Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D21DB2E74E11EE980D4684775412E6.roa
File: B4D21DB2E74E11EE980D4684775412E6.roa (raw, json)
Hash identifier: lQoMOT7mudRMqk5xEXwVHgHZsrIiHFqWk4uh+5iCzBs=
Subject key identifier: 19:BC:73:F2:23:BB:8C:32:04:CD:52:D6:41:A3:28:FC:0E:EF:A4:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A459
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D21DB2E74E11EE980D4684775412E6.roa
Signing time: Thu 21 Mar 2024 06:46:12 +0000
ROA not before: Thu 21 Mar 2024 06:46:09 +0000
ROA not after: Tue 23 Apr 2024 06:46:09 +0000
asID: 44559
IP address blocks: 154.220.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42073 (0xa459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:46:09 2024 GMT
Not After : Apr 23 06:46:09 2024 GMT
Subject: CN=65fbd7b4-e979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:ee:88:d6:66:f0:90:68:9d:01:6f:35:64:
4e:30:44:88:75:ac:64:bd:2f:2d:6a:db:4f:d8:b1:
ab:04:bc:1d:4e:17:b0:9d:77:ca:96:93:19:c8:21:
cd:05:c0:a2:bb:3f:b9:08:64:6c:ba:cb:c6:2f:f6:
fc:d3:c8:a0:f9:78:a8:d5:97:4b:da:19:06:45:f0:
40:a4:09:59:c9:0f:7e:5c:38:42:94:39:b0:6d:cb:
8f:0f:b3:6a:75:95:05:59:d2:7c:b7:f9:f1:f9:41:
26:29:bd:84:c7:66:32:1d:1f:83:59:fc:96:0f:1c:
4a:00:aa:20:71:e5:6a:79:de:6e:4c:ed:0c:51:5e:
80:dc:25:75:ca:91:f3:a9:83:9d:95:66:e7:ea:8a:
2e:69:7b:f5:45:36:e2:1c:96:77:0c:5b:5b:89:3a:
5b:93:88:18:a0:68:31:8d:d1:b3:9d:fb:8c:9f:1c:
6b:09:c8:13:1d:94:bb:e3:21:90:ef:17:17:22:66:
3c:26:7a:c0:ab:bb:2f:2f:d9:65:b6:a8:7f:46:19:
54:53:56:46:90:3c:ee:c3:9f:61:09:9d:41:2c:ae:
ce:c5:9f:c5:65:8d:5c:7e:0d:cd:6a:1a:10:d1:43:
63:aa:d5:6c:dd:04:98:f3:d8:e3:ec:77:f5:49:cb:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BC:73:F2:23:BB:8C:32:04:CD:52:D6:41:A3:28:FC:0E:EF:A4:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D21DB2E74E11EE980D4684775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.140.0/24
Signature Algorithm: sha256WithRSAEncryption
79:dd:43:7d:7b:a5:c5:e1:8b:ab:8e:a8:ba:a1:59:c6:e9:f8:
ae:6e:87:91:33:1c:c9:ef:97:e8:75:2a:e7:29:a9:ab:03:89:
bc:fa:97:ee:ce:02:c9:82:dd:b8:ba:09:41:e7:0e:98:08:d8:
e5:b7:8d:e2:dd:0e:83:35:2c:c3:92:59:2d:f5:43:53:8b:3b:
a6:56:ab:a4:64:3c:2f:fe:ce:78:23:be:68:3c:a7:d1:c7:b5:
9a:c9:24:7f:64:7c:fd:72:ec:83:42:24:5b:cf:ea:67:e6:f3:
a4:ec:1e:9f:db:b1:91:7d:76:fb:c6:8a:f1:27:3c:f6:f2:d5:
db:30:ab:58:25:c6:c3:18:73:92:8e:b9:9d:35:ab:20:be:72:
83:2e:e3:f8:b7:5d:fa:23:63:18:01:bc:bd:a5:cb:4a:05:5b:
cb:92:b3:ec:a2:9f:6f:44:ce:cf:89:a1:94:8c:42:78:b6:0a:
47:5a:70:ca:c8:74:af:e1:a5:e8:69:7a:d3:bd:f3:a7:de:14:
0e:27:ee:ef:7f:b4:e8:08:f0:c1:26:57:8d:0e:44:18:7f:03:
1f:d4:c1:c0:4a:40:a4:04:b0:a7:f0:c8:21:ba:ee:45:cf:11:
6f:e4:31:b3:e6:8e:53:a3:40:a1:76:30:58:10:cf:96:66:e2:
d0:98:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org