Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00375850AE1D11EEBFFA609D775412E6.roa
File: 00375850AE1D11EEBFFA609D775412E6.roa (raw, json)
Hash identifier: HJPJb7eN4Rmze9TwoSrNaMo41I/Gogfqxp8ta/Cg60I=
Subject key identifier: 90:5F:3C:8C:0F:0B:82:15:B0:12:90:4F:51:19:E3:61:E2:56:50:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00375850AE1D11EEBFFA609D775412E6.roa
Signing time: Mon 08 Jan 2024 11:56:48 +0000
ROA not before: Mon 08 Jan 2024 11:56:44 +0000
ROA not after: Tue 14 Jan 2025 11:56:44 +0000
asID: 138965
IP address blocks: 154.223.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29366 (0x72b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 11:56:44 2024 GMT
Not After : Jan 14 11:56:44 2025 GMT
Subject: CN=659be2ff-70f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:2b:bf:71:88:a4:7f:f9:d0:cc:2e:e9:db:
f1:07:ab:62:85:7b:25:bf:49:77:eb:32:de:46:66:
f8:b4:b9:cd:f1:38:24:ac:96:48:27:e3:18:fd:e3:
db:cd:aa:af:91:4b:6b:28:0b:9a:f2:4f:11:8e:57:
28:5f:76:ab:11:69:f1:c3:d9:68:2d:cb:db:87:b0:
d4:e8:bb:fa:91:5b:5d:5a:74:33:d5:cb:aa:26:b3:
0a:9f:ad:90:82:34:ea:c3:7a:71:05:d6:31:a5:3a:
1d:dc:b5:56:4c:c8:f4:b6:84:9d:3b:b2:71:4f:62:
2b:f3:3f:9d:e5:09:cc:11:0a:b8:99:55:38:92:93:
64:37:ca:44:5a:2c:c0:1d:43:ce:67:82:8e:c6:2a:
c6:8e:d0:7b:a9:be:d6:2a:3b:30:45:b2:86:93:8e:
23:3b:b3:d4:c6:66:a3:df:63:f3:ef:40:e0:57:60:
ba:20:b5:a8:c7:38:b5:48:8f:2d:b5:d7:8c:68:08:
70:27:b9:fa:69:1a:15:ef:b9:ab:d9:d3:62:d8:45:
9c:eb:22:b8:56:f2:ed:e5:ce:c8:74:8e:f8:39:f6:
b4:d7:b7:b4:3b:87:ed:59:0b:ae:6f:f3:48:1c:5f:
b0:eb:e2:39:e4:95:c6:29:dc:48:44:d4:2a:bd:49:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:3C:8C:0F:0B:82:15:B0:12:90:4F:51:19:E3:61:E2:56:50:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00375850AE1D11EEBFFA609D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2a:79:78:80:10:30:99:e3:fa:bd:a6:e5:19:81:15:4d:2c:
1a:2d:60:b1:88:eb:7f:f7:48:2b:b2:59:80:2d:58:0e:a9:12:
e0:72:9a:ac:7f:3e:72:e1:3d:df:61:01:9e:41:9a:0c:e0:b4:
d9:2e:97:26:f0:7e:52:20:b3:e8:ec:57:68:eb:f7:04:76:80:
0b:5f:ec:b8:c9:b9:40:09:9a:a9:2d:f1:91:29:cd:c4:83:38:
7e:66:4c:18:dc:1a:e6:70:45:60:e1:ba:23:c3:2d:de:74:12:
98:8b:21:6e:4b:e9:a2:d9:62:6c:2a:66:63:50:58:99:bd:42:
fb:4a:64:af:3e:98:20:19:e0:3b:6d:ae:91:14:7d:27:8c:cc:
56:20:a6:86:a5:cc:f9:e8:ed:96:26:0f:32:34:b9:29:bb:34:
b5:c3:92:77:fc:3a:c5:2d:ff:9f:44:de:85:8a:d4:67:d3:52:
78:21:b6:9a:12:ec:3c:73:dd:86:69:64:51:a9:85:59:60:5e:
6c:7e:85:8b:22:03:20:b4:47:b2:20:fa:bd:67:18:66:4d:4c:
95:70:d7:27:87:e6:8b:ee:6d:a4:21:05:fc:91:7d:f2:61:8d:
82:b1:27:2c:ca:64:9a:15:ae:aa:cb:af:98:85:ce:be:39:45:
3c:d6:4c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:12 2024 by rpki-client on console-ams.rpki-client.org