Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE2DE7DCE74311EEAA355FAE775412E6.roa
File: DE2DE7DCE74311EEAA355FAE775412E6.roa (raw, json)
Hash identifier: BSUPNKaOedxwudgYe6Sp3odsiPUWQ02DgRVKv1Bynak=
Subject key identifier: 0A:C7:BD:39:57:AA:87:89:BC:60:89:3A:00:FC:95:1F:A6:E9:EF:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE2DE7DCE74311EEAA355FAE775412E6.roa
Signing time: Thu 21 Mar 2024 05:28:37 +0000
ROA not before: Thu 21 Mar 2024 05:28:34 +0000
ROA not after: Tue 23 Apr 2024 05:28:34 +0000
asID: 44559
IP address blocks: 154.221.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41970 (0xa3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:28:34 2024 GMT
Not After : Apr 23 05:28:34 2024 GMT
Subject: CN=65fbc585-9b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:2f:ea:47:1b:ae:8c:e2:83:7a:3c:af:8d:
da:82:83:05:b0:79:41:55:52:4c:c1:9a:79:5e:83:
5e:0e:fa:80:a4:f8:b4:0b:81:ee:a7:83:08:33:e0:
d9:ee:67:f3:62:a8:a9:18:f1:06:6d:6e:24:32:11:
2e:1d:0b:eb:0c:56:48:01:79:4a:43:3f:16:5e:ec:
c0:96:33:c6:cf:d6:78:18:6b:de:4b:1b:26:8c:3b:
ae:d3:fd:6a:e2:8f:f5:c2:62:4d:3d:c6:84:24:67:
90:00:26:22:19:03:69:8f:80:6b:a9:48:6a:6e:62:
e1:eb:44:ea:da:73:69:09:6b:e1:c8:5f:6c:97:b0:
8c:66:b5:ce:4a:df:47:84:31:d3:7c:97:63:9f:69:
e4:c0:6f:82:a0:99:5a:25:e7:df:72:f3:06:07:97:
3b:b8:34:64:e1:f8:60:2f:49:77:c7:17:65:70:44:
8e:05:a2:ea:f0:0f:6f:5e:f8:65:f7:94:72:57:c8:
0d:b2:93:e4:24:7d:03:ae:04:da:8b:20:2a:d6:1b:
98:9b:b1:54:6e:fe:a8:1f:bd:b2:d7:e1:41:c4:d9:
dd:ea:b2:b1:3c:e5:aa:a5:09:39:6f:31:57:e1:39:
82:9a:4b:01:77:12:63:eb:86:24:dd:46:16:a0:63:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:BD:39:57:AA:87:89:BC:60:89:3A:00:FC:95:1F:A6:E9:EF:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE2DE7DCE74311EEAA355FAE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:51:94:07:5b:ef:cb:38:4a:3a:b7:e8:85:4f:99:40:e1:00:
a9:3d:96:03:1f:1c:43:72:f6:a6:e4:7b:24:80:99:87:20:21:
b2:47:ed:cd:7c:22:ab:37:f4:14:dc:00:b0:b2:36:c0:ed:73:
d7:b7:53:5d:98:af:43:03:76:e5:5c:93:d0:c8:76:34:44:1d:
b3:03:3b:52:35:1f:e2:48:11:04:7d:00:36:25:01:2b:10:da:
b0:12:42:f7:ec:1b:30:93:4d:6c:dc:7e:16:df:d5:03:2b:fc:
44:d6:b8:bd:d5:98:5b:61:1b:41:04:38:e7:68:bd:d0:40:ee:
90:e0:91:4d:b4:e3:93:7e:e4:68:6a:af:25:3b:48:f0:54:a2:
36:ca:12:09:bd:1f:dd:81:69:10:08:c7:f9:a2:3d:a3:f2:96:
6e:2f:df:85:1e:99:fc:9a:fc:7b:3c:23:07:aa:44:6c:27:a6:
62:86:99:6c:d3:c5:4f:e4:9b:91:fb:70:a4:7f:b5:7a:21:5a:
c7:61:a5:af:82:cb:43:c3:db:8d:03:03:4c:b8:8f:0f:a0:cb:
07:96:1c:e7:90:68:c5:07:ee:b3:69:1e:83:26:74:b1:56:2a:
f0:7d:bb:26:6f:d1:38:c4:79:01:0d:83:3a:8e:40:57:3d:57:
58:94:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org