Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5AF2AC2EFF111EE87122C9C775412E6.roa
File: A5AF2AC2EFF111EE87122C9C775412E6.roa (raw, json)
Hash identifier: IhkGiZi6BJr+JEfFwdvCfDKdLMdYS5wrcVyqTa86RTA=
Subject key identifier: 85:BF:BE:40:8B:96:5A:AF:5B:25:05:64:D9:22:A5:F8:FC:41:BA:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5AF2AC2EFF111EE87122C9C775412E6.roa
Signing time: Mon 01 Apr 2024 06:32:44 +0000
ROA not before: Mon 01 Apr 2024 06:32:41 +0000
ROA not after: Tue 07 May 2024 06:32:41 +0000
asID: 138915
IP address blocks: 154.223.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42946 (0xa7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:32:41 2024 GMT
Not After : May 7 06:32:41 2024 GMT
Subject: CN=660a550c-1894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:af:72:4c:af:8d:0c:75:11:5d:5b:72:8f:
42:6e:85:d8:63:db:a4:c0:59:eb:c5:f3:5c:95:4c:
ee:d1:7f:8e:7b:d1:7a:de:81:54:ae:58:67:c6:38:
e8:31:b9:ea:93:12:45:44:9e:62:80:90:ed:df:4e:
dc:e4:6b:c4:37:ac:20:3b:c6:fa:74:6d:90:a1:44:
fe:f9:b8:b1:09:91:c0:6e:73:a8:0c:d1:84:a3:1f:
0d:8e:0c:68:28:2d:29:b4:9a:29:6d:3d:d4:a2:dd:
0d:a6:d8:3c:b5:c4:79:c4:6e:ad:a8:d6:08:0b:8c:
32:96:f4:95:62:04:41:f7:05:f2:1b:d2:41:bb:7f:
f3:5a:27:3d:d9:0b:00:56:a2:3b:e0:18:25:b8:7b:
be:0d:82:e7:35:1e:a8:19:33:18:a8:c8:60:a1:ea:
4b:1f:d8:b3:dd:58:24:6e:f0:67:ea:7f:ab:ac:67:
46:63:28:12:f8:2c:4f:70:ca:95:62:9b:41:bd:ed:
d1:ca:17:d6:b0:9b:bc:ba:d1:ca:e9:04:b7:98:66:
3f:92:09:b8:16:22:3c:22:a6:67:04:5e:04:e6:e3:
d4:26:d7:79:0c:a7:98:f6:c4:3d:cf:f4:56:10:77:
ce:59:b2:d1:4f:b1:4f:a0:98:a1:d3:71:e4:22:80:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BF:BE:40:8B:96:5A:AF:5B:25:05:64:D9:22:A5:F8:FC:41:BA:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5AF2AC2EFF111EE87122C9C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7f:98:32:4f:ae:3e:15:80:16:23:d1:46:34:93:e6:93:be:
0e:40:b9:a2:8e:76:fa:3b:ff:86:58:4e:fb:c4:9d:ae:54:23:
a1:b1:d1:8c:b0:b0:98:8a:90:a0:e3:64:57:9e:45:3a:84:da:
ef:c3:75:1a:5b:45:3d:17:fb:e8:ed:ed:0b:91:e5:13:30:ec:
71:c9:ca:d5:e5:5d:e3:62:a1:95:f8:d3:53:2d:57:03:73:7e:
8e:17:6a:91:88:d1:19:df:2f:21:7f:b7:f2:9a:50:93:b4:c9:
dd:ca:b6:52:80:6e:fc:a3:dd:9a:27:ac:f1:a6:09:5e:63:ca:
5f:38:e6:bb:62:7b:2d:38:20:25:d6:c7:40:88:b8:35:45:66:
87:af:83:b8:91:f9:1d:57:bc:05:ef:86:17:67:72:06:a1:ef:
84:96:87:6f:83:41:aa:16:33:4e:3b:84:6b:ef:30:04:9e:e0:
74:84:4f:c8:8f:f5:54:72:3b:8d:bf:e2:85:94:b8:ee:bc:3a:
ef:06:e8:7d:77:4c:99:42:57:65:34:07:d4:8d:06:1e:ae:7e:
3e:d6:2f:1d:0a:9a:4b:c8:ab:12:f9:8a:e6:ef:df:2a:1f:4b:
6c:56:f5:c6:1d:a1:f0:b5:ed:e3:10:49:de:35:bf:08:66:b5:
09:2c:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org