Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1225A2EAAE1011EEA4401A87775412E6.roa
File: 1225A2EAAE1011EEA4401A87775412E6.roa (raw, json)
Hash identifier: gBWmQjAIp4B+zzdWXn64AA3VwmW1ox3kPabX75TlZ2g=
Subject key identifier: 32:D2:3A:60:85:4B:52:AB:6D:13:EF:CA:C1:9A:E1:02:0D:93:9D:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 728A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1225A2EAAE1011EEA4401A87775412E6.roa
Signing time: Mon 08 Jan 2024 10:24:14 +0000
ROA not before: Mon 08 Jan 2024 10:24:11 +0000
ROA not after: Wed 25 Dec 2024 10:24:11 +0000
asID: 140867
IP address blocks: 154.197.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29322 (0x728a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 10:24:11 2024 GMT
Not After : Dec 25 10:24:11 2024 GMT
Subject: CN=659bcd4e-3265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c7:30:c2:dc:c9:64:ce:d0:ed:74:ee:93:4d:
4b:a3:74:a4:1b:89:5e:70:97:de:21:8b:47:56:7e:
29:db:83:60:06:bc:9b:2c:e5:18:4e:13:6d:e1:4c:
ad:13:4d:4f:28:dd:68:b5:2c:58:42:75:f5:dc:be:
aa:1e:af:a6:f8:94:ec:b5:06:a8:8a:dd:8e:e6:5d:
ef:ee:ba:b0:57:8b:53:e4:86:39:4d:4d:1d:6e:f4:
46:67:7b:b0:ef:b4:28:89:53:f4:c3:e3:aa:2c:2e:
71:2f:c3:4d:d1:c3:f3:d0:e8:0b:f9:37:61:4a:b9:
83:f3:59:6c:8a:b4:e4:cc:c5:1f:53:9a:9a:db:14:
55:d7:93:46:25:cf:d9:04:b6:db:ca:77:30:65:47:
8f:4b:be:21:3c:eb:8f:a9:e9:a8:5a:f3:bb:7f:e9:
d1:68:cb:da:7f:45:63:5f:9a:d9:d6:7a:9d:e7:f8:
a1:07:87:a7:c0:e6:ea:36:2e:c1:21:71:1c:21:07:
75:32:f2:82:b8:f2:a6:26:af:c8:6b:b9:ca:eb:a6:
da:27:6c:67:97:1e:4a:7b:ab:c0:cc:e2:cd:19:c9:
d4:e6:b8:31:39:f7:30:8d:d0:72:67:24:fd:0a:4b:
3c:62:fa:1f:ab:10:b4:41:23:a1:65:7e:e6:8d:fd:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:3A:60:85:4B:52:AB:6D:13:EF:CA:C1:9A:E1:02:0D:93:9D:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1225A2EAAE1011EEA4401A87775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5b:17:6a:1f:d0:24:91:ea:a5:ad:b5:df:29:0f:45:27:8e:
9b:31:c5:58:61:0b:d3:ff:4e:8b:a6:2c:bf:ef:a7:26:9e:23:
78:91:34:c8:01:b2:dc:2e:fa:d4:2a:69:ca:64:d3:b1:97:fb:
9f:18:97:1f:d2:af:11:3f:78:19:c7:5e:aa:af:4f:e0:cd:1f:
cf:dd:5d:e7:1d:7b:25:c9:17:a6:e0:48:80:d3:c3:58:c8:eb:
d8:13:25:9d:38:f0:1e:c8:2a:d1:cc:ca:67:93:c0:3f:96:2d:
9a:3f:e7:3d:01:86:8c:51:35:e4:1f:1c:5f:cf:79:6c:41:25:
32:10:5c:2b:bb:4c:fd:f4:f0:99:ce:14:ce:6c:25:7c:9e:9f:
e1:1d:81:1e:58:ac:ab:44:be:f8:5a:be:cd:ac:a0:80:60:66:
68:17:b6:06:ed:69:e7:a2:57:1b:56:4a:82:9f:9e:9f:74:8c:
fd:d1:d0:cd:b1:0d:99:dc:42:4e:ae:59:93:ec:cd:01:b9:37:
b6:d5:89:68:0d:e3:5d:d8:20:90:da:f8:ea:7d:a3:89:73:11:
cd:24:76:5c:b4:04:43:56:9a:b2:c9:6d:0d:c8:34:33:82:83:
a2:4f:1c:8f:50:99:cb:fc:2c:75:a4:0c:ad:0c:99:42:c7:85:
79:aa:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org