Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7B1BB70E74E11EEA51D7D86775412E6.roa
File: E7B1BB70E74E11EEA51D7D86775412E6.roa (raw, json)
Hash identifier: Svf3wMYSM9EtC46Isz28YaQ6NOTolUNgvug/7AfEInY=
Subject key identifier: DB:B6:4B:B6:4C:C3:73:36:C9:DD:C1:9C:97:0D:DC:46:50:38:1D:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A45B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7B1BB70E74E11EEA51D7D86775412E6.roa
Signing time: Thu 21 Mar 2024 06:47:38 +0000
ROA not before: Thu 21 Mar 2024 06:47:34 +0000
ROA not after: Tue 23 Apr 2024 06:47:34 +0000
asID: 44559
IP address blocks: 154.220.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42075 (0xa45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:47:34 2024 GMT
Not After : Apr 23 06:47:34 2024 GMT
Subject: CN=65fbd809-0f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:d1:8b:9d:61:bb:d4:1f:1e:99:3b:55:08:
8a:ac:31:b1:6e:6a:c5:ae:a6:91:70:d1:96:17:97:
28:20:21:5c:6c:7a:b8:94:b7:10:9e:4a:8b:01:cc:
da:97:ba:05:b1:fb:77:1f:dd:43:bf:89:92:54:9f:
d6:b6:68:c7:6f:45:fc:8d:37:ab:cf:40:13:f1:1a:
c0:76:ae:d6:ff:8b:9c:a8:31:99:57:09:48:21:c6:
22:7d:65:c1:0c:0a:07:eb:fc:80:b7:13:5f:1e:df:
83:40:64:7d:89:d9:28:ad:30:7c:58:0a:19:9e:90:
cf:82:c1:a2:e8:1f:a7:1d:71:0b:45:b1:d2:ed:1a:
0b:2a:d3:bb:0f:cd:71:74:19:6d:cd:d9:89:7d:5f:
73:b3:54:11:dc:41:3a:1e:db:d9:c0:e0:4a:8e:47:
a8:7c:5d:b0:2a:af:1e:5c:dc:99:b9:ae:ba:b4:0e:
48:7d:76:62:85:08:75:c8:10:50:81:f6:b5:28:91:
ab:e7:44:36:a0:32:96:ca:1e:9f:2d:43:dd:46:3b:
ea:ec:48:c5:bc:a0:b9:4e:5c:81:d0:33:67:63:b6:
52:8c:85:b9:ac:58:8e:8f:d4:ad:83:8d:af:75:5f:
3c:45:98:14:6c:3f:57:f0:5c:c9:71:e3:5f:04:b3:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B6:4B:B6:4C:C3:73:36:C9:DD:C1:9C:97:0D:DC:46:50:38:1D:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7B1BB70E74E11EEA51D7D86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.139.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ad:6f:32:cc:ea:e5:32:05:bb:41:1f:f2:77:b1:4c:fd:c3:
cc:af:8a:ff:73:9b:53:76:4d:e9:bd:1d:26:88:d7:9e:23:ca:
68:63:05:96:00:dc:eb:54:7d:b7:9e:7b:dd:e0:0c:b7:c5:b3:
51:4b:bb:80:a6:38:7c:60:1b:3b:4d:e8:75:2b:42:b0:91:30:
35:1c:c2:f4:a9:3a:d2:25:40:69:8e:42:54:dd:5d:b2:f6:59:
ea:a6:4b:67:28:9d:73:a2:b6:72:99:fc:3e:ca:87:ee:d1:83:
a8:5c:ae:33:07:2d:f8:67:9b:9e:ec:0a:d4:ac:7b:bb:d9:08:
fc:2c:ac:37:8b:e8:92:d1:79:19:d9:4c:62:33:d7:b7:25:ea:
7c:d4:1c:74:5a:0e:45:48:17:91:d3:89:de:fa:1c:85:99:6e:
0b:4e:e7:8e:d1:3a:d2:af:c5:2e:8c:de:12:e2:a1:88:9b:8c:
57:07:af:81:87:3e:3b:b7:3c:8f:5e:74:25:bc:f5:79:16:e6:
79:66:60:54:b3:d5:8f:7c:61:4f:3a:b4:ab:1b:cd:d5:aa:87:
bc:1a:8e:04:33:e5:d3:58:07:9e:91:80:1f:8a:24:91:57:e1:
2e:98:20:57:4c:44:df:12:8f:96:a9:b6:f3:87:97:27:6f:ce:
75:a9:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org