Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9DFCB32E75A11EEBAF20264775412E6.roa
File: F9DFCB32E75A11EEBAF20264775412E6.roa (raw, json)
Hash identifier: NU+9DSUiC+PlKk740EpjxwnYG1M+XppoHCr4OWkWKwM=
Subject key identifier: 2B:97:A3:D4:EF:2E:D7:80:E4:A6:7F:D1:73:62:16:5B:93:54:28:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9DFCB32E75A11EEBAF20264775412E6.roa
Signing time: Thu 21 Mar 2024 08:14:02 +0000
ROA not before: Thu 21 Mar 2024 08:13:55 +0000
ROA not after: Tue 23 Apr 2024 08:13:55 +0000
asID: 44559
IP address blocks: 154.211.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42193 (0xa4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:13:55 2024 GMT
Not After : Apr 23 08:13:55 2024 GMT
Subject: CN=65fbec4a-b9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:6d:ef:54:ee:e7:39:7e:d5:6c:1f:db:cb:
cf:ea:69:5d:6e:d7:a1:69:28:6a:7d:45:87:fa:34:
50:b6:47:ec:fe:02:9e:c3:d0:d5:6b:f8:02:d2:05:
15:5f:d3:fa:c4:9a:83:d4:57:96:05:4a:a1:8a:8d:
19:1a:f3:c0:4b:c9:26:58:0a:8a:e8:f3:f1:fd:03:
e9:cf:94:39:a6:d9:06:58:e9:82:6a:ee:97:26:06:
2f:5a:37:8e:34:f6:28:4d:03:94:fd:01:52:ef:b4:
4e:0a:e7:f5:25:77:1b:20:19:10:ed:36:fb:0c:a0:
64:3a:53:f4:07:46:59:05:b2:1d:d1:bc:53:fa:42:
14:a9:fe:73:ca:3c:7a:c0:8a:87:ab:c6:b8:de:93:
47:82:6e:cc:15:16:10:e4:47:4a:92:79:d1:b9:f3:
52:95:e5:4f:f7:af:bd:d4:a3:85:1d:0f:11:8f:36:
d8:95:86:f1:e6:78:14:58:27:f2:50:01:5e:a0:38:
6c:ad:ac:f7:6b:08:8b:ba:15:37:c4:b2:4a:8d:18:
3f:aa:08:a9:78:d0:e4:c9:52:92:be:c0:2d:ad:e6:
6d:23:80:da:b8:4e:34:12:dc:bf:12:58:3e:c5:8c:
c0:88:b7:99:82:d9:5a:61:d7:90:18:b7:c5:9f:eb:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:A3:D4:EF:2E:D7:80:E4:A6:7F:D1:73:62:16:5B:93:54:28:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9DFCB32E75A11EEBAF20264775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:32:f7:e7:f3:1d:ba:6c:15:5c:0b:19:86:09:b6:0c:ca:91:
9c:f5:ef:e2:25:a6:e0:54:7b:2b:f8:d9:12:49:f2:a7:e0:dc:
38:98:13:8d:05:28:3e:ff:c6:ed:24:5f:f5:8e:77:ae:ef:02:
6a:e4:5f:79:8a:95:20:22:cf:f7:09:d7:cd:7a:9f:a0:0f:54:
90:a6:02:51:79:3c:c3:50:16:79:dd:5a:e2:2d:40:d0:97:2a:
ee:f7:c6:30:fa:3d:a9:73:94:12:c5:83:e5:25:f1:52:55:f8:
71:61:45:d9:1a:64:5c:f6:25:be:64:33:6e:72:1d:9a:92:f9:
e0:2a:4f:39:2d:ba:ea:0d:81:b8:ba:48:11:6a:c4:8b:4b:ae:
c7:28:b7:ae:16:a0:94:8c:a1:36:48:33:a2:39:92:59:93:e2:
82:23:8d:1e:45:5a:8c:f6:ab:97:8e:3a:3c:d2:f9:a8:d4:ef:
33:7c:c7:73:c6:27:3d:42:05:f5:8a:44:a9:70:1b:79:5d:37:
7f:0d:60:80:a7:eb:da:d4:a8:43:cd:5f:1f:40:48:60:9a:d1:
7b:01:d9:25:1f:f6:3b:8f:cd:69:ae:5f:ed:d4:25:06:91:36:
84:d8:79:65:b5:4c:ae:91:42:40:c9:0d:24:09:8c:13:ba:3c:
62:8c:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org