Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF92269CE74D11EEA0238D7D775412E6.roa
File: DF92269CE74D11EEA0238D7D775412E6.roa (raw, json)
Hash identifier: 6jMV7PKvdmNwH6dlzurocimxK2Mxsj05+4Tgy9RrCOA=
Subject key identifier: 4D:4D:C9:06:C2:0A:6B:C0:9B:CF:A6:3F:CA:77:B1:6A:BF:92:5F:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A451
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF92269CE74D11EEA0238D7D775412E6.roa
Signing time: Thu 21 Mar 2024 06:40:14 +0000
ROA not before: Thu 21 Mar 2024 06:40:11 +0000
ROA not after: Tue 23 Apr 2024 06:40:11 +0000
asID: 44559
IP address blocks: 154.220.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42065 (0xa451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:40:11 2024 GMT
Not After : Apr 23 06:40:11 2024 GMT
Subject: CN=65fbd64e-6cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:1f:ff:f9:0d:f9:2b:1d:23:85:fb:94:ea:
7c:b9:da:d1:ee:06:7d:b3:ed:0a:4e:e7:51:52:e1:
e8:e8:30:82:54:73:c1:64:8f:34:0f:06:ed:20:18:
f4:5c:d5:7a:e1:a8:d0:4d:81:a1:c7:6e:fd:6f:b3:
8c:17:54:5d:28:a9:f9:c3:4e:6b:54:9c:75:c9:aa:
e0:41:d2:52:bb:19:6e:f5:c7:15:ca:99:d2:b8:a8:
99:fe:aa:02:88:27:b8:d4:ab:eb:17:08:de:8e:88:
b5:31:0e:74:ee:0a:e1:fe:b1:75:b3:62:3f:d9:05:
9d:59:e0:e0:e7:53:e7:79:e5:49:1d:8a:c2:dc:8c:
ed:eb:ea:17:68:73:4c:7e:f6:97:93:20:d3:28:49:
97:12:b2:d1:8a:6c:79:36:5d:24:af:e9:be:39:92:
8c:b2:17:8e:58:b5:16:b2:64:be:b0:df:ea:40:03:
bb:75:6b:f5:00:79:f3:2a:a4:90:10:1f:fa:40:e7:
81:4f:b7:0a:68:23:d6:60:89:e4:82:54:72:38:20:
bb:16:8d:9a:a8:1d:f3:e2:2e:97:f2:4d:6b:2b:ce:
66:b5:ec:c0:f1:24:42:43:39:aa:e3:6d:71:c5:b2:
49:eb:45:ef:48:ed:0a:03:1b:4f:ae:8a:e7:3e:e4:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4D:C9:06:C2:0A:6B:C0:9B:CF:A6:3F:CA:77:B1:6A:BF:92:5F:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF92269CE74D11EEA0238D7D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.144.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:dc:ad:73:0c:6f:9a:14:d1:26:14:6d:5c:6e:fb:ba:a2:ed:
d5:4d:6a:94:72:79:e9:3e:27:61:24:4d:c8:0a:54:18:db:52:
70:eb:fe:3c:c4:63:17:9b:41:9b:b8:cc:d5:4e:de:15:02:10:
ea:e9:a3:ec:c1:49:90:7f:e2:e2:04:12:8f:8f:ff:af:76:b9:
9a:f6:d6:eb:cb:e9:28:4e:6f:17:38:7a:15:63:2b:5d:8a:c8:
6d:69:e4:5c:8c:f0:f4:e5:cc:7b:c6:6d:5a:12:3e:d7:7d:48:
13:1d:09:ed:aa:b8:8f:75:76:45:b0:34:50:19:90:b6:34:e2:
85:75:25:a0:08:45:84:9f:f6:7a:85:1b:eb:02:9e:d7:20:52:
61:e2:1a:01:56:83:7d:91:64:bf:6f:a3:1a:41:f3:fb:2b:69:
a2:80:78:5e:62:fe:5c:3c:28:21:28:a9:e8:ec:b4:7c:7b:4b:
cc:e1:17:80:26:99:50:d2:fc:84:1f:a8:e6:6a:c0:af:17:9c:
2d:49:35:83:ee:f4:74:da:7d:d2:53:ba:ae:d1:9d:be:c2:a0:
ed:96:82:fa:a7:10:db:53:38:f7:80:21:b3:16:6e:1c:60:cd:
5b:73:2f:1c:43:16:ee:60:e5:ea:ee:49:88:45:d2:cb:ee:1d:
5b:bf:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org