Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C8A698FD3D11EEB6542269017001B1.roa
File: B8C8A698FD3D11EEB6542269017001B1.roa (raw, json)
Hash identifier: FuPuCxmaPWbKt/6xL1bDL0LN7pd8Obyi/7F94dQhafI=
Subject key identifier: C3:F9:54:27:D3:83:DB:15:BF:E6:1D:27:8C:76:E6:EE:44:5B:72:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C8A698FD3D11EEB6542269017001B1.roa
Signing time: Thu 18 Apr 2024 04:40:03 +0000
ROA not before: Thu 18 Apr 2024 04:39:59 +0000
ROA not after: Fri 26 Apr 2024 04:39:59 +0000
asID: 39600
IP address blocks: 154.202.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 04:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44577 (0xae21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 04:39:59 2024 GMT
Not After : Apr 26 04:39:59 2024 GMT
Subject: CN=6620a423-b7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b2:bf:97:cb:a5:99:a1:5a:27:0d:76:79:a2:
b4:26:49:08:45:de:21:35:ea:11:a3:c4:84:66:7d:
4e:82:4b:5d:58:18:67:b7:aa:9f:88:a4:6e:4f:ff:
43:ab:fb:ec:93:03:cc:27:c1:ac:08:c9:35:76:9e:
12:de:d5:1d:a6:e2:97:7c:ec:90:01:e0:b3:6d:bc:
fc:0f:15:01:10:d6:39:f2:bf:5c:8e:0d:0c:cd:09:
fe:67:5b:e0:69:b6:d0:b8:a3:33:3b:c2:5c:b7:c4:
5b:c6:e3:cb:39:8e:c0:99:f5:28:6e:39:66:d5:d8:
1c:50:02:ad:be:17:5f:86:75:4c:49:75:1a:f7:3c:
00:03:78:5a:36:6e:39:65:20:51:d9:8c:6f:f3:e8:
9a:3a:3f:cb:35:8a:87:a0:14:e0:27:00:18:1e:9e:
0e:67:75:ae:84:41:c9:d6:f1:71:54:df:32:31:76:
de:de:2e:de:1b:d3:5c:ea:0e:45:6a:e7:33:7c:a5:
bb:aa:82:f8:d3:fb:e0:6b:d3:5d:15:f7:c5:67:31:
43:f8:84:86:53:e7:e1:af:ae:4c:42:1d:e2:fd:3c:
78:af:b6:e3:50:44:26:ac:1e:81:dd:56:50:f9:f9:
75:26:3b:33:1f:71:9a:6b:f6:8b:e7:64:26:11:c8:
06:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:54:27:D3:83:DB:15:BF:E6:1D:27:8C:76:E6:EE:44:5B:72:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C8A698FD3D11EEB6542269017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.72.0/21
Signature Algorithm: sha256WithRSAEncryption
03:67:e7:a8:14:24:21:fb:2e:0e:1b:6e:b1:dc:2f:5c:84:7c:
86:0d:2a:ea:b1:bf:88:0b:86:dd:02:2e:86:f4:c0:a8:d0:c0:
ff:b0:66:ac:01:a3:8e:db:cd:03:76:1a:cd:7b:53:7b:c1:5d:
9f:af:81:96:d5:3a:07:ae:29:8f:6d:78:5f:d6:21:52:3c:c1:
cf:88:9e:e4:36:90:cb:e8:09:47:db:db:3b:a6:24:46:20:7e:
10:52:04:02:1c:b7:b2:d7:a8:9f:99:95:c3:67:8f:77:48:a6:
f4:95:e9:54:bc:3c:b5:af:df:0d:8b:d1:d0:dc:e2:14:fe:ba:
df:54:d2:b2:df:29:63:30:ad:68:98:5a:32:d2:45:94:dd:4f:
0a:34:69:8f:b6:f2:c8:41:38:b7:14:48:6f:2d:67:e4:c8:bc:
e8:30:30:aa:89:a5:78:18:46:db:07:08:4d:29:d9:b2:ae:e7:
d6:9c:9c:ca:fc:95:01:3e:21:f9:38:ee:4a:95:db:df:05:d1:
f6:f6:7c:58:a2:ad:3b:43:28:ad:42:b7:27:e6:1b:a6:8b:a3:
55:ec:3d:eb:bb:ed:0f:39:65:c1:16:4d:e5:a3:ab:3c:df:40:
41:57:4b:8c:0c:ed:c6:24:68:a7:99:f8:8e:90:b9:b0:4c:1a:
ff:8e:cd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:38 2024 by rpki-client on console-fra.rpki-client.org