Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28A0CA0E74F11EEAF5B5D8E775412E6.roa
File: E28A0CA0E74F11EEAF5B5D8E775412E6.roa (raw, json)
Hash identifier: 3njos5cWBW9oIbx8c5dBVwCswGSqQO2Hd5wtMDeGhUU=
Subject key identifier: D0:65:2D:5D:88:53:E2:B1:3E:A5:07:F0:36:58:F7:4B:12:7F:D1:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A465
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28A0CA0E74F11EEAF5B5D8E775412E6.roa
Signing time: Thu 21 Mar 2024 06:54:38 +0000
ROA not before: Thu 21 Mar 2024 06:54:35 +0000
ROA not after: Tue 23 Apr 2024 06:54:35 +0000
asID: 44559
IP address blocks: 154.220.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42085 (0xa465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:54:35 2024 GMT
Not After : Apr 23 06:54:35 2024 GMT
Subject: CN=65fbd9ae-99ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:e5:84:89:b3:4d:1a:50:5e:75:e4:be:87:
90:ce:81:2c:87:14:5a:6d:f7:8e:fc:a4:b2:30:eb:
8d:f9:84:c8:69:11:bd:cc:c8:49:6b:ee:e2:d3:f4:
21:11:bf:6c:17:37:ba:b7:c3:78:e7:ac:cf:4c:48:
a5:cd:66:f4:80:36:9f:f3:c8:29:06:21:07:03:c2:
49:7f:fa:8a:ac:7a:be:d7:9c:7a:2f:7e:f6:d1:87:
72:a2:f8:a2:54:c5:b3:33:16:a3:2e:b2:fd:86:92:
17:1e:e1:ab:7c:c2:64:50:9f:20:81:01:6b:c4:31:
5e:b4:98:0b:97:47:4d:28:ed:18:21:c5:08:7b:1d:
74:3d:43:ee:d8:59:ba:bb:3c:d3:e1:6a:51:32:34:
39:ea:09:bd:66:90:5d:f1:45:37:ab:ca:83:6b:04:
ef:fe:f3:0f:e0:09:3f:c9:6c:94:36:e7:06:b6:ae:
65:54:e0:99:3d:4c:7d:29:4a:22:25:05:76:cd:7c:
97:c0:d6:52:14:32:7d:5f:36:f8:8f:05:43:3f:8b:
c6:6d:a2:db:78:64:3d:9f:3b:bb:fb:bf:fb:a4:12:
d1:a8:b7:25:01:24:f3:5b:cb:db:be:41:fb:f8:9e:
28:81:27:53:c6:65:a9:ce:db:62:db:ce:e5:c6:ef:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:2D:5D:88:53:E2:B1:3E:A5:07:F0:36:58:F7:4B:12:7F:D1:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28A0CA0E74F11EEAF5B5D8E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.134.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:59:4d:18:d4:50:fb:3f:20:b7:80:c7:2a:6f:5f:d6:3d:8b:
4a:79:eb:21:60:82:29:09:5e:63:71:cc:70:01:1e:ab:f5:cf:
85:89:e8:07:58:41:de:32:d2:c3:3e:b7:60:33:09:8e:ca:ca:
bf:42:b6:9d:eb:1b:43:2b:f0:09:f7:7a:e4:1a:bb:63:a1:ef:
99:f0:78:5e:34:c6:1a:aa:81:d7:06:b0:be:8f:68:e8:d9:bf:
50:42:99:61:5e:96:70:f2:92:3d:6c:20:d1:29:3c:7b:6a:8e:
51:92:90:76:4d:ec:5a:8c:bc:95:5f:9c:81:76:c5:68:58:be:
87:8a:cb:9f:da:bd:0b:a9:1e:07:a7:94:26:f0:6c:48:77:42:
2f:81:14:19:96:90:3a:4a:c2:23:a5:78:f5:ab:ad:41:ec:e9:
73:ae:be:4e:66:af:77:8e:a4:2f:23:56:7f:40:d4:6d:6e:61:
7f:75:3a:e6:b2:08:5a:e7:1b:f7:66:c2:fe:f2:36:2c:82:d6:
06:fd:1c:a7:23:5c:ea:22:c7:a3:0d:89:57:65:8c:85:e4:22:
9f:16:38:48:e1:23:57:ed:2c:d9:45:dc:41:f6:06:fe:d3:3a:
97:58:d6:26:f4:ba:aa:1e:b8:38:f7:7c:87:a0:a3:65:f9:0c:
d0:8a:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org