Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C9B046E74211EEA9A27DA6775412E6.roa
File: D9C9B046E74211EEA9A27DA6775412E6.roa (raw, json)
Hash identifier: 4DHgcrGHc1PyQ9aVIGZ0xec/IZJDzQCR9W3ERMcUEQQ=
Subject key identifier: FA:CB:80:8A:66:91:8D:B5:71:22:B7:8B:B4:62:7C:96:D3:60:9E:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C9B046E74211EEA9A27DA6775412E6.roa
Signing time: Thu 21 Mar 2024 05:21:20 +0000
ROA not before: Thu 21 Mar 2024 05:21:17 +0000
ROA not after: Tue 23 Apr 2024 05:21:17 +0000
asID: 44559
IP address blocks: 154.221.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41960 (0xa3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:21:17 2024 GMT
Not After : Apr 23 05:21:17 2024 GMT
Subject: CN=65fbc3d0-d26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a4:b2:de:89:48:cd:77:59:c6:ee:cf:6c:9c:
c1:37:78:13:de:4c:9d:fe:93:1b:2d:19:7e:7a:ce:
87:45:4c:3d:48:96:1c:de:d2:03:4a:18:cc:a1:24:
a8:10:50:f7:0d:83:41:a5:6c:a9:26:53:6e:d5:76:
8b:aa:1d:e3:b6:8d:69:e8:72:aa:63:bd:58:1e:67:
bd:20:a7:4e:bf:5d:fb:6e:24:c6:9c:64:c3:ab:c6:
92:5c:82:2c:fd:00:c7:d4:f3:0e:f5:e1:67:39:1c:
f1:b3:4c:dd:f8:11:90:34:ac:1f:8a:c9:c8:01:ec:
a7:8f:72:97:e5:f2:3f:64:1c:49:5a:43:8c:24:ae:
73:f9:56:6c:13:0e:cf:65:b9:64:c8:ef:69:dc:0c:
d9:e9:f8:98:93:67:9f:b3:34:bd:58:9e:67:45:d2:
d8:1e:c3:6b:67:a2:02:59:64:fd:be:06:58:a8:bf:
19:27:df:9f:54:d7:df:01:b3:14:eb:4b:37:22:78:
fd:34:a0:f8:7a:1d:22:2d:50:2d:a6:87:b6:19:78:
76:3f:ea:72:cd:04:08:79:70:c3:2b:a1:50:ee:c8:
3a:70:fe:b3:6b:93:cf:4b:58:4d:26:ba:0f:d0:8c:
37:32:c2:8e:cd:4d:9c:19:75:88:74:f4:e2:29:6f:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:80:8A:66:91:8D:B5:71:22:B7:8B:B4:62:7C:96:D3:60:9E:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C9B046E74211EEA9A27DA6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.197.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d7:b1:cc:37:20:89:e5:68:16:b2:f6:df:f3:81:a6:66:6d:
8f:44:b9:ab:e6:1f:74:a2:1a:e3:98:44:86:77:7b:84:1c:3d:
82:e2:85:39:37:a6:b6:58:a1:25:8b:d1:4c:d7:a6:11:97:93:
02:c8:7d:49:cb:97:a1:f4:3d:01:7a:be:7f:7d:0c:04:03:55:
5b:5e:ff:75:d2:4e:c3:b6:90:0b:16:60:3f:9c:4c:63:86:65:
85:62:4d:9b:f3:6d:a4:0d:98:dd:43:a6:13:a2:76:ad:fd:9a:
e7:34:03:06:91:7d:cf:1d:4c:d9:ad:a3:c7:cc:30:17:24:2f:
6d:70:85:a2:c5:9b:31:39:52:06:65:06:ed:29:7e:bd:0d:3e:
44:11:ca:6e:53:ab:26:6f:41:ca:8f:99:26:42:c0:27:51:e7:
b8:ce:a3:9a:8c:5d:6c:11:96:ab:76:24:86:cf:74:9a:0f:9d:
bd:ec:04:74:36:ee:97:72:a9:99:e0:e3:a8:d4:ea:05:cf:9f:
ab:c3:dd:81:90:59:21:5f:b9:0f:57:11:ac:36:2d:09:c9:8b:
76:27:bb:39:08:09:37:c3:07:05:05:bf:22:c2:f1:9e:26:a2:
55:42:58:21:3d:1a:8c:43:c4:0d:17:79:cd:98:94:e9:a7:2d:
74:59:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org