Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B109EE18E76611EEA83AF4BE775412E6.roa
File: B109EE18E76611EEA83AF4BE775412E6.roa (raw, json)
Hash identifier: IcmYGdGLyORYgTvy82DUnqoly+oUSU8bjQ+c16eQJSg=
Subject key identifier: D1:7C:7A:27:C2:80:D0:60:46:92:8C:3A:DD:38:87:EB:22:27:50:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A51B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B109EE18E76611EEA83AF4BE775412E6.roa
Signing time: Thu 21 Mar 2024 09:37:54 +0000
ROA not before: Thu 21 Mar 2024 09:37:51 +0000
ROA not after: Tue 23 Apr 2024 09:37:51 +0000
asID: 44559
IP address blocks: 154.208.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42267 (0xa51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:37:51 2024 GMT
Not After : Apr 23 09:37:51 2024 GMT
Subject: CN=65fbfff2-1b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:81:96:92:50:80:91:28:89:f5:e3:c1:00:
b8:e3:d6:f1:b2:c8:6c:d0:b7:e8:08:89:53:16:ac:
96:5f:67:77:87:70:39:b4:4a:a8:11:6a:ee:74:47:
bf:aa:bb:3e:46:49:f0:37:09:f8:56:58:01:ef:32:
f8:0c:8e:b2:a5:9a:ac:cd:3f:ec:c7:0e:ad:01:57:
06:96:fd:f7:a0:27:0c:3f:5d:d2:76:cf:85:7d:41:
ef:da:36:52:95:54:2c:54:34:1a:ac:bc:50:09:cf:
82:21:84:60:98:0a:24:b6:3b:5a:42:0e:d3:ee:e7:
a4:7a:9f:3f:06:2e:c7:cf:c9:83:2c:19:7c:1b:0d:
39:eb:a6:63:07:54:34:31:37:79:ea:3f:27:76:8a:
a7:43:bc:96:8b:2b:7a:5b:e5:e1:6f:2e:c1:8b:ba:
84:8f:eb:df:de:e7:4a:47:95:7b:22:e5:7d:ef:98:
c1:82:27:07:f2:d5:b0:ff:92:14:26:ba:8d:97:ef:
28:bb:3a:dc:cd:ee:0b:a2:d2:a3:2f:13:04:51:16:
2e:4e:d0:b3:a3:8a:ba:bd:a4:cb:6b:b2:cd:e6:17:
72:c7:8f:80:30:ab:f7:44:6a:5e:c2:93:1e:da:b1:
5f:9a:20:46:40:f8:9d:fc:b6:75:06:06:1b:bd:17:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:7A:27:C2:80:D0:60:46:92:8C:3A:DD:38:87:EB:22:27:50:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B109EE18E76611EEA83AF4BE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a1:de:79:f3:f9:ad:3f:20:d8:12:19:61:43:f8:5f:71:c3:
e3:7d:ef:eb:2a:5b:72:74:ae:72:08:b7:b0:03:fa:f0:cb:b0:
8d:4f:d9:20:3e:c1:e2:50:1b:d8:c8:0f:ca:12:e7:d4:f2:a9:
8b:0a:ea:a6:fa:9f:1b:30:60:fc:9d:64:70:79:64:0b:42:fc:
e0:10:ce:32:f0:bc:fe:25:40:ee:5b:ee:f8:85:fe:c5:2e:3f:
44:85:c5:c2:2d:0f:c0:22:9e:26:13:02:e4:b7:87:36:09:76:
75:75:55:6b:56:a7:07:07:4f:de:22:de:b9:3c:04:03:4a:aa:
5d:fe:24:8e:e7:f8:cc:8c:ad:43:bb:e2:ea:12:22:ae:95:9b:
a5:0a:a8:3a:00:8b:7f:90:34:61:c3:f3:68:0d:9d:8b:af:e3:
f2:75:d7:6f:77:d3:7a:29:8a:5a:8f:8d:78:0d:bb:21:6d:4e:
1b:22:e2:3c:a7:50:a0:93:ed:fe:07:42:9b:7a:34:1e:31:b2:
93:a9:af:99:60:d9:c1:82:ef:c1:83:15:c4:1a:04:e8:25:b3:
de:89:6e:e7:c4:33:a7:50:c3:5b:86:01:6a:06:d4:89:36:72:
db:34:05:7b:58:6a:a5:49:ec:0b:75:27:12:7b:85:f6:c9:18:
81:a2:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org