Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFEDE3A6E73911EE90C72B60775412E6.roa
File: DFEDE3A6E73911EE90C72B60775412E6.roa (raw, json)
Hash identifier: VLCP9Rdn6qzb7Si6pPyk7pXdJEnx2mazPsw1pj3cFls=
Subject key identifier: 8A:33:57:14:00:EE:AB:84:F0:C3:6C:46:0D:D0:33:F0:64:7C:3C:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A38E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFEDE3A6E73911EE90C72B60775412E6.roa
Signing time: Thu 21 Mar 2024 04:17:05 +0000
ROA not before: Thu 21 Mar 2024 04:17:02 +0000
ROA not after: Tue 23 Apr 2024 04:17:02 +0000
asID: 44559
IP address blocks: 154.221.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41870 (0xa38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:17:02 2024 GMT
Not After : Apr 23 04:17:02 2024 GMT
Subject: CN=65fbb4c1-456d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:29:82:7b:92:f8:a9:55:e4:b0:35:c2:bb:
10:c5:4b:e2:2a:1c:a6:42:91:6f:56:cc:db:fa:d5:
e9:5c:e9:52:b9:0f:fe:2c:a9:f2:7b:1b:33:51:7b:
82:2a:2c:0a:cf:5f:11:b3:43:07:6b:93:10:ea:d6:
ae:09:a0:59:aa:1a:04:8b:b6:5f:32:45:2c:23:88:
60:69:0d:5e:39:d2:af:59:ef:63:64:54:e8:ac:f8:
84:90:84:27:10:05:ae:6b:3a:19:9c:34:3c:9c:39:
8a:7e:94:94:a4:19:5a:bf:26:c9:af:1b:00:d3:fa:
a3:28:87:83:a7:02:79:db:83:43:33:28:eb:e8:e6:
03:9e:5c:d5:93:d1:11:a4:72:51:ea:b1:4e:04:2c:
0f:04:cd:4c:5b:2b:5f:ac:bd:a1:d6:3a:d8:d3:36:
cc:20:da:56:c2:40:d9:0a:54:33:4e:c3:d8:c9:de:
ef:c2:3f:ef:76:4c:98:d9:16:5a:07:fe:65:0f:8a:
a5:1b:e8:df:73:ad:84:c7:9b:63:2c:c9:7c:b8:65:
53:79:d1:ba:f8:63:fa:49:bd:71:40:2f:ba:34:53:
5d:01:0c:9c:8d:fe:8b:9d:f7:f9:0b:5e:90:d3:21:
71:99:a8:3b:12:fe:c8:4c:a1:6f:84:b1:03:6d:af:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:57:14:00:EE:AB:84:F0:C3:6C:46:0D:D0:33:F0:64:7C:3C:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFEDE3A6E73911EE90C72B60775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.242.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a3:77:4e:29:ea:e0:bd:30:34:f1:d6:13:da:1b:db:73:86:
9b:44:45:67:5e:3f:92:72:90:58:28:82:37:95:b5:6f:3f:ae:
a4:2f:09:7a:4b:37:69:f4:d3:a8:8c:72:52:c3:c3:6a:5b:2b:
e2:21:57:8d:cb:d2:07:35:91:aa:72:58:fa:6e:e5:63:7e:78:
a9:99:b9:ae:e4:52:79:eb:4e:d6:dd:3c:a0:69:dd:53:bf:23:
8b:64:3d:41:ac:a0:8d:87:92:1a:9a:f0:78:89:61:fe:38:bb:
64:6e:86:95:ad:dd:75:23:4d:ac:85:e2:d9:19:24:15:c4:18:
93:93:fb:48:d5:b7:80:61:48:17:bb:3b:d8:56:23:2c:e3:f0:
e3:90:ec:89:9b:00:32:6c:de:89:a7:10:59:0c:e1:66:18:24:
8a:b1:ae:0a:91:00:21:bf:48:71:2b:28:61:1b:ad:82:b2:91:
d6:a3:45:d5:be:a4:2a:49:be:a8:1b:1a:a0:ee:13:f9:43:ad:
df:66:23:7d:ba:8c:11:93:e8:2f:42:7a:ca:d3:74:09:bd:96:
63:bb:5b:be:a0:14:ad:22:ab:f9:c1:b5:20:d7:ed:a1:70:d5:
04:5f:03:f8:c8:74:97:86:1b:fe:35:7c:b9:08:d1:43:27:b0:
e3:97:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org