Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE65EE2E76511EEA89B22B7775412E6.roa
File: AEE65EE2E76511EEA89B22B7775412E6.roa (raw, json)
Hash identifier: lv8NV+KSPCe4cZQdtqc+7YhXKnL+SpaMJSANPAPV8O8=
Subject key identifier: 1C:A8:B8:B1:F9:9C:09:CA:EB:C5:F5:8A:85:5D:34:5D:95:F9:EE:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A511
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE65EE2E76511EEA89B22B7775412E6.roa
Signing time: Thu 21 Mar 2024 09:30:41 +0000
ROA not before: Thu 21 Mar 2024 09:30:37 +0000
ROA not after: Tue 23 Apr 2024 09:30:37 +0000
asID: 44559
IP address blocks: 154.222.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42257 (0xa511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:30:37 2024 GMT
Not After : Apr 23 09:30:37 2024 GMT
Subject: CN=65fbfe41-a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:dd:10:d8:97:a3:27:ba:c7:35:74:2b:42:
2b:2c:d8:ae:50:0c:fa:a8:1b:f5:fb:1a:8d:e4:6e:
21:9e:9b:f1:90:8b:68:c4:22:9b:cb:7f:e7:6f:25:
3e:b3:30:b2:88:12:e8:c2:b9:ba:25:f6:ce:dc:59:
29:05:ba:8a:d2:58:99:b6:96:0f:b0:0e:01:f9:fc:
f0:bf:2b:55:fc:0f:50:6f:6f:05:66:db:ec:ad:5d:
a1:36:7b:e0:e3:36:4e:d0:6e:1f:bb:11:07:0a:99:
00:db:3c:fa:81:9c:95:cb:57:5c:87:e0:50:7e:3a:
45:e9:80:b7:72:bb:a8:3b:0d:5d:1e:a4:c2:81:d9:
96:de:c7:21:03:b7:ad:27:9e:7e:59:7d:9c:0d:a2:
1a:fd:a3:45:bd:5a:4a:35:43:3d:fd:24:6e:2a:ef:
26:52:81:b8:a7:03:ae:46:a3:61:88:91:c4:85:fe:
f7:f4:14:eb:46:92:0b:93:ee:7e:76:5d:64:d3:c1:
7f:e9:13:89:04:2a:95:9f:dd:a4:99:94:5d:a7:a9:
90:95:2a:7c:c4:d1:f2:a8:bb:ae:a2:0b:28:75:ec:
ac:ef:bf:86:8e:e4:71:4a:43:86:c8:2f:69:92:b6:
90:f1:46:e5:97:4a:c5:6f:97:0f:eb:5b:7f:be:ce:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:B8:B1:F9:9C:09:CA:EB:C5:F5:8A:85:5D:34:5D:95:F9:EE:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE65EE2E76511EEA89B22B7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/24
Signature Algorithm: sha256WithRSAEncryption
53:04:5e:c2:11:83:6d:b8:c3:78:bf:90:3b:ba:90:f7:0b:71:
25:bd:64:c4:e1:30:7c:90:8f:d8:93:d5:8a:a3:2c:e4:34:55:
12:18:ce:7c:8c:02:a1:b6:d5:6f:2d:19:9f:d1:7d:bf:50:b9:
65:71:6c:20:f4:a8:e6:1f:10:db:7b:b3:ac:c5:a0:dc:6f:eb:
73:ba:b9:53:04:4e:6e:55:d9:99:9f:2c:ba:60:5b:bc:c2:1f:
96:97:75:cd:42:97:0f:65:8b:9b:a9:2b:4f:91:3d:aa:bd:55:
e6:c3:a2:95:a0:38:7d:15:66:e9:a7:69:b4:a8:40:2b:12:a8:
9a:7d:fc:95:46:34:44:56:3d:7c:00:2e:a6:c8:65:69:c8:67:
dd:54:d3:56:14:9e:d6:8c:b5:5b:be:68:b2:6e:e6:bb:c7:18:
4a:b5:46:8a:e2:26:a7:05:d7:25:78:09:11:b5:0f:65:b7:54:
0a:88:44:92:df:09:23:b9:c7:a5:98:e4:6b:4a:31:dc:64:0e:
ca:61:54:cf:d3:c1:3f:b0:9a:31:94:fc:92:0c:45:8d:27:8a:
74:e2:b1:3e:e3:a3:cf:90:cf:a8:ea:70:33:54:3c:de:fa:ae:
39:a6:8d:84:cb:dd:73:ff:eb:7c:f2:92:85:b5:55:f3:33:0a:
03:90:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org