Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3BC75C4E73F11EE88A67290775412E6.roa
File: D3BC75C4E73F11EE88A67290775412E6.roa (raw, json)
Hash identifier: /C4ronaUrANsrX2KSS3w9RZMPckH32NxkPmoGA0CQks=
Subject key identifier: CA:43:DC:D3:A2:D4:A9:D9:54:35:8A:50:A9:E0:03:F9:3C:C7:0B:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3BC75C4E73F11EE88A67290775412E6.roa
Signing time: Thu 21 Mar 2024 04:59:42 +0000
ROA not before: Thu 21 Mar 2024 04:59:38 +0000
ROA not after: Tue 23 Apr 2024 04:59:38 +0000
asID: 44559
IP address blocks: 154.221.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41930 (0xa3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:59:38 2024 GMT
Not After : Apr 23 04:59:38 2024 GMT
Subject: CN=65fbbebe-9a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:f0:ad:c3:fd:22:fd:d6:9f:ec:ff:b6:8b:
13:7e:ea:64:c9:22:97:cd:3d:f0:35:3b:fa:a3:cb:
aa:90:ba:14:f3:57:b0:66:c8:ad:6b:47:9f:3c:e9:
1e:e0:60:58:99:b6:56:98:1e:e9:32:7c:1f:8f:37:
33:b4:ca:03:12:2a:38:15:92:81:8a:09:19:98:49:
8f:70:94:da:f2:30:7d:bf:5e:2a:00:62:a8:31:6f:
2b:b6:a7:b3:44:85:f7:e2:81:47:36:60:ab:09:ff:
1c:f3:f9:0e:52:cd:c6:17:61:fe:9f:4a:0e:0e:db:
79:51:31:40:ec:32:0e:72:65:a4:5c:2d:15:24:38:
9b:9a:47:df:64:0d:95:0c:8f:61:e0:02:df:7b:c7:
72:5b:02:c3:ba:a8:49:5c:44:62:5b:14:e8:00:cd:
d8:2e:a9:dc:0d:14:8e:8c:5d:f5:08:84:66:d7:a6:
23:b7:3f:a3:84:19:08:45:1b:5b:9f:8f:5b:23:8f:
64:c1:53:41:08:7d:6e:14:58:c9:e8:1d:41:ad:92:
08:c3:dc:6f:54:f7:8f:4f:65:f8:bf:fe:1a:c9:c5:
cb:6a:99:fb:b6:6f:aa:1f:d4:82:fe:ee:3b:8a:74:
23:49:90:de:2e:fc:cd:46:3c:e1:f4:c6:dd:33:04:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:DC:D3:A2:D4:A9:D9:54:35:8A:50:A9:E0:03:F9:3C:C7:0B:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3BC75C4E73F11EE88A67290775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.212.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e0:ec:7e:f5:6f:bb:a1:eb:4f:c0:0f:d3:0a:a8:5e:89:aa:
b5:0e:de:4a:c7:3b:94:2f:ec:6e:aa:50:39:b4:fa:1c:3f:a4:
56:d4:6b:ee:5f:97:e7:a7:20:a7:d0:11:50:f9:40:e4:ee:98:
b8:ba:46:fc:42:de:bc:5e:80:2c:8e:ae:11:d7:13:a4:cd:20:
43:fd:c3:e2:fe:72:13:1b:e5:c6:7f:55:e1:82:8d:b0:df:a5:
94:d4:3d:9a:e7:1e:45:53:a1:58:0b:b1:b9:ea:3f:cd:d6:eb:
31:8c:38:a3:e6:1f:04:ce:4a:9b:61:b9:04:6b:c4:57:cf:82:
a7:90:1b:19:fd:f1:86:e6:0e:e7:a2:b4:37:4c:1d:42:d4:52:
8e:0e:51:1e:df:b8:65:40:dc:a1:89:ad:7a:3b:f2:9c:fc:70:
8e:bd:4a:8c:c8:59:9c:9d:70:61:9d:8e:55:35:ce:23:65:e5:
43:f4:4c:ab:35:44:e6:e7:34:0b:43:3c:3b:45:6a:6b:fa:0a:
86:e5:db:f4:d9:e3:4a:57:b0:75:e6:35:9f:bb:bb:78:2f:1a:
b6:f7:69:44:5c:94:37:8a:4a:63:2f:a9:b0:b4:f9:f0:59:9e:
00:19:c1:2a:a6:49:9c:89:f3:f7:b1:1e:97:fb:cf:2e:24:d8:
96:0e:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org