Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A907585AE73D11EEB12A847D775412E6.roa
File: A907585AE73D11EEB12A847D775412E6.roa (raw, json)
Hash identifier: LG2+0Xj8AoJd+NJxCkNXgfZgC5CaVzTq14ngi8Skv9o=
Subject key identifier: D6:02:43:80:93:7E:91:68:A0:A0:2B:4B:C4:9B:F3:C6:35:3B:C8:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A907585AE73D11EEB12A847D775412E6.roa
Signing time: Thu 21 Mar 2024 04:44:11 +0000
ROA not before: Thu 21 Mar 2024 04:44:08 +0000
ROA not after: Tue 23 Apr 2024 04:44:08 +0000
asID: 44559
IP address blocks: 154.221.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41908 (0xa3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:44:08 2024 GMT
Not After : Apr 23 04:44:08 2024 GMT
Subject: CN=65fbbb1b-1686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:72:d8:05:f9:60:e6:6b:b6:8c:a0:ed:d7:
79:15:5d:76:90:4e:ef:d9:13:54:0a:56:a8:c8:a6:
88:9d:c3:bc:07:b4:b7:2b:9b:35:9d:3f:b0:24:15:
cd:75:80:21:7f:8a:b1:8a:c2:1e:9a:f7:49:67:e8:
59:af:3c:a1:5e:87:93:31:ce:e2:54:14:bd:46:3f:
84:ba:bb:94:8d:d9:15:44:42:f4:28:24:57:5c:60:
90:c7:a4:c3:e8:bc:7e:81:72:6d:3a:5f:7c:04:10:
bb:4c:05:dd:02:6a:f8:a6:ba:95:7b:1c:a8:f8:6d:
ab:c6:9c:ab:70:11:52:d5:bc:fb:ec:dc:d1:7e:97:
a5:01:2e:1c:d5:b2:39:44:97:09:7d:58:8f:70:80:
a6:be:54:8b:0d:1b:e9:1c:8b:47:a0:ad:b1:57:56:
f4:c5:b6:b9:60:e3:4c:99:c6:b8:be:8a:b8:9f:f4:
d8:11:00:6a:28:17:a8:9d:ae:9f:38:09:8b:f9:04:
01:48:2e:42:5c:70:7f:a3:ce:82:63:54:65:17:6e:
aa:14:b2:6d:22:9a:f1:d1:a7:2e:37:1a:00:8e:77:
cb:f8:81:ed:f5:9e:31:4a:74:72:1c:1b:13:49:83:
df:cc:cc:39:aa:fb:5e:2e:82:72:63:10:50:63:7e:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:43:80:93:7E:91:68:A0:A0:2B:4B:C4:9B:F3:C6:35:3B:C8:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A907585AE73D11EEB12A847D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d5:71:01:dd:bb:1a:5f:ce:7c:14:d0:15:77:89:59:ca:c2:
13:7b:a0:cd:ff:6b:85:cb:2f:f5:2b:c5:b9:15:ee:70:f3:50:
01:e4:ff:d2:e4:60:f6:fb:4c:e8:70:35:73:ee:5a:e6:3d:a1:
a5:65:ee:4e:47:a4:fd:a8:ea:8f:40:76:1f:62:18:89:0b:d3:
96:44:70:b5:8f:3e:2c:e9:7a:a9:a9:ac:c7:80:4b:d3:ee:a0:
b7:d9:87:78:b8:bd:fa:17:d8:39:ad:6f:a1:f5:c2:68:a0:ef:
8e:03:59:5d:a0:2c:3b:c2:38:9a:d3:2e:4e:69:35:b4:e3:e7:
61:f9:99:23:b8:e9:84:7c:71:30:b8:25:41:46:25:0c:65:7c:
6a:59:b0:e2:7f:af:64:19:80:a2:a4:32:08:62:39:96:11:2c:
1d:a9:b6:42:3c:92:f1:73:83:7f:0a:ab:bc:91:e3:34:d8:b6:
74:be:8e:49:3a:11:1d:74:50:40:d7:61:b1:97:08:84:d4:9e:
61:90:bc:7d:62:d9:23:66:42:f8:0f:cf:30:37:2d:4f:ed:34:
7b:e7:c3:52:a6:31:9e:2b:86:1a:d9:da:38:fc:92:bf:10:34:
14:8f:b5:3f:9d:5a:7e:9b:7a:a3:f0:c1:39:f8:26:8a:45:6c:
70:b0:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org