Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB863C8CE73611EEBE6CF8C7775412E6.roa
File: BB863C8CE73611EEBE6CF8C7775412E6.roa (raw, json)
Hash identifier: SfgCKrbfTg4hYkB++QqnNrgzfwI2hDE6XDLRAKfdcTQ=
Subject key identifier: 93:E5:B9:E9:FC:77:0B:FF:EB:D5:50:9D:C8:3E:EC:54:A9:F4:5C:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A36E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB863C8CE73611EEBE6CF8C7775412E6.roa
Signing time: Thu 21 Mar 2024 03:54:36 +0000
ROA not before: Thu 21 Mar 2024 03:54:32 +0000
ROA not after: Tue 23 Apr 2024 03:54:32 +0000
asID: 44559
IP address blocks: 154.207.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41838 (0xa36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:54:32 2024 GMT
Not After : Apr 23 03:54:32 2024 GMT
Subject: CN=65fbaf7b-e96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:9c:ac:fb:f6:db:da:d4:93:bd:07:89:4b:
71:74:87:a9:ff:9d:d3:78:7a:40:74:5e:6e:3f:18:
4c:3b:60:49:fd:98:27:cf:5f:6d:fd:45:1e:05:23:
34:ba:b9:f3:98:21:62:ea:95:26:82:ed:ca:c0:9a:
21:12:49:23:3f:a1:e6:11:eb:94:a7:a2:5e:51:be:
d1:2c:47:22:ec:85:cf:b5:bd:e9:9a:67:30:b4:b9:
43:18:59:41:32:38:db:8d:29:c0:ea:af:2e:51:cf:
74:93:2a:67:2b:ac:2b:b9:3c:66:f4:28:55:7a:dd:
3c:8c:2b:c3:2f:f3:5c:c3:d7:50:85:f3:78:a8:aa:
53:47:51:19:60:d5:73:ce:fa:5b:52:d1:71:26:3f:
3f:d4:de:1b:9c:88:3f:ad:ef:a5:53:6c:8d:d2:4a:
bb:53:dd:2c:2a:23:b2:64:41:f3:2f:fc:c8:18:3e:
ab:19:95:29:aa:e1:27:10:68:cf:79:d6:93:47:2c:
a4:aa:a3:c3:8f:e8:5f:c3:e1:7f:a3:24:74:2b:34:
6a:97:3f:b1:49:0a:8f:22:f2:37:8d:c6:01:25:a6:
f6:c1:3e:19:00:f8:25:31:00:47:b1:23:39:1b:8a:
9f:3f:4b:e3:e3:f0:44:1a:ce:b9:e6:71:75:2e:c2:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:B9:E9:FC:77:0B:FF:EB:D5:50:9D:C8:3E:EC:54:A9:F4:5C:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB863C8CE73611EEBE6CF8C7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.2.0/24
Signature Algorithm: sha256WithRSAEncryption
95:db:a0:7a:b5:cc:6c:de:51:5d:53:14:0e:be:ac:49:5a:d9:
b6:7e:12:fc:51:6b:0c:30:96:2f:1e:4a:55:9c:0b:bb:b5:ca:
f3:f2:02:33:d6:aa:8a:e0:be:c1:1e:82:0d:bc:80:b9:bc:c7:
01:4e:89:f6:90:26:03:34:32:09:e9:63:43:ae:91:46:c7:e4:
35:9c:75:7b:52:b9:8b:72:38:f1:a4:02:46:c6:16:c6:fd:3b:
1b:1d:a6:01:a3:a3:c0:00:58:fb:dc:6c:d4:4c:1f:7a:bb:cf:
c3:d4:31:03:ad:30:9f:0c:85:46:62:6f:bd:c9:1d:65:32:bd:
a0:7b:7f:7b:c2:39:94:94:4b:87:b8:f1:7e:19:e4:13:1f:95:
1e:4d:05:88:2b:74:a4:a5:e9:ae:c8:1f:61:47:00:a6:7a:8c:
df:23:08:6c:f2:12:b6:d6:25:33:e3:3d:93:df:90:fe:b5:78:
bf:32:dd:6e:b1:3a:1d:a7:03:dd:90:3f:a1:04:69:9d:c7:ac:
14:be:60:f7:99:f9:6b:10:98:3d:4b:0b:f5:97:89:48:68:31:
8a:de:31:4c:f5:08:59:15:dc:9e:3c:d3:f6:04:fb:87:a1:c8:
b5:89:c1:25:72:84:70:2b:46:1f:36:e0:0e:72:5f:f0:98:b0:
aa:22:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org