Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525CF1A2AE1911EEB305EF96775412E6.roa
File: 525CF1A2AE1911EEB305EF96775412E6.roa (raw, json)
Hash identifier: iBDvLamsuhUkfSYn7s03yynxWgbS3YV27vQ/r6hcgzQ=
Subject key identifier: 64:E9:69:47:A0:01:B1:32:CC:C5:01:6C:6A:BE:49:01:3D:D2:B3:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525CF1A2AE1911EEB305EF96775412E6.roa
Signing time: Mon 08 Jan 2024 11:30:27 +0000
ROA not before: Mon 08 Jan 2024 11:30:24 +0000
ROA not after: Tue 14 Jan 2025 11:30:24 +0000
asID: 138965
IP address blocks: 154.222.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29350 (0x72a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 11:30:24 2024 GMT
Not After : Jan 14 11:30:24 2025 GMT
Subject: CN=659bdcd3-204c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:e9:19:c8:60:69:d0:dc:79:d2:80:a9:15:
86:b8:1c:cd:27:ca:af:d3:52:4b:da:ab:8a:d8:4d:
12:9b:6d:e2:1c:bc:f9:d7:f6:80:a1:93:48:32:67:
e2:7b:b4:91:67:a2:33:fa:53:1f:88:7c:30:2c:81:
76:fa:52:8a:6a:e5:70:36:9c:6a:c4:94:91:7b:0e:
d9:95:b4:d4:e4:e5:85:36:57:43:f4:2f:1b:39:45:
13:74:60:a9:67:4a:4a:52:91:2b:ee:ac:9b:1f:69:
9c:14:0d:5e:b8:31:94:9a:c3:c2:be:9a:07:f0:f6:
30:5f:a7:d9:dc:99:6d:d7:46:66:a1:71:1b:8a:1e:
57:4b:96:97:bd:e8:8b:ca:85:07:08:16:e8:89:1c:
f2:ce:4f:51:b2:39:f9:92:fa:39:25:3f:6d:d0:83:
96:e8:43:b0:e5:da:d4:f4:b1:c4:d4:45:8c:41:ad:
72:2e:a0:cb:9a:03:60:ab:6c:b5:b4:c7:4c:26:94:
f8:14:bd:16:01:2c:65:b3:fc:15:37:cd:a1:ae:b3:
51:c7:41:7b:a4:97:38:82:e0:32:c5:22:a7:39:76:
67:1a:a0:3c:cb:d2:f4:e7:fa:91:86:63:ed:60:91:
c4:c1:81:8c:8f:e5:e7:f8:05:1f:e6:0a:a7:f9:fc:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:69:47:A0:01:B1:32:CC:C5:01:6C:6A:BE:49:01:3D:D2:B3:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525CF1A2AE1911EEB305EF96775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.54.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:5d:e3:df:b5:42:f1:6a:e8:35:7e:e6:68:7e:1a:9d:f6:16:
8e:60:ce:53:37:a4:5f:2b:73:b6:78:b7:4a:63:ae:2c:de:fa:
2e:25:72:07:b5:51:4b:34:f4:f6:b0:94:e1:55:97:26:e5:eb:
77:cb:d6:92:28:d4:ff:32:60:66:0f:19:ad:fb:c0:b9:11:49:
c3:c5:68:25:0b:6d:a4:90:10:40:a5:a0:87:67:94:30:19:0c:
a7:aa:b0:59:48:a7:a3:91:6a:18:ec:7b:e8:0f:c7:96:e9:59:
fe:c4:d0:b7:d3:92:83:3d:c3:8c:a9:54:50:bb:65:6e:94:00:
36:bd:d4:bb:db:7b:6b:d0:1d:37:d1:3f:a4:06:c9:49:ca:d7:
2b:d0:ab:fa:76:73:a9:c5:17:d0:75:8f:5d:65:69:36:99:8a:
35:30:b0:d8:9c:1f:59:68:a5:83:b3:e3:e2:b7:35:4c:c2:ae:
fb:cf:16:85:32:03:b6:29:a0:72:b8:d6:30:87:40:30:33:6c:
bf:5d:18:2e:96:94:40:dc:4f:80:5d:2b:ee:f7:4b:f2:a1:e7:
c0:18:cf:aa:30:a0:9b:1b:14:e2:60:5f:22:92:82:35:41:9c:
5e:59:2b:c1:d8:2c:29:65:13:63:3b:bf:0d:c6:92:a1:31:1f:
a4:fb:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org