Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24369F4EEFF011EEA3CFEF8D775412E6.roa
File: 24369F4EEFF011EEA3CFEF8D775412E6.roa (raw, json)
Hash identifier: ohfzXJOeAYv7dh6Sg8ZLrN2u7FwSfzMuM6hHYn3+9VI=
Subject key identifier: A8:BD:5A:43:6B:2A:44:82:80:88:22:FB:81:38:A5:2A:C9:02:0D:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24369F4EEFF011EEA3CFEF8D775412E6.roa
Signing time: Mon 01 Apr 2024 06:21:57 +0000
ROA not before: Mon 01 Apr 2024 06:21:54 +0000
ROA not after: Tue 07 May 2024 06:21:54 +0000
asID: 138915
IP address blocks: 154.223.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42928 (0xa7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:21:54 2024 GMT
Not After : May 7 06:21:54 2024 GMT
Subject: CN=660a5285-dac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:25:0f:bf:22:77:c6:09:59:48:c8:d5:9c:
be:c3:ec:8f:8c:3b:12:02:66:1f:6c:7d:22:b7:c4:
61:91:92:5d:5f:91:38:64:20:cb:ca:bd:e3:20:72:
73:bb:bf:f2:41:28:e9:7a:f3:5a:3b:99:ab:88:44:
93:2c:5e:fe:00:cf:12:88:05:ed:af:f9:b9:66:28:
2a:c8:7c:00:05:a0:54:d1:11:fd:55:b7:0a:7c:26:
16:20:d5:a0:12:09:f5:05:4f:8c:c9:d6:e3:58:2f:
0c:86:fd:a4:7a:04:12:38:5e:1d:56:0c:53:d4:f1:
d8:e4:3f:c4:37:e4:58:e0:c2:79:f0:a5:27:32:5b:
c9:7b:db:ab:00:78:42:a4:9d:8a:a4:88:3a:79:8e:
ac:c0:2d:2f:eb:52:1c:5e:f9:8b:77:86:d8:41:20:
23:18:6d:0d:3b:20:aa:f0:69:9f:96:fa:0e:38:ea:
b4:f0:72:26:8d:5f:01:e1:81:7d:95:42:a7:7f:92:
f0:b8:18:a1:bb:a5:8d:8c:5c:18:07:04:44:7f:ee:
fc:92:7d:2c:3d:3d:f4:b4:af:c0:42:81:8c:9d:8a:
c9:b5:80:57:6d:5a:31:d8:ef:ca:5a:3f:62:1f:51:
94:ef:30:5a:17:14:f4:82:11:7d:27:45:24:92:86:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:5A:43:6B:2A:44:82:80:88:22:FB:81:38:A5:2A:C9:02:0D:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24369F4EEFF011EEA3CFEF8D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.23.0/24
Signature Algorithm: sha256WithRSAEncryption
73:31:b8:bd:ac:dc:9c:d7:43:2c:3d:5b:5e:09:80:0a:ab:2b:
58:3b:35:59:1b:3e:6c:91:07:cd:29:e5:d5:14:d8:60:f3:c3:
71:31:fc:b2:7f:0e:5b:79:92:9a:6d:e0:77:72:a0:83:ce:6a:
a4:d3:74:7d:7e:f0:4d:57:2d:27:20:ef:9e:64:78:f6:a1:f4:
9d:84:aa:44:24:8a:d0:c3:0b:79:df:aa:1c:0e:1b:dc:03:a0:
34:03:43:9e:e9:fa:51:fb:91:e4:5c:f1:d7:20:76:3a:2c:34:
1c:3a:ae:2b:59:b1:36:f5:c8:18:48:35:79:d4:8e:fd:3b:5c:
48:71:9f:a9:88:60:26:f2:b4:7f:fd:b5:a9:29:18:a4:8b:8f:
c8:3a:63:cc:19:c9:62:99:d0:44:d9:71:09:74:f7:09:c5:9c:
a5:c2:7f:0b:e7:99:f4:b2:b9:4e:3c:cd:5e:69:fb:c5:70:9b:
c3:98:38:12:0d:38:e9:38:3d:a7:6c:80:f3:0b:57:f1:51:8b:
b0:d5:76:bd:80:6c:27:1b:13:56:78:26:2d:d6:92:32:48:f2:
aa:90:9d:80:8c:60:0b:98:4c:e9:67:80:41:bf:ed:1c:e2:ec:
cf:43:a5:d1:d8:5b:72:a0:9d:34:f6:4f:c5:6b:d3:b5:6a:12:
35:86:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:04 2024 by rpki-client on console-ams.rpki-client.org