Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/112B22E8AE1F11EEA3361DA1775412E6.roa
File: 112B22E8AE1F11EEA3361DA1775412E6.roa (raw, json)
Hash identifier: p3mh0m22gHpUKCYHL4ahWjzwX1lnBH1Gs2RL9YU2miE=
Subject key identifier: E8:3D:2D:4E:8A:52:55:DA:38:D7:6C:8D:72:FC:D7:AF:85:3D:B2:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/112B22E8AE1F11EEA3361DA1775412E6.roa
Signing time: Mon 08 Jan 2024 12:11:35 +0000
ROA not before: Mon 08 Jan 2024 12:11:32 +0000
ROA not after: Tue 14 Jan 2025 12:11:32 +0000
asID: 138965
IP address blocks: 154.222.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29384 (0x72c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 12:11:32 2024 GMT
Not After : Jan 14 12:11:32 2025 GMT
Subject: CN=659be677-29f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:14:67:b0:e9:6d:89:91:99:19:8f:52:19:
69:32:3c:a5:68:d3:cf:90:72:07:43:b8:94:fa:18:
b5:72:df:fe:3c:2a:23:a4:18:a8:f1:ae:6c:74:b8:
9d:31:44:57:e5:57:3d:9d:db:9c:31:06:ab:49:19:
ab:77:1a:93:e4:33:07:d7:14:46:76:f3:11:75:53:
50:86:92:a7:61:fc:e2:b4:07:0d:71:b7:6a:ba:24:
d1:7b:8a:94:22:1e:5c:c5:6e:02:4e:10:68:78:6f:
84:5e:28:c6:f7:3c:31:2f:a6:8d:66:55:7e:e4:e7:
96:da:72:fb:40:b0:d2:df:1c:01:b9:cb:54:81:40:
d1:26:e3:f6:2d:2b:8e:f0:9c:99:18:e4:74:5c:da:
b1:55:47:b5:e0:6c:16:7e:1e:dd:d9:41:5b:e8:d0:
48:04:be:09:c5:88:b2:50:c6:7a:95:1a:5e:87:49:
82:19:30:0c:2c:ed:9c:c9:91:23:69:22:d7:19:15:
5f:e0:49:31:90:57:79:1b:23:5d:d8:1f:3a:d3:b7:
77:0c:f6:e4:2d:3f:1b:25:ab:b3:39:9e:97:85:3a:
1c:14:2c:e3:44:4a:ff:3c:65:ae:60:c1:22:3a:1c:
b5:5a:e8:9b:e4:37:ab:43:6a:3a:1e:1c:17:c7:c3:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3D:2D:4E:8A:52:55:DA:38:D7:6C:8D:72:FC:D7:AF:85:3D:B2:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/112B22E8AE1F11EEA3361DA1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.55.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:ed:cd:b0:c3:ae:47:52:54:03:f1:51:c3:41:f6:b7:87:95:
de:d4:fd:32:92:a7:07:3a:db:c9:2d:06:9f:7a:cb:54:62:ae:
e7:ec:35:83:53:a9:ab:75:13:a9:de:45:a7:ec:c0:15:94:a6:
34:9c:cd:f4:cd:67:82:36:26:0d:4a:76:f3:12:5a:07:5a:85:
e9:6b:bf:e1:3c:c1:7c:88:91:2f:b2:b8:21:b5:1f:4b:30:d3:
54:0c:d8:e5:f7:93:47:96:21:63:15:5f:9f:25:95:ae:c0:de:
20:da:0a:00:41:c6:70:75:a5:30:f5:7e:82:5a:99:a0:d4:b0:
1f:0b:8d:e9:51:a0:15:8b:3a:35:1f:82:53:bc:4c:c8:00:08:
26:78:c9:9f:6d:f0:2c:e4:a6:11:f1:70:58:21:aa:08:74:26:
f2:ac:bd:e2:cd:d1:1a:e4:e6:a0:e1:10:82:82:60:e6:7b:31:
e4:95:1e:fc:77:d7:4f:f4:2a:79:2e:c8:c2:1c:30:ca:6e:d6:
97:9a:66:56:61:c4:47:9b:22:c0:2d:4c:b7:de:80:6f:30:d1:
58:58:4a:d9:3a:28:df:45:6a:f8:b5:8c:c0:1e:3e:ee:a7:d4:
e1:e7:e8:4e:db:a0:05:57:30:30:99:67:fb:b9:34:7d:ba:d9:
fe:82:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org