Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB540FCEE73311EE81B7ACB0775412E6.roa
File: DB540FCEE73311EE81B7ACB0775412E6.roa (raw, json)
Hash identifier: 6bHSaYh7o5ssThgK9x20GAxCRBs93o5nUYe3QgoGKuA=
Subject key identifier: 74:35:99:B7:23:E7:C8:63:6A:FE:A6:EF:59:4D:4B:F1:4F:62:0C:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A352
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB540FCEE73311EE81B7ACB0775412E6.roa
Signing time: Thu 21 Mar 2024 03:34:00 +0000
ROA not before: Thu 21 Mar 2024 03:33:57 +0000
ROA not after: Tue 23 Apr 2024 03:33:57 +0000
asID: 44559
IP address blocks: 154.207.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41810 (0xa352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:33:57 2024 GMT
Not After : Apr 23 03:33:57 2024 GMT
Subject: CN=65fbaaa8-f2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:c2:74:ae:7e:0f:1c:51:1e:1a:f0:35:ea:
62:1e:47:f6:f9:03:24:1e:4e:e3:df:b4:16:7c:79:
4c:e4:47:5e:3a:38:d3:80:e6:2c:56:2a:d2:7d:41:
46:04:41:76:a4:f3:81:dc:ad:e1:cb:80:cb:76:00:
bf:8a:eb:5c:ec:d7:d8:29:21:4a:4e:b1:82:84:43:
d2:30:95:32:cb:ee:9f:af:06:5a:26:3d:ef:ff:29:
9f:c2:0d:27:e8:bb:a9:af:67:52:c4:14:48:77:03:
91:55:f8:14:e0:ff:e9:d3:59:28:0f:5f:ac:4d:ec:
c1:03:83:c4:33:28:bf:15:18:a6:ee:16:d0:17:6b:
9a:a3:13:79:3a:67:b3:1d:35:17:b0:eb:91:5f:d4:
a0:c3:dc:4a:a0:93:7c:9a:ea:31:4e:5c:54:58:6b:
3f:c4:8a:a6:d9:95:ca:90:c5:05:db:ed:73:cc:52:
71:6c:a3:14:df:16:02:11:ba:4b:15:0c:ce:1d:64:
78:71:00:95:c3:6f:49:1e:b7:de:fd:08:86:8a:79:
99:1c:d8:fc:bd:75:87:38:42:b0:cc:0a:03:bb:c1:
72:b7:d9:39:72:e4:b6:dd:a9:15:96:6f:ad:16:3c:
e6:c9:ff:86:7d:88:af:57:aa:2a:ce:6e:71:b7:e8:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:35:99:B7:23:E7:C8:63:6A:FE:A6:EF:59:4D:4B:F1:4F:62:0C:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB540FCEE73311EE81B7ACB0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.16.0/24
Signature Algorithm: sha256WithRSAEncryption
16:68:ee:ed:70:e6:88:e8:d2:9c:f7:11:4c:71:53:ad:6a:2f:
62:50:72:fd:48:14:c7:59:fe:00:44:21:76:47:2e:91:3e:cc:
d8:25:c0:10:54:4c:44:00:71:36:fc:d0:93:03:ca:50:d8:e9:
b8:24:c9:35:37:74:8d:f0:8b:36:3e:e5:c9:5b:9e:db:18:01:
6d:c3:f5:a9:0f:9a:84:83:64:c7:52:89:0a:c9:a6:4b:7f:fa:
08:4a:75:46:95:e0:35:a9:a8:2d:93:cc:e2:9a:1c:64:a7:df:
c6:d9:fe:c3:7b:35:24:14:b6:7a:8d:55:80:e7:6a:c2:b5:3f:
b0:92:3b:41:df:69:de:95:74:f9:1b:48:32:80:99:fa:b2:f6:
a3:3a:af:fc:f0:f0:cb:e2:47:83:ad:fc:df:48:5c:7e:0b:fe:
62:a5:fe:d1:14:57:a0:d9:88:32:93:f7:d1:98:fe:17:9d:8e:
d3:e6:88:69:eb:ba:af:76:f2:99:34:22:fb:fd:92:f7:30:0d:
42:fa:e6:19:39:a0:81:58:1b:07:08:06:d7:af:c3:06:2d:23:
20:b6:39:0d:a8:20:ee:f6:7b:6e:04:c6:d6:0d:f2:a6:44:6d:
cf:61:30:a8:bb:ab:74:45:c4:03:49:48:60:03:73:01:65:69:
09:1b:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org