Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550585A2AE2011EEA89968A3775412E6.roa
File: 550585A2AE2011EEA89968A3775412E6.roa (raw, json)
Hash identifier: PXnElXm61lIAzPMAyrqARw++rD9rpdFAfZRjb/gbemk=
Subject key identifier: D5:D3:1E:1B:7A:B0:45:E4:E6:AE:51:75:F2:5E:B2:D0:0A:5F:C6:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550585A2AE2011EEA89968A3775412E6.roa
Signing time: Mon 08 Jan 2024 12:20:38 +0000
ROA not before: Mon 08 Jan 2024 12:20:35 +0000
ROA not after: Tue 14 Jan 2025 12:20:35 +0000
asID: 138965
IP address blocks: 154.222.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29394 (0x72d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 12:20:35 2024 GMT
Not After : Jan 14 12:20:35 2025 GMT
Subject: CN=659be896-2e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:1b:a1:d4:5b:e6:c2:49:5c:9e:1d:f1:9a:
ee:65:01:3f:60:75:13:1f:7e:ab:df:57:85:dc:48:
16:e6:01:45:34:06:43:bb:b1:48:c7:3d:32:1b:6b:
3f:71:49:ee:7a:15:ad:5a:d2:eb:0e:cf:19:cd:6f:
cd:d8:6c:3f:27:7b:ca:1d:05:33:5e:f7:7a:44:df:
66:9b:66:20:5b:b6:f2:57:67:7f:19:a0:7f:83:a3:
97:cd:c7:4c:a5:d3:d2:bc:4e:c0:fe:37:6a:40:d3:
e4:ad:06:06:47:ce:87:24:c2:70:dc:8a:a9:26:7a:
be:0b:b9:f3:5d:cf:fd:e1:d7:58:7b:f4:30:c8:cd:
0b:3b:38:52:67:78:b8:5d:58:ed:47:ac:8c:2a:f1:
fb:63:99:3b:b9:bf:f7:d4:b4:b1:87:fb:3d:1f:f0:
15:5b:ea:93:85:28:48:8e:36:b4:db:22:46:6d:42:
ef:68:db:2c:26:06:39:ff:f5:80:5c:bc:d9:e7:6b:
b1:fe:bb:9d:8b:41:4f:dc:ac:bd:0d:25:a0:7c:5e:
34:4c:35:47:25:17:41:a3:62:9b:88:e8:a9:8f:a2:
79:d5:f9:d7:30:85:73:43:d2:91:dd:3b:4f:b6:e0:
a5:7d:9e:fb:40:de:ec:2e:ac:a0:8b:19:ff:2a:7f:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:1E:1B:7A:B0:45:E4:E6:AE:51:75:F2:5E:B2:D0:0A:5F:C6:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550585A2AE2011EEA89968A3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8d:ad:e6:f3:fc:63:a0:bd:f5:f7:2d:a3:c1:a3:76:0b:bc:
ce:4c:8a:df:3a:f6:65:13:75:13:d6:2d:1c:c7:69:43:55:8b:
cc:51:b7:41:98:56:a1:08:94:90:74:4b:c2:4f:d1:88:07:ef:
0c:64:71:07:79:34:30:92:78:43:a8:f6:47:14:20:6d:7f:46:
89:3a:a7:eb:f7:55:70:38:61:d3:17:a2:cd:85:64:e8:d5:ec:
10:43:86:1d:ff:20:f3:93:66:49:dc:bc:22:92:86:ed:01:a1:
ef:57:a6:21:a4:05:ed:75:77:e3:26:c0:f2:d7:fa:6a:3f:23:
d9:95:3d:8c:28:36:2b:51:49:ec:62:15:2f:4d:4c:34:3f:a8:
7d:41:8b:8d:0a:54:63:31:32:0c:c8:33:57:28:63:d9:30:97:
7e:b1:15:5e:94:d1:9a:89:96:1d:ca:e3:5f:1b:7e:7f:61:ef:
2a:eb:7d:2c:e5:89:12:8b:81:6c:f7:bf:57:92:cd:b0:ed:b5:
f8:df:05:ad:55:58:27:77:63:95:f2:56:7a:8d:83:5c:ea:4c:
af:f8:0d:a5:a0:51:26:03:1d:bc:a5:f8:5a:e4:0e:6a:55:9a:
3a:5b:36:00:fe:f6:ad:85:4f:f6:7b:14:74:ca:4c:9e:ed:ba:
8a:63:ce:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org