Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E43B4AE74C11EE83874A73775412E6.roa
File: A8E43B4AE74C11EE83874A73775412E6.roa (raw, json)
Hash identifier: hD1ODx/rVXtm1vOApJs1cHSxoKBITLegcP9XEYzSpaA=
Subject key identifier: A7:94:84:81:8B:F9:D1:71:F1:EB:B8:38:F7:9A:B3:0E:7D:BE:64:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A445
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E43B4AE74C11EE83874A73775412E6.roa
Signing time: Thu 21 Mar 2024 06:31:33 +0000
ROA not before: Thu 21 Mar 2024 06:31:30 +0000
ROA not after: Tue 23 Apr 2024 06:31:30 +0000
asID: 44559
IP address blocks: 154.220.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42053 (0xa445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:31:30 2024 GMT
Not After : Apr 23 06:31:30 2024 GMT
Subject: CN=65fbd445-284a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:75:dc:38:4c:89:08:a5:d9:59:da:9b:b3:
c0:a9:d2:e7:94:c5:a5:ac:8d:77:c0:cf:70:00:67:
34:9a:14:a6:aa:f6:63:0d:0d:cb:2b:1b:58:25:03:
3f:77:b5:2d:63:7b:8e:cd:03:60:55:e2:fa:ec:e3:
d3:94:5f:35:ab:74:49:eb:d0:c8:c4:af:42:01:1c:
4c:b3:39:13:03:6d:89:79:13:2f:c2:13:2c:6d:37:
52:cf:43:e4:0f:6f:3f:55:cb:15:c8:60:06:12:55:
6d:ff:09:08:45:42:ba:a3:48:38:aa:cb:34:f7:a9:
56:d2:09:b4:00:b2:19:d6:4b:1f:9d:14:1a:e0:61:
40:16:00:af:36:63:dd:26:7f:e0:db:af:56:75:a1:
5e:70:fe:a1:47:71:cf:e1:64:a6:de:2a:2c:e2:de:
d8:a7:ba:be:ad:40:8f:2d:ed:bd:88:a1:1d:a5:61:
a3:22:df:1c:e5:9c:73:4a:e7:a3:02:73:57:ae:db:
57:ae:5a:5f:32:84:23:fd:34:99:13:a0:89:05:cb:
1c:4f:e0:fe:84:92:49:26:b3:20:6e:1e:68:2a:08:
dd:d0:26:e6:db:2b:94:4a:70:27:17:4e:b9:10:f1:
c6:dd:ca:42:33:3d:43:6c:9c:9f:9b:d5:12:6b:9b:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:84:81:8B:F9:D1:71:F1:EB:B8:38:F7:9A:B3:0E:7D:BE:64:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E43B4AE74C11EE83874A73775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.150.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5f:2d:20:10:67:16:43:05:56:0e:04:d9:39:c2:c1:9f:6b:
74:15:eb:0d:78:40:83:15:1e:44:a9:9e:42:cc:f8:b1:6c:80:
a1:ff:1a:80:6f:c2:c7:05:11:7d:34:7a:5d:95:2a:c3:54:c1:
d3:6a:5d:84:c7:85:dc:84:9c:b1:91:ba:ea:02:71:e0:20:e7:
09:95:79:c2:ed:ab:06:6c:41:05:f9:8f:c3:4d:80:21:ea:7a:
4d:96:2c:51:48:08:6e:48:1b:35:63:8b:49:8d:44:27:c0:cd:
8e:19:07:c0:22:77:17:85:92:67:2c:a5:77:96:d4:59:3c:47:
99:93:fc:b3:06:8f:00:25:17:4d:31:d9:70:89:5c:7d:c3:e2:
ab:f9:ef:ef:72:27:b3:30:d5:f0:59:87:48:90:73:02:fb:28:
b7:bf:95:0f:9e:07:2f:63:d7:92:4e:92:68:09:a9:86:5d:66:
ff:33:54:7d:71:e3:8c:f0:75:4f:35:9d:27:9f:4c:9a:c5:5b:
db:42:14:21:4f:51:c6:d7:3f:61:b4:86:02:d7:7a:50:7e:0b:
3a:8c:f3:be:19:89:38:ae:cb:f0:78:09:47:a7:8f:6f:af:6c:
14:ec:4d:21:a4:66:de:3a:d3:5e:37:0c:51:b2:de:be:51:0b:
47:73:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org