Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8B686C2E73E11EE954B5F86775412E6.roa
File: A8B686C2E73E11EE954B5F86775412E6.roa (raw, json)
Hash identifier: 0q9kXa9HY1616aZfiabLLAaTVHVQAc8vNes0pI1Yd9M=
Subject key identifier: BC:5C:BF:0D:B8:3E:31:96:BA:85:99:13:A0:8A:BF:AA:D3:65:0C:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8B686C2E73E11EE954B5F86775412E6.roa
Signing time: Thu 21 Mar 2024 04:51:20 +0000
ROA not before: Thu 21 Mar 2024 04:51:17 +0000
ROA not after: Tue 23 Apr 2024 04:51:17 +0000
asID: 44559
IP address blocks: 154.221.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41918 (0xa3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:51:17 2024 GMT
Not After : Apr 23 04:51:17 2024 GMT
Subject: CN=65fbbcc8-8179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:04:94:c8:89:73:00:7c:e5:5b:e0:9f:98:
2d:bc:3d:23:c6:d7:28:4b:41:42:9b:9b:b9:01:a2:
a9:b3:69:44:67:0a:cb:7f:95:c7:e0:e0:82:4d:21:
d9:65:85:eb:e4:7c:3b:ab:89:77:a3:c2:7e:f6:b2:
8e:0c:9e:39:c8:dc:c9:e7:3e:9a:b9:b6:6b:f4:79:
24:23:20:80:77:0a:08:08:4b:f2:94:76:3f:e7:44:
cb:95:6b:c1:b1:4a:01:ab:94:45:76:69:b3:98:9f:
d5:a5:e0:38:9f:d7:b2:85:ef:6b:64:f7:7e:c9:d4:
f3:8b:47:ab:83:9f:53:6a:cd:ce:0b:de:42:c0:32:
34:02:7d:e4:ea:d1:d2:5d:57:d5:74:c0:55:7f:ac:
3f:77:98:dc:b7:47:0d:9c:e8:35:8e:0a:e6:bf:81:
0b:36:0b:93:9e:57:af:dc:e8:23:3f:02:9c:f2:b4:
6c:ce:77:26:69:db:ff:10:8e:b5:eb:2c:b7:e0:e1:
14:0c:65:41:0c:76:1d:38:44:88:a8:0e:9e:37:3e:
c8:1d:49:a1:a7:49:df:fa:f7:23:a2:b5:9f:86:a9:
37:c5:63:5c:c8:8a:cb:4b:89:6f:8a:71:f0:82:21:
7c:9b:88:f4:37:07:99:49:cc:9a:7f:33:fa:aa:2c:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:BF:0D:B8:3E:31:96:BA:85:99:13:A0:8A:BF:AA:D3:65:0C:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8B686C2E73E11EE954B5F86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.218.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8f:f3:e5:55:c7:0e:e9:a1:ca:71:19:41:a6:51:27:38:69:
18:4a:e1:9d:51:78:08:ed:ad:12:07:6a:69:3a:10:ec:87:5d:
50:85:40:06:27:2f:34:61:9c:75:9a:87:84:aa:d9:5d:91:9a:
41:b0:d4:5f:36:9a:31:19:f0:90:9c:ab:fc:24:ad:f2:cd:c1:
4a:9e:34:28:ff:75:d2:10:dc:0f:d4:dc:20:d6:97:3b:27:6f:
7d:bf:c2:64:3d:14:54:d5:fe:6b:f9:2f:b0:31:3d:8e:47:a3:
99:af:f7:6b:12:97:3e:0a:44:43:e7:b5:74:c0:a7:25:30:8d:
56:7b:6c:02:ba:9a:b6:09:31:83:15:c0:c0:d9:db:b3:ce:f8:
83:5a:4f:b8:e1:7c:f8:72:f8:3a:66:2b:17:1e:dd:05:bc:e9:
f3:90:ce:e5:82:1d:61:5c:2b:53:0e:af:b1:21:31:19:02:a0:
59:0e:a7:82:43:f1:86:73:e3:d4:12:75:e3:93:b8:ed:3c:79:
1f:7b:b0:bc:89:87:1a:c3:45:7e:15:cc:22:43:5d:bc:6a:1a:
4d:55:5e:f5:19:9b:19:94:f7:6c:06:15:07:86:26:03:a1:a7:
d9:f5:b0:88:2d:9e:1a:61:7c:d6:b2:7c:ba:c6:38:41:17:45:
af:a7:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org