Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9EB598E77F11EEAEA47480775412E6.roa
File: BB9EB598E77F11EEAEA47480775412E6.roa (raw, json)
Hash identifier: ytm6QH3IM5cnBE6WnjlkkOcKAWBF46Jfcyj+AsmT4Gk=
Subject key identifier: 31:7C:F4:74:BD:37:45:E9:21:B5:E1:01:73:D6:24:B7:A1:6B:3F:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A563
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9EB598E77F11EEAEA47480775412E6.roa
Signing time: Thu 21 Mar 2024 12:37:09 +0000
ROA not before: Thu 21 Mar 2024 12:37:06 +0000
ROA not after: Tue 23 Apr 2024 12:37:06 +0000
asID: 44559
IP address blocks: 154.210.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42339 (0xa563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:37:06 2024 GMT
Not After : Apr 23 12:37:06 2024 GMT
Subject: CN=65fc29f5-b6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:f8:01:a6:ae:e7:b2:28:38:30:0b:eb:df:
bc:50:ad:e8:d1:01:6e:49:54:a6:45:55:db:80:3b:
16:aa:c7:32:c9:c0:a9:8b:58:53:73:a4:64:1d:f3:
30:a6:ee:75:14:74:42:be:d3:2f:c5:47:52:b6:ba:
7d:e9:ab:e9:74:5c:da:0d:fa:c7:a9:5e:6b:db:0c:
07:3b:f3:44:4c:50:f1:f2:35:18:fc:d4:d9:1b:10:
b8:d8:f1:fd:9d:73:51:1e:06:b7:2d:40:73:39:20:
bd:78:f8:4c:1e:6d:b9:e0:42:e7:bd:9b:2a:cd:46:
da:de:2e:09:2d:d3:9d:04:a6:c2:ce:27:d3:8a:64:
6b:8d:19:c5:cd:9a:71:50:e7:19:7d:40:00:8e:da:
b3:6a:b9:39:4a:d5:1d:ea:eb:68:9b:d8:35:90:a8:
73:17:3e:bd:51:be:55:de:71:28:43:0b:a3:b1:3e:
97:80:26:56:da:01:7a:9d:62:d8:9b:d2:3d:b2:86:
20:96:59:5f:15:ae:29:70:4d:70:26:74:0b:30:f0:
1a:e6:7c:70:fc:49:ef:3e:19:48:47:ae:56:c7:04:
1f:f1:27:b5:fe:3f:d1:e3:89:5c:6e:9a:65:06:8b:
da:7b:ce:24:10:e7:a0:c7:87:7e:96:b3:3e:91:e3:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:F4:74:BD:37:45:E9:21:B5:E1:01:73:D6:24:B7:A1:6B:3F:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9EB598E77F11EEAEA47480775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.107.0/24
Signature Algorithm: sha256WithRSAEncryption
33:72:ec:04:e8:7d:0a:4d:24:be:15:05:f4:a6:f7:62:de:67:
2a:67:e6:98:a4:cb:da:58:c6:56:fb:ee:4b:46:e2:14:af:8a:
2a:2d:8c:0d:28:b8:91:32:61:c0:21:19:98:c8:1c:67:2e:27:
48:34:82:5e:99:c6:9c:5c:10:f0:7e:99:53:4b:ce:bb:14:74:
7e:19:6f:3b:29:27:08:1e:7a:66:79:29:c9:38:d7:22:df:40:
52:79:a6:08:61:ee:e6:e9:b5:b9:8f:60:59:8d:4d:0a:7b:8d:
86:5b:d3:23:d2:42:a7:79:4f:0f:3a:6e:fa:06:a9:d5:9d:41:
98:c3:dd:5d:19:21:66:40:66:41:87:4c:9b:a7:21:3b:7a:14:
db:31:d7:0b:37:2b:36:a8:9c:1b:ed:ee:67:cc:ee:95:32:f9:
11:2f:e3:9e:cb:ce:42:c3:68:30:fa:d5:d6:1f:53:91:aa:ef:
9c:99:de:35:de:40:30:ff:18:fa:e8:22:07:e8:e0:e4:f3:c0:
0f:f4:a4:a4:36:1f:7e:54:9d:b3:40:ff:e1:6f:3d:07:b3:e0:
75:b6:52:ad:7d:08:9a:55:14:df:9f:74:9e:54:8c:0f:f9:66:
d1:88:d4:f4:1a:85:89:41:3f:13:68:62:ab:a8:5d:07:5a:86:
59:a3:69:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org