Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB12CF68E75711EEA9517F4B775412E6.roa
File: DB12CF68E75711EEA9517F4B775412E6.roa (raw, json)
Hash identifier: BtuwaocUVygAnKh86fQJQKHdX+NG/2bue4TaDV/whQ0=
Subject key identifier: AE:CA:FC:04:19:E1:15:06:8A:3C:D3:F1:9C:7B:69:E1:E9:4E:55:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB12CF68E75711EEA9517F4B775412E6.roa
Signing time: Thu 21 Mar 2024 07:51:42 +0000
ROA not before: Thu 21 Mar 2024 07:51:38 +0000
ROA not after: Tue 23 Apr 2024 07:51:38 +0000
asID: 44559
IP address blocks: 154.211.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42163 (0xa4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:51:38 2024 GMT
Not After : Apr 23 07:51:38 2024 GMT
Subject: CN=65fbe70e-79d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:9e:99:b6:64:ad:a8:4c:73:72:76:ca:e4:
29:69:79:12:ef:cc:8a:dd:21:a5:f2:73:83:aa:2d:
71:f0:3a:3e:6b:d5:4e:6a:43:27:11:fa:89:ef:20:
fb:b6:0c:7e:e0:85:a4:43:32:14:4c:6b:7b:ea:1d:
50:dc:69:87:4d:0b:39:b1:49:87:7a:36:bc:02:bb:
2c:a4:8d:f9:c2:a9:2d:cf:ee:36:a6:ee:d6:d8:d4:
2c:11:a4:f6:22:17:e7:1a:4e:f5:8f:8b:92:2a:2b:
ca:03:29:bc:35:f8:22:f0:4a:28:4a:fd:e8:e8:b6:
d4:f8:c2:79:b9:6f:25:8b:d2:9b:fe:a3:64:97:8e:
57:b0:f4:ed:61:08:5b:02:fd:f6:6a:3a:04:45:1c:
a2:7e:99:2f:0f:f8:5c:a1:6c:cf:a2:8a:f0:1e:5f:
ee:3f:e5:11:3a:8e:09:38:31:7e:db:35:f4:48:f7:
30:b5:8a:a2:25:09:a5:17:3f:06:02:2e:e3:5e:ff:
97:3a:0f:16:df:b0:f8:ca:f4:2e:97:ab:7e:f1:c1:
c7:c0:71:72:fc:5c:a8:b8:eb:d6:06:78:2e:7a:0a:
c5:f3:30:b0:b4:0c:cc:98:fe:db:e7:fa:08:c6:ae:
da:54:09:8a:ae:c6:a4:35:d1:ae:fe:3f:ed:50:62:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CA:FC:04:19:E1:15:06:8A:3C:D3:F1:9C:7B:69:E1:E9:4E:55:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB12CF68E75711EEA9517F4B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:96:c5:a5:a5:88:fa:78:04:d3:5a:20:e9:76:a7:b3:4d:a9:
c1:74:16:b4:27:41:de:a8:06:71:a2:98:5a:e5:6a:f5:5a:15:
b3:2f:29:c7:2f:a1:4c:5a:9d:87:8d:d1:43:f8:4e:25:13:a9:
d2:cf:0c:ca:81:fc:44:68:0f:13:12:b4:9e:52:fb:4a:14:db:
13:e5:21:ec:78:7a:ab:c6:d1:c8:4d:2b:7f:50:5c:7b:6b:fb:
c8:28:81:14:f7:c0:5e:b3:e5:2d:0e:d0:ea:7e:b1:ac:c0:f3:
8e:64:10:63:80:21:b0:ce:e4:34:31:a7:43:dd:6c:06:e0:69:
24:3b:28:6c:e2:dd:38:64:d3:fd:e2:c9:95:78:55:a1:04:7d:
89:d8:c2:8e:b3:48:05:ec:b9:33:73:0f:f6:bf:c0:6d:64:1b:
50:2e:ef:77:9f:6d:fd:b2:02:74:12:62:bb:00:02:10:7c:09:
27:14:5d:1a:a6:57:c4:0a:15:05:3c:0c:9e:9f:aa:9e:07:41:
2c:54:af:e3:e5:53:45:a9:fa:cd:ef:0b:8f:94:b3:1a:ce:b0:
5e:24:15:c0:01:a0:69:aa:7e:e5:a2:3f:10:ab:97:90:8f:9f:
6a:49:71:2d:8b:1b:b0:32:fd:43:bd:f1:cb:10:0b:ae:86:a5:
8e:aa:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org