Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58B85F74AEC711EEA985FB55775412E6.roa
File: 58B85F74AEC711EEA985FB55775412E6.roa (raw, json)
Hash identifier: Q0iCcS65cY0glOTqkYuL3EltTtzLu4WYfBtwkgZYUKw=
Subject key identifier: F5:05:AD:CE:42:B6:52:1C:AF:B5:AF:FB:AB:87:37:51:EB:94:AC:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58B85F74AEC711EEA985FB55775412E6.roa
Signing time: Tue 09 Jan 2024 08:16:10 +0000
ROA not before: Tue 09 Jan 2024 08:16:07 +0000
ROA not after: Sat 11 Jan 2025 08:16:07 +0000
asID: 138995
IP address blocks: 154.198.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29401 (0x72d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 9 08:16:07 2024 GMT
Not After : Jan 11 08:16:07 2025 GMT
Subject: CN=659d00ca-3416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:ea:ee:ab:5e:4e:1e:a9:b3:65:a5:3e:99:
55:d4:ec:d7:0d:55:72:79:24:11:2b:67:36:49:08:
d1:44:12:4d:7a:59:d3:51:92:17:2c:fd:8e:0c:42:
0b:49:bb:63:35:9f:c7:21:0f:f3:67:21:4d:e7:d9:
93:47:eb:7e:95:c4:6c:e8:ff:f2:94:60:72:e1:e6:
39:43:85:19:ba:fb:b8:74:67:63:c9:8d:d0:d3:3c:
fb:b5:4b:34:72:2d:dc:08:53:66:a8:f5:8d:eb:72:
92:66:94:8f:45:1b:51:69:d2:97:1d:07:41:a9:57:
1e:24:3e:9f:b3:c7:ce:a9:dd:4f:d7:47:5b:88:b7:
13:fc:b2:6a:ee:53:80:7a:53:32:a2:48:2c:30:a1:
1d:94:d7:04:96:c0:cb:7b:9b:13:55:a3:52:f1:48:
0c:3a:87:d9:9c:b8:03:b8:f9:c3:88:1c:d9:e3:8f:
82:82:bb:f8:f1:60:e9:b0:0a:72:59:c8:dc:49:45:
b9:53:ac:25:86:e2:92:45:28:bf:b0:1c:cb:18:ef:
df:40:31:8c:25:34:42:1e:eb:2f:29:50:df:b3:0c:
3d:f8:aa:b7:6a:2e:f1:3a:a3:df:99:d0:ca:f4:46:
be:b1:8f:6b:59:5f:da:3f:d9:db:25:b9:be:8b:82:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:AD:CE:42:B6:52:1C:AF:B5:AF:FB:AB:87:37:51:EB:94:AC:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58B85F74AEC711EEA985FB55775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.55.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ea:c9:64:5a:31:cc:57:c1:56:c7:ee:ef:ca:cb:b3:31:51:
b0:9c:56:6a:68:ed:b2:28:a7:96:97:24:a3:ba:5d:cc:6b:ac:
1a:8f:6c:49:3b:32:38:42:5b:0e:68:37:03:b1:5c:6c:6a:ba:
b8:e1:f3:03:b9:3d:5b:14:42:b9:35:86:71:26:24:75:20:ce:
0e:af:76:88:bc:fb:0b:1c:f8:10:c5:92:16:b4:cb:97:ca:69:
89:ba:1b:75:0e:53:95:50:b1:3a:3d:b5:2a:05:a5:f3:03:3e:
40:e4:c8:d4:38:80:71:59:15:24:97:e6:a2:e0:ea:8b:81:00:
5a:68:3f:37:86:ae:fc:af:32:74:c8:8c:1b:67:76:ba:8b:f4:
d3:15:88:d8:b5:24:a5:e4:66:28:92:40:9f:be:4d:c8:26:b0:
82:c0:ea:48:cd:96:2d:f4:38:5a:4b:dc:f8:fa:46:19:e7:27:
85:fb:d5:39:a0:ff:8e:48:53:15:b4:08:56:a3:1f:1d:40:4e:
f4:38:33:8a:ad:2b:86:7f:c7:c9:d8:74:a9:2b:47:89:2d:69:
1d:a6:6b:98:38:89:bb:23:58:8b:7a:d8:86:21:33:2c:17:97:
54:34:f3:4a:0c:5f:e3:4c:fb:d2:43:10:e0:7e:2e:2f:70:38:
8e:38:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org