Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08695D4E74611EEA9EC61C6775412E6.roa
File: F08695D4E74611EEA9EC61C6775412E6.roa (raw, json)
Hash identifier: fW+2Ul/5vAIf4wtlGrgzGgxe0MLgwZK2i/1fijCWRpw=
Subject key identifier: 01:5A:AB:E5:27:E4:DD:A2:DD:31:C2:BC:A6:7D:46:B0:53:F3:8D:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A40F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08695D4E74611EEA9EC61C6775412E6.roa
Signing time: Thu 21 Mar 2024 05:50:37 +0000
ROA not before: Thu 21 Mar 2024 05:50:33 +0000
ROA not after: Tue 23 Apr 2024 05:50:33 +0000
asID: 44559
IP address blocks: 154.220.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41999 (0xa40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:50:33 2024 GMT
Not After : Apr 23 05:50:33 2024 GMT
Subject: CN=65fbcaac-f385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:d1:5b:40:4e:08:65:57:b7:05:6d:87:0e:
e3:eb:c9:c8:d9:9b:12:da:51:6a:3a:9a:36:4b:7f:
6a:ab:6a:59:22:4f:83:88:3f:ae:56:1d:56:c3:59:
85:0b:86:4e:8f:9c:7c:68:48:0d:a8:87:e0:7a:b3:
34:b6:f9:b5:31:2d:78:82:09:c8:7c:1e:3c:2d:3c:
7d:ec:80:49:8c:79:14:84:0a:15:77:d2:24:a2:bb:
5a:e2:7d:f3:2e:ca:b8:1c:ce:21:97:51:09:fc:2e:
b6:50:5f:54:42:dd:19:b0:0b:d3:3a:1c:c2:1f:b2:
cc:65:3e:af:9d:16:1d:76:b9:3b:23:97:8a:aa:ba:
1f:b8:2b:31:1c:aa:6e:c0:c0:7e:c9:15:6c:16:b0:
1f:9f:77:29:ee:76:d5:ad:02:e6:9f:b7:ad:54:a1:
26:67:f5:ee:da:1d:dd:bf:a9:01:12:b2:c5:57:55:
f0:c9:8b:93:8e:06:01:ed:26:0f:18:6e:77:ff:63:
96:fb:de:a9:04:dc:9e:bc:5c:75:fa:54:a2:48:b6:
34:1b:d3:47:0f:e0:44:a5:39:13:85:fc:90:39:d4:
2d:5f:c5:a8:3d:e9:43:f1:ff:5d:e7:36:4d:3b:d4:
93:2d:de:d4:44:07:76:6a:ae:42:f4:d9:d3:fb:f4:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:AB:E5:27:E4:DD:A2:DD:31:C2:BC:A6:7D:46:B0:53:F3:8D:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08695D4E74611EEA9EC61C6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.177.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3a:a4:51:3e:dd:3d:5f:0e:42:1e:99:1d:28:1b:31:20:21:
f9:5d:61:c9:22:80:e7:ea:ed:b6:aa:9a:3f:fe:63:30:59:a5:
0a:6e:0c:2e:17:03:2f:ec:48:93:c0:4a:b6:73:f1:89:a4:f5:
8b:f8:c6:99:70:72:2c:93:fc:90:38:97:da:bd:45:36:ca:5b:
80:55:c8:52:ca:47:96:f7:6d:bc:9b:75:66:6e:1f:98:b4:38:
07:ec:39:51:1b:0c:03:88:2e:b2:25:21:52:1a:b4:d8:c5:26:
59:83:eb:48:be:27:7f:5b:3d:54:23:83:24:cc:f4:f3:14:8a:
54:dc:d4:53:67:f6:30:da:8a:ad:1e:5f:92:0d:b0:f7:85:df:
9d:c2:8d:73:bd:65:14:22:73:b3:da:7d:19:0d:2e:58:7f:22:
02:02:77:39:ec:bb:84:d7:8a:43:ec:ce:63:4c:46:95:00:bb:
db:1b:9d:5a:1a:20:33:8e:fa:1b:9e:d4:54:93:a1:c9:35:48:
53:e3:42:72:f5:22:41:82:17:07:d0:81:ba:04:18:8a:de:59:
48:0a:b7:2f:47:3f:61:f5:5d:c4:25:f1:d3:52:25:d6:3a:80:
65:76:09:f0:66:2c:17:57:27:45:56:23:61:da:06:26:f9:3b:
42:31:85:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:26 2024 by rpki-client on console-fra.rpki-client.org