Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A80FB000E74211EE836EECA5775412E6.roa
File: A80FB000E74211EE836EECA5775412E6.roa (raw, json)
Hash identifier: B9G/ETS7JELXyEQKUFc8+l8wfjXLCABC/aF5/2ijgBY=
Subject key identifier: B9:55:73:68:3F:DC:CD:72:46:81:FD:A2:33:36:E3:F4:EC:FD:4D:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A80FB000E74211EE836EECA5775412E6.roa
Signing time: Thu 21 Mar 2024 05:19:57 +0000
ROA not before: Thu 21 Mar 2024 05:19:54 +0000
ROA not after: Tue 23 Apr 2024 05:19:54 +0000
asID: 44559
IP address blocks: 154.221.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41958 (0xa3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:19:54 2024 GMT
Not After : Apr 23 05:19:54 2024 GMT
Subject: CN=65fbc37d-7409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b7:0c:a8:53:14:44:8b:95:fe:57:90:b4:7e:
bd:66:1b:86:0d:a6:09:ed:fb:a9:96:f1:04:5f:6e:
63:83:2d:38:b9:58:ca:62:78:be:b6:c2:cc:45:6e:
86:d4:f0:49:fd:a8:7e:81:ee:ec:8e:78:cc:ad:55:
77:69:0c:79:4f:24:59:b9:9c:6f:53:a8:62:b5:83:
85:ec:fe:a0:e6:46:c0:7b:96:a7:4b:29:c2:cd:9c:
e1:40:e5:d5:1b:3a:84:3f:f9:a1:59:2f:7e:d1:78:
73:78:59:9e:2a:01:b1:9c:53:b2:ee:bf:2b:34:5c:
6b:83:e9:e4:e3:dc:88:95:f9:28:b6:28:29:2a:26:
0e:7d:61:f5:81:16:3e:cc:0b:73:06:65:0d:22:e7:
99:7d:eb:45:9a:a3:d3:44:62:4b:34:58:c4:91:f9:
44:0a:ce:86:6a:ec:e7:f4:24:f8:fa:f3:33:0d:d5:
6c:15:81:d3:eb:ab:b1:21:99:92:61:e9:48:45:51:
30:c5:82:d7:f8:b2:92:5a:14:de:7e:8c:92:dc:8a:
13:25:3b:09:77:b4:bf:a3:14:cb:58:0d:15:37:77:
b9:9d:4d:c8:93:dc:c1:12:2d:68:e9:5d:b1:f6:8c:
36:1a:4f:19:cf:94:80:77:57:91:5c:e1:36:56:08:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:55:73:68:3F:DC:CD:72:46:81:FD:A2:33:36:E3:F4:EC:FD:4D:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A80FB000E74211EE836EECA5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.198.0/24
Signature Algorithm: sha256WithRSAEncryption
84:74:e2:92:ce:80:57:ea:98:ea:9c:c6:5a:b8:e3:25:70:d5:
92:62:17:c7:90:d6:19:59:c3:6b:62:d9:69:21:ed:17:2b:87:
66:1c:21:46:24:c3:9a:65:31:f7:7a:37:63:96:cf:a4:62:d7:
2f:94:c4:fd:cc:28:20:05:c6:e7:8d:ef:22:7f:0a:b7:dc:33:
39:50:d5:cd:66:21:24:64:4b:03:5f:c9:b1:a9:f2:69:5f:75:
9c:56:40:7d:4d:b1:ea:e0:e6:a8:43:d1:d4:69:43:87:e0:78:
07:f4:a8:2a:66:38:fa:9b:ee:e8:fe:68:c0:24:bb:19:13:99:
00:49:61:b3:89:09:45:a9:01:9c:f2:46:51:16:fa:5a:52:88:
f6:94:dd:c7:f5:bf:af:54:f2:a2:d1:56:da:d6:b8:72:55:77:
75:4b:62:ff:62:cf:b9:fb:07:54:d1:07:5b:6e:cd:b3:cd:c0:
16:e0:93:2d:28:3f:96:95:0e:53:25:a6:e6:57:9c:b4:ed:8d:
ba:d8:4c:30:3c:59:40:ca:a9:38:d1:ea:ee:10:a9:47:4f:da:
05:c2:76:66:cb:87:0c:a5:05:e7:fa:f3:07:9f:f5:23:d7:17:
e2:d5:53:a0:a9:e0:d5:ee:a2:49:ee:01:64:ed:46:a4:42:86:
cb:b7:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org