Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55229DD89EAA11EFAC3B428F762E951A.roa
File: 55229DD89EAA11EFAC3B428F762E951A.roa (raw, json)
Hash identifier: rsqyEWaZZCjnNx2ThuruUJqjAyCQexleCRwABOx0eKo=
Subject key identifier: 2A:C2:5C:05:C0:D3:39:8A:A9:F3:6F:6F:7A:3A:02:81:55:78:BB:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55229DD89EAA11EFAC3B428F762E951A.roa
Signing time: Sat 09 Nov 2024 14:53:08 +0000
ROA not before: Sat 09 Nov 2024 14:53:05 +0000
ROA not after: Mon 07 Apr 2025 14:53:05 +0000
asID: 267834
IP address blocks: 154.198.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68115 (0x10a13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:53:05 2024 GMT
Not After : Apr 7 14:53:05 2025 GMT
Subject: CN=672f7754-12cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:b3:5d:3c:fd:9a:d1:eb:2d:ab:34:3b:23:
49:45:7b:c3:34:ea:58:96:b9:7a:19:cc:74:a3:4c:
bb:b0:8c:2d:3d:01:14:64:a6:0a:f3:05:13:d4:4f:
3d:01:d9:e5:20:ae:a2:57:d6:3c:1a:83:62:d4:57:
0f:62:95:cc:4a:64:9b:7d:5a:a0:19:56:b1:50:53:
0c:41:98:68:71:1e:c1:07:24:ed:2c:a1:41:23:1c:
70:0b:a7:41:ac:44:4d:6f:1d:2a:5a:50:90:0d:57:
15:b7:7e:aa:7a:a8:52:5e:4f:68:12:f5:8f:03:1f:
92:6e:b8:f9:17:9a:11:7d:fb:37:35:e1:9c:5d:74:
7f:9b:3b:50:ad:db:bf:a3:bd:f6:08:e0:2a:41:af:
44:e5:f5:31:b1:f5:b2:94:18:f1:11:3f:41:44:c3:
6a:41:0b:0c:aa:45:da:ef:11:d9:a4:6e:ac:6b:6e:
fb:72:0d:de:ed:a0:a9:fe:00:8f:39:8d:0e:80:ee:
e0:01:cf:37:9d:a1:4c:9e:74:24:88:c4:5b:50:28:
0c:f2:87:b9:c1:63:ef:3c:ab:e3:0b:87:22:bb:2b:
90:26:ae:0c:17:7b:b6:50:17:21:63:da:91:b8:ef:
8b:59:e9:e8:01:71:17:c7:60:a8:b3:dc:e0:8a:2f:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C2:5C:05:C0:D3:39:8A:A9:F3:6F:6F:7A:3A:02:81:55:78:BB:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55229DD89EAA11EFAC3B428F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:33:11:b0:70:8b:b2:a6:43:15:d5:28:09:79:15:1c:f9:74:
47:f1:ea:4f:72:4d:15:a7:b2:aa:c1:d4:67:26:5c:d0:bd:70:
4d:e8:d5:08:fe:92:80:11:3f:6e:3c:e5:1e:ae:f4:4a:89:3c:
a0:ca:d2:31:d4:e3:a1:b3:bb:fe:c7:b1:ad:1e:0d:15:42:49:
b6:4c:04:2b:6e:6c:23:50:1a:b3:b7:e6:0d:06:53:eb:2a:df:
06:38:f9:47:f6:88:96:5b:9b:2c:a2:bb:9b:61:fe:d8:d7:df:
31:46:0a:4c:0d:ee:c3:a3:52:af:34:47:f1:89:7c:e9:2a:fa:
80:98:2c:ce:06:94:10:9d:90:a5:bb:ab:d1:c3:d2:20:db:9e:
3d:09:a3:ab:32:eb:5b:e1:ce:3f:91:c8:fb:70:9f:b5:22:f7:
9f:4e:26:d1:17:43:01:f2:26:f4:49:48:df:df:19:99:0c:07:
41:56:6b:5d:89:04:53:f5:7a:df:9b:b2:13:e8:ab:4d:3b:3a:
2b:74:54:d1:1f:91:4a:0f:e5:a9:17:2d:07:17:37:d9:30:2b:
8e:61:64:f6:1e:f0:0b:a9:b6:44:67:fc:90:61:76:af:03:8b:
f2:77:17:64:42:64:7c:b9:fe:d6:c2:f4:98:de:93:c8:34:4f:
98:81:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:04 2024 by rpki-client on console-ams.rpki-client.org