Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A78D8554E78711EE9BEB7AC0775412E6.roa
File: A78D8554E78711EE9BEB7AC0775412E6.roa (raw, json)
Hash identifier: 3hFbw6HhEBcCLH/qxpwk6PU/G8620MspziMNfzFnm9g=
Subject key identifier: 33:C3:7E:F2:C0:81:F3:4E:59:25:0C:93:57:96:84:DF:F0:E2:06:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A78D8554E78711EE9BEB7AC0775412E6.roa
Signing time: Thu 21 Mar 2024 13:33:51 +0000
ROA not before: Thu 21 Mar 2024 13:33:45 +0000
ROA not after: Tue 23 Apr 2024 13:33:45 +0000
asID: 44559
IP address blocks: 154.210.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42421 (0xa5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 13:33:45 2024 GMT
Not After : Apr 23 13:33:45 2024 GMT
Subject: CN=65fc373f-d604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:86:83:7c:23:51:34:8d:ce:ba:6b:e2:37:
29:10:db:6e:88:81:c9:dc:af:f5:0d:3e:6a:4e:98:
2d:5e:2f:24:52:c8:93:20:d2:04:a9:48:f5:1c:32:
ca:ce:d0:01:36:93:61:01:47:ca:72:e6:fa:f1:2d:
ce:f2:2f:4e:bb:6b:93:59:4e:51:1c:ba:74:7d:21:
03:9e:95:3a:74:78:b9:8e:e5:2c:40:b5:e6:35:d1:
2b:80:22:0f:2e:c3:89:4f:73:71:85:96:69:c1:08:
db:8f:37:f5:1d:d0:0f:20:d6:03:2d:e1:48:a6:b1:
37:dc:5d:b1:bd:1f:38:72:58:f0:4b:1e:fd:58:70:
94:25:7f:06:d4:58:42:48:e0:9c:e0:e1:06:b1:a4:
dc:21:d9:66:1b:3c:98:1c:6d:08:79:57:43:91:b4:
c4:85:8e:c5:e8:01:a5:82:bb:93:c2:19:c6:ff:43:
b1:de:97:71:85:69:db:7a:62:37:fc:a7:73:f3:cf:
e0:fe:b9:2d:66:32:31:f5:5a:61:80:6f:89:21:ca:
57:84:fe:a9:11:01:94:89:c9:3a:e1:2a:39:b7:4e:
90:ad:84:e1:b5:73:1e:b8:af:d9:b5:bd:65:99:c8:
15:86:b2:52:a4:8a:98:75:44:56:f6:e4:c4:37:ce:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:7E:F2:C0:81:F3:4E:59:25:0C:93:57:96:84:DF:F0:E2:06:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A78D8554E78711EE9BEB7AC0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.66.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:37:ee:22:1f:e6:e3:ec:cc:75:de:83:d4:0b:d2:65:31:7c:
a3:31:38:a3:f6:06:67:da:33:39:d0:85:3b:65:14:b6:17:98:
6a:55:51:fb:ee:58:48:c2:f0:cf:e2:83:f2:f3:49:a7:bc:ff:
8d:92:9c:69:de:32:86:c5:3e:2f:08:e1:e9:68:bb:7b:02:84:
cc:1a:3f:b7:ac:08:c2:0c:8f:d4:76:c6:c1:e9:ed:af:18:39:
5f:c4:af:20:83:74:84:99:77:a8:a8:be:8c:65:d7:75:91:d2:
52:01:61:f8:15:a0:57:2c:b8:cc:55:c8:29:2e:0a:67:cf:a4:
cf:ca:2a:c0:b6:83:89:59:66:a1:93:89:24:47:43:f2:ee:c0:
a5:7d:55:d1:88:9a:52:05:6e:70:ca:f1:e6:c4:30:1a:eb:85:
be:8d:5e:d0:4d:ba:cf:54:aa:4d:7d:ad:aa:2c:3c:4d:45:9c:
b5:c1:53:5a:e5:e7:8d:de:40:77:dd:d6:4c:27:38:14:d8:c5:
63:f2:e5:a5:83:a5:94:cd:fc:2b:a4:03:66:a6:b7:f7:5e:d5:
d2:b4:ad:36:b8:a0:b9:26:5b:bf:ad:a6:c1:d0:d2:71:7d:40:
dc:d5:0b:79:42:7f:9b:3b:fc:b3:a7:a3:5a:64:fe:65:45:51:
5d:92:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org