Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB1C51CEE74A11EEBE4D9263775412E6.roa
File: AB1C51CEE74A11EEBE4D9263775412E6.roa (raw, json)
Hash identifier: U2TVsG0VkjpwfRC4YkTc+leC42PGk7NsIbw+N3Ae+xw=
Subject key identifier: 15:3D:8F:1A:E0:E7:37:84:5A:D4:A3:DC:38:A5:B4:31:55:07:F0:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A431
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB1C51CEE74A11EEBE4D9263775412E6.roa
Signing time: Thu 21 Mar 2024 06:17:18 +0000
ROA not before: Thu 21 Mar 2024 06:17:15 +0000
ROA not after: Tue 23 Apr 2024 06:17:15 +0000
asID: 44559
IP address blocks: 154.220.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42033 (0xa431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:17:15 2024 GMT
Not After : Apr 23 06:17:15 2024 GMT
Subject: CN=65fbd0ee-f2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:a0:97:78:f7:2e:ed:3d:2d:79:ab:d8:1a:
3a:d4:7a:07:f7:c3:df:77:be:c4:73:5a:e2:2c:07:
e5:2f:78:d7:6c:e7:41:b9:fe:72:93:a9:1f:54:c6:
2a:6c:7e:a3:ed:a2:d6:7f:eb:78:a2:70:44:89:b3:
ba:fe:dd:0e:02:e3:c6:ef:51:c1:ba:e1:da:69:a2:
e2:a2:69:ae:46:55:5c:78:f4:2e:d9:53:5e:ab:c7:
17:30:ce:59:f4:30:7c:a7:ad:08:c5:8a:17:fa:68:
71:aa:84:84:62:7b:d4:31:72:68:3f:78:61:f9:5f:
68:38:23:f0:18:92:0e:3b:e4:7c:8a:a3:27:a1:76:
f8:37:77:52:26:52:4b:75:0a:53:5d:4e:85:15:04:
b9:ba:04:47:5d:a4:7b:23:82:60:44:c5:46:79:3f:
0e:b5:d7:b5:8f:30:5d:12:61:97:20:ab:b7:2c:97:
cd:0e:a4:9e:8f:b2:0c:68:d3:e1:03:ea:b5:e6:16:
a0:bd:2c:68:74:ca:fb:5d:05:2d:db:ac:b9:9d:b9:
38:03:aa:94:ad:03:87:78:fa:50:90:07:99:74:97:
5d:93:05:ca:72:ea:5d:2c:32:9e:6b:a9:e6:42:d3:
29:cf:fb:79:4d:01:2b:f8:f0:80:b2:b2:b8:bf:7c:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:8F:1A:E0:E7:37:84:5A:D4:A3:DC:38:A5:B4:31:55:07:F0:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB1C51CEE74A11EEBE4D9263775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.160.0/24
Signature Algorithm: sha256WithRSAEncryption
60:95:2c:1c:fe:1f:8c:de:d1:bc:5c:79:66:3a:43:d0:b3:d4:
ce:74:dc:6f:1b:5e:5a:0f:c7:18:e6:3a:01:89:79:49:b0:10:
e4:2a:fe:b8:b2:7d:dc:ac:00:c2:26:a5:3c:44:47:49:fa:8e:
d7:1c:cb:8f:41:6b:97:1d:3c:3d:11:9a:b2:ae:c7:1c:53:4a:
5f:df:fe:f9:e2:aa:f6:83:af:75:2d:82:28:51:ba:1c:3d:d4:
79:6b:69:a6:23:3b:e5:8a:bd:f4:1d:1f:0c:16:90:b7:86:32:
1b:d6:e7:7d:52:0f:39:2f:04:40:c3:21:56:44:06:5e:59:db:
8e:75:b7:94:45:5c:90:1a:62:24:cd:55:2e:5c:20:ea:e7:4a:
7b:ec:15:62:bb:a4:e7:71:e1:10:0a:73:6b:4d:ec:f4:31:ed:
33:26:89:2f:2b:a2:41:89:bf:b9:8b:87:b1:68:c0:3a:92:22:
0d:b3:59:40:2c:45:c9:55:e1:b8:03:67:5c:85:31:9b:4d:d2:
39:bc:95:1b:6a:0c:ec:ea:fc:49:a6:3a:31:d3:3c:22:7c:4c:
a3:b8:62:a3:3d:5c:d1:49:a9:3b:16:21:34:22:5f:ef:5b:5c:
44:b3:c0:46:26:82:c0:45:df:9b:41:a3:0a:d3:9c:4b:22:22:
6d:b1:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org