b:48:d3:5d:c9:0c:7e:61:33:f3:4d:e1:
b0:a3:42:91:27:e4:1d:6f:55:a0:be:b4:ec:23:70:
75:10:70:39:83:84:56:31:68:2b:71:5f:41:9a:a0:
a9:af:c4:ff:b4:29:6b:8a:94:8b:27:81:98:4c:ef:
fb:ae:b7:1c:a8:7e:d0:d4:56:2b:7f:d6:e1:f5:9d:
4e:e4:b2:86:1f:04:83:24:29:65:f0:db:86:2a:23:
b0:19:50:15:f2:cd:8a:47:a9:6c:3c:75:f8:cc:3f:
92:49:ba:d8:ec:30:e4:b0:f8:18:b5:98:91:75:b7:
ba:02:44:94:48:28:21:08:42:5d:39:4f:64:d8:31:
9b:f7:0f:f3:25:f6:a6:89:e9:c7:99:a2:57:c0:d1:
52:82:ab:57:3b:54:12:17:00:23:68:47:1d:cd:74:
bc:51:de:15:8d:7d:3c:c8:4b:61:b4:69:b8:3b:17:
f3:95:17:e5:4e:c5:c2:5f:7d:b5:82:bc:b3:3d:34:
4c:1d:8f:f2:fc:90:c9:05:56:6d:60:b0:01:92:c7:
a6:89:ac:cf:81:a3:a5:f3:50:51:cd:2e:14:fb:85:
cc:1b:19:87:97:36:b1:29:be:38:b9:98:40:4d:88:
78:7a:7f:09:d1:65:64:69:cf:c0:b8:ad:b3:c6:63:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:38:21:4D:27:92:5D:0C:AB:85:BF:72:32:6E:AA:01:84:EC:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D95C08E77E11EEBEB0117A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0e:c9:ad:99:69:20:e3:59:dd:46:8d:ed:73:19:74:0b:c4:
b4:70:04:33:fd:66:19:d2:25:1e:e0:4c:e0:08:cc:76:19:10:
15:38:9f:d4:86:6f:23:3a:52:f1:b7:8e:32:0c:28:02:d9:d5:
d0:22:98:f0:7f:42:9e:de:72:68:bb:02:ec:b9:b3:dc:b0:d0:
5e:fa:bc:00:4c:9a:f7:6e:85:4f:bf:bf:f9:f9:b7:1c:7f:1c:
cf:60:35:23:ca:32:4b:d4:a2:26:61:15:35:fb:7a:b3:06:d1:
c6:d1:84:86:ac:80:19:f1:be:ca:ce:ad:c9:df:c7:1f:fc:65:
90:76:74:ef:0f:73:5b:63:d5:d1:27:99:b1:f7:1c:aa:6d:f0:
8a:d6:67:44:13:44:8b:bc:5d:10:6d:95:13:6d:7f:8d:72:22:
80:3f:ac:e9:d7:7c:5e:ed:06:d2:89:7f:7c:58:92:c2:69:77:
05:64:62:5d:8d:b0:d3:36:e2:a4:2f:7d:d8:ce:bb:6e:61:5d:
c7:af:12:8d:4e:77:1e:f6:dd:e8:b3:79:ed:4d:26:92:60:84:
2c:0b:70:4a:fd:c4:81:21:e5:67:fd:02:6d:4c:d3:5b:9d:81:
1c:3a:35:4e:da:de:45:5e:f1:70:f9:43:75:96:a9:ca:8f:cb:
f7:83:ab:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org