Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB6C3B78E73811EEB84FE457775412E6.roa
File: BB6C3B78E73811EEB84FE457775412E6.roa (raw, json)
Hash identifier: 1DFQUMssQCJq20y/fJGm0A3Q5ASj2d6ZWcpVy5Xdizs=
Subject key identifier: 90:52:5C:B6:C5:44:EC:E8:8D:2C:0B:92:4F:64:56:25:21:C8:FA:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A382
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB6C3B78E73811EEB84FE457775412E6.roa
Signing time: Thu 21 Mar 2024 04:08:54 +0000
ROA not before: Thu 21 Mar 2024 04:08:51 +0000
ROA not after: Tue 23 Apr 2024 04:08:51 +0000
asID: 44559
IP address blocks: 154.221.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41858 (0xa382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:08:51 2024 GMT
Not After : Apr 23 04:08:51 2024 GMT
Subject: CN=65fbb2d6-516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:de:be:61:7a:d8:49:d7:22:5f:76:82:2b:
80:18:8e:44:28:19:76:06:45:f6:c4:6e:d8:74:36:
fc:a5:5a:fd:4a:39:18:e3:11:42:c7:39:8f:c5:c7:
56:5f:a3:78:1e:e7:54:9f:3b:e1:91:5f:5a:33:59:
f4:09:aa:b4:d3:e7:14:42:06:9a:79:88:22:d8:85:
8c:a3:57:f7:32:76:89:91:6a:ea:d5:95:b7:42:8d:
4c:96:a8:bd:e8:76:00:7f:58:65:92:8b:be:bf:0a:
79:55:cb:11:c4:65:ca:db:54:44:a7:73:58:8d:38:
bc:10:ea:a8:4d:c2:28:ed:b7:5f:03:f6:ed:b3:d9:
e2:b1:79:89:8f:f8:8f:cc:16:70:17:33:f9:0f:cd:
89:96:08:81:57:fa:f5:64:58:97:a9:ba:75:ac:ef:
09:de:0f:d8:32:fb:86:25:dd:1d:af:69:65:bf:9d:
ab:87:a2:92:af:da:85:fe:3e:89:94:83:90:6e:74:
0c:59:be:b7:e5:50:43:ee:24:ff:10:74:1d:d5:dc:
15:ce:c7:ca:f5:1e:4d:5c:91:0a:81:b1:be:ab:fb:
aa:3d:31:fe:c0:59:2a:89:9e:c1:27:4c:f6:e7:19:
3c:1d:a0:28:67:b5:7b:ba:c8:3d:96:b7:4c:6e:f0:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:5C:B6:C5:44:EC:E8:8D:2C:0B:92:4F:64:56:25:21:C8:FA:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB6C3B78E73811EEB84FE457775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.248.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1a:04:58:3a:c4:ce:a6:bf:ba:84:74:e9:24:28:9f:5a:50:
14:ec:b5:74:bc:ad:fc:0b:54:f9:c0:91:c2:59:04:1d:7c:2f:
f1:ee:4a:91:c0:68:cc:67:60:fe:c4:e2:49:38:ff:1e:5b:1e:
ee:41:7a:41:1a:eb:23:eb:8e:ca:e8:4c:6c:b8:79:c0:72:38:
c1:6c:5f:07:4a:b4:75:1e:83:88:a5:3f:ef:d1:01:fb:c4:d0:
f3:1b:28:d5:0d:76:81:36:0c:62:db:62:93:b8:e4:e2:51:49:
57:24:96:ab:77:be:05:c8:7b:eb:61:81:0d:c1:6a:f4:27:b8:
e7:01:9b:fc:5f:b1:b6:83:18:fc:79:14:1b:13:48:f3:c3:09:
eb:1a:d5:6f:56:c1:64:2d:52:5d:fd:04:ca:64:d8:53:e9:2b:
65:a0:68:97:3a:d8:ef:5e:35:e1:c2:fa:0c:fa:bb:ad:c6:70:
25:35:f8:ab:f3:1e:0b:6c:aa:5f:56:32:50:89:d2:d3:89:a9:
f2:68:8b:be:b9:6e:e2:d3:fe:68:cb:da:cd:11:a1:90:4c:d5:
27:1e:53:7b:e4:17:58:9c:e3:f9:73:aa:3a:34:b4:25:ef:00:
52:6f:ef:74:7f:9d:10:83:52:52:c8:84:d4:21:44:ce:e4:00:
39:c8:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org