Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B097100AE1C11EEA4CBC39B775412E6.roa
File: 1B097100AE1C11EEA4CBC39B775412E6.roa (raw, json)
Hash identifier: NKoxhEhZfBIc8LRYJ5Yhae4mvrq8m2cyqJWu2kATE6s=
Subject key identifier: C3:0B:8B:5E:69:7D:8C:87:16:97:12:10:4D:85:8F:F5:6C:CF:AB:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B097100AE1C11EEA4CBC39B775412E6.roa
Signing time: Mon 08 Jan 2024 11:50:23 +0000
ROA not before: Mon 08 Jan 2024 11:50:20 +0000
ROA not after: Tue 14 Jan 2025 11:50:20 +0000
asID: 138965
IP address blocks: 154.223.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29358 (0x72ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 11:50:20 2024 GMT
Not After : Jan 14 11:50:20 2025 GMT
Subject: CN=659be17f-ce12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:23:3a:33:76:b0:37:62:8d:47:6b:8e:f9:
a9:e0:62:ef:a0:f4:c7:59:3a:3e:0a:9e:77:01:51:
cc:f5:36:ac:bf:14:b9:2e:1c:30:6f:05:77:44:d5:
e0:21:ce:9e:c8:02:d1:56:2e:1e:17:93:3f:f9:3e:
5f:4d:e9:68:db:42:17:7f:e3:69:b0:3a:f5:20:3c:
f2:96:ba:26:8e:ff:34:e1:6c:79:9f:6a:5d:bb:6c:
39:df:07:55:bc:36:30:8e:99:34:b4:a0:22:ef:5d:
3c:f8:f7:6e:c5:bc:5a:2f:99:73:be:95:1e:66:b0:
64:5b:e0:a7:0c:35:fa:0e:ed:38:a4:45:b6:aa:35:
22:d3:91:f5:e1:50:c5:b3:db:f2:a6:f5:e0:41:23:
01:09:ae:fc:37:50:6e:e3:2b:22:c3:92:0e:32:c5:
50:2d:91:14:03:de:66:a3:d8:8e:98:b6:ad:ed:76:
83:bb:2c:d7:5b:7a:09:e0:04:4b:7a:ba:c5:01:82:
5f:61:0e:e2:6a:1f:7e:3b:dc:dd:40:78:8b:c6:f1:
ec:5e:56:8e:d7:cd:a6:51:85:3f:64:04:3d:c3:da:
a7:64:ea:28:8f:f1:fe:29:a6:e3:57:0e:ed:83:14:
79:33:11:a6:ec:3a:4f:e4:4d:8e:c0:6d:88:7f:5f:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:8B:5E:69:7D:8C:87:16:97:12:10:4D:85:8F:F5:6C:CF:AB:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B097100AE1C11EEA4CBC39B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f8:2e:c4:80:b4:36:67:df:72:61:c3:84:59:3f:20:c6:fb:
20:57:a6:ec:c0:73:21:e0:eb:97:ad:2b:7c:af:49:d7:cf:68:
3e:b5:94:64:c0:1b:7a:45:39:b8:c3:75:0c:51:d7:53:3a:f1:
91:87:78:87:12:8c:47:f7:e3:40:e1:9c:43:52:af:8f:6e:0b:
01:83:76:03:25:9b:25:8a:c4:bb:f0:92:05:79:83:d9:69:03:
33:7c:ba:39:0a:b4:4c:bd:09:c7:f2:22:97:45:80:98:78:53:
60:69:3a:e6:b8:1d:da:20:41:4e:03:59:06:68:58:5d:77:c2:
f3:c1:26:0f:dd:3c:31:d1:2c:e1:50:09:11:cf:94:51:11:2f:
c8:2f:97:67:9c:b9:9d:68:13:e6:b8:ec:b7:53:c9:db:fb:da:
f7:ce:15:51:25:cd:24:1a:13:81:04:b2:02:9c:98:3b:35:b9:
21:0e:43:8d:bb:1b:26:e8:7f:eb:63:cb:df:94:d2:e5:55:6f:
19:e2:bc:03:fa:ba:b5:bd:14:8f:8a:f6:40:53:ee:11:bc:11:
53:89:ae:0e:cc:d4:13:4d:98:b6:25:1a:1c:9d:2d:d5:04:a4:
99:0c:3c:a0:4f:34:c0:7b:32:04:28:db:16:c4:67:4a:c0:e5:
e0:5d:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org