Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAC06CCAE75911EEA988EE5B775412E6.roa
File: EAC06CCAE75911EEA988EE5B775412E6.roa (raw, json)
Hash identifier: b4TxRtvt+/dql4FD2Pi4/bck6kgPZWEyzqBTcEQOpMc=
Subject key identifier: B9:FC:E7:E6:51:C8:C5:B4:84:E7:F3:D5:A7:B3:9C:04:DE:F9:53:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAC06CCAE75911EEA988EE5B775412E6.roa
Signing time: Thu 21 Mar 2024 08:06:27 +0000
ROA not before: Thu 21 Mar 2024 08:06:24 +0000
ROA not after: Tue 23 Apr 2024 08:06:24 +0000
asID: 44559
IP address blocks: 154.211.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42183 (0xa4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:06:24 2024 GMT
Not After : Apr 23 08:06:24 2024 GMT
Subject: CN=65fbea83-ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:1c:08:35:d6:39:92:e9:84:13:02:24:45:
1b:27:01:79:f3:03:eb:e9:7e:0a:49:4d:9c:b5:08:
a0:2f:3a:d3:be:86:77:f3:6a:62:a7:7d:6e:df:c7:
0b:a1:fe:45:48:d6:54:ea:d8:82:6c:5c:e4:bd:6b:
32:45:52:46:32:02:5d:da:e3:c4:65:86:4c:5a:06:
a7:27:38:9a:99:65:ba:22:ed:49:21:76:ba:ee:dd:
57:fb:0b:3d:d8:da:61:4a:87:c7:f3:de:71:d7:f4:
1b:e9:7b:5e:a4:13:3c:d9:ed:6b:69:7e:79:1b:c4:
14:04:6b:1f:6b:37:7e:a2:84:e0:16:e3:59:60:f4:
c2:1f:fa:12:24:0c:29:8e:18:00:35:3b:d5:cc:2d:
ae:dd:41:10:cd:6e:8c:77:85:fb:17:15:a5:b2:e7:
76:f3:bf:7b:70:7b:75:c3:96:54:3f:03:76:c2:61:
7b:40:36:54:ef:d2:c7:83:b5:d7:00:c3:01:0a:02:
8c:f2:7c:90:81:d6:2b:c1:97:02:36:08:8b:77:b8:
cd:8d:a3:65:43:de:fa:ca:63:2f:c9:61:eb:b1:1b:
de:35:eb:96:35:2f:7e:9a:d4:c3:46:83:9d:de:10:
2e:68:1d:69:75:e0:19:ae:dc:b0:36:9c:92:30:a3:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FC:E7:E6:51:C8:C5:B4:84:E7:F3:D5:A7:B3:9C:04:DE:F9:53:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAC06CCAE75911EEA988EE5B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:eb:86:af:53:84:ee:c5:32:95:d6:94:0b:e5:4e:25:02:01:
d9:6d:bb:28:d6:1d:37:43:3a:2f:29:7a:01:e1:9c:94:c2:fb:
bf:ff:51:65:ee:59:35:d8:29:03:df:df:16:6f:07:3e:cb:26:
8c:c3:bf:bd:88:be:37:48:7a:8c:a4:68:eb:9c:e0:46:f9:58:
74:4f:67:e4:8f:30:aa:66:ee:0b:5f:0f:9a:16:01:46:c6:5d:
c0:20:bf:ef:c6:48:f7:ff:07:f2:57:12:ff:ad:42:1c:0a:e4:
af:6e:5b:f7:0c:fa:b6:e9:28:01:79:e7:c5:a0:ea:81:08:4c:
28:75:e4:84:e9:05:4e:e8:5b:c3:94:55:d0:3d:09:ff:99:6c:
d9:74:43:8e:31:53:9b:19:4a:f0:80:66:28:51:a4:63:6a:a9:
5b:02:cb:d1:94:b1:5a:35:b6:ef:4f:57:cb:4b:7a:b6:73:0a:
73:8f:fb:ce:bf:c7:c6:bf:eb:b4:3f:c4:de:64:61:ba:47:e6:
26:d4:c5:2c:4a:3a:85:ec:60:22:df:04:d4:35:80:99:d6:d1:
00:64:08:bb:62:3b:88:94:56:18:a7:72:71:30:65:a2:6a:4c:
b4:fc:68:47:49:08:f8:0b:0c:c1:9e:21:11:78:61:57:92:60:
dc:a8:98:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:26 2024 by rpki-client on console-fra.rpki-client.org