Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC96D3E6E75F11EE9B0E388A775412E6.roa
File: CC96D3E6E75F11EE9B0E388A775412E6.roa (raw, json)
Hash identifier: Q/gHLGPqpIIjQJmfjUOIp/R84UrxA5R3q6Vhb34+sTg=
Subject key identifier: 2F:CB:C9:45:EE:82:4B:9B:B4:22:E5:97:AB:E0:DB:2F:B7:E3:85:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC96D3E6E75F11EE9B0E388A775412E6.roa
Signing time: Thu 21 Mar 2024 08:48:34 +0000
ROA not before: Thu 21 Mar 2024 08:48:30 +0000
ROA not after: Tue 23 Apr 2024 08:48:30 +0000
asID: 44559
IP address blocks: 154.222.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42239 (0xa4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:48:30 2024 GMT
Not After : Apr 23 08:48:30 2024 GMT
Subject: CN=65fbf461-92dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:74:a7:91:9c:54:a1:0a:82:70:33:ac:99:
8b:01:69:90:08:9f:e5:bb:bd:ff:4a:7c:50:56:d5:
9f:37:83:84:c5:ab:d9:ad:58:2f:d1:87:5d:0c:8a:
25:f7:28:76:21:dd:9c:00:eb:b6:91:99:18:a7:60:
ed:f9:aa:dc:9f:98:63:65:aa:d7:2a:9d:4c:01:c4:
33:63:cb:f8:d4:1e:5f:44:cd:3e:57:55:19:e4:38:
ad:4d:0f:78:ec:9a:70:34:a0:b1:50:5f:21:02:0a:
f9:29:e1:93:12:ab:ea:2e:59:0a:a8:ef:ff:e6:77:
55:c1:c9:6a:ba:e3:a4:4c:0b:5c:2d:bd:a4:53:aa:
c9:d1:80:49:67:fc:4a:c6:f8:95:d0:d8:c8:ee:20:
d1:63:1d:50:a8:06:d3:23:57:0d:2b:45:4e:f0:8d:
6b:68:f6:73:59:90:ac:be:31:f3:ac:08:56:73:c8:
01:14:15:f2:c3:b2:4b:ed:9e:34:40:f1:3a:9c:08:
79:95:ea:3d:75:28:88:e9:f7:8d:f6:fd:02:b7:0d:
fd:e4:00:a0:5c:51:39:b6:a9:fe:2d:f1:cc:69:18:
34:33:69:83:fc:c5:cf:a4:96:ba:5b:4b:d0:68:82:
01:d3:ef:ef:0a:f6:fc:9a:76:1c:30:25:cb:9e:e1:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CB:C9:45:EE:82:4B:9B:B4:22:E5:97:AB:E0:DB:2F:B7:E3:85:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC96D3E6E75F11EE9B0E388A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d6:d8:da:d5:ad:6e:1e:27:84:d6:34:0d:bf:f4:0d:24:98:
f1:0a:c8:f9:88:61:89:9b:ad:a7:c7:c4:04:8a:a4:a5:2c:0c:
2c:bc:05:48:9b:b5:26:80:97:67:0f:50:cf:ae:a4:f3:a0:1f:
69:c0:7c:36:11:41:b7:13:53:51:bc:dd:df:32:62:95:18:a8:
86:31:20:44:5b:db:16:27:a1:89:14:59:85:81:25:62:eb:6e:
49:d9:c2:e2:22:97:60:35:e4:2d:a3:ce:6e:35:d6:e2:fa:10:
6f:a4:a5:20:43:3d:fa:38:a1:9c:65:90:12:47:6b:91:f7:b5:
39:49:e8:0e:64:be:3c:23:55:b9:81:86:23:ea:40:66:e6:0f:
3e:7d:ab:b3:b5:7f:27:9d:4c:5d:ae:a0:48:02:6a:08:33:8a:
38:b4:43:d6:ad:05:f9:2a:93:a3:47:25:a3:58:80:26:38:05:
76:10:95:f6:3d:01:59:84:a1:23:8f:3a:bc:bc:b6:96:79:c7:
cf:d0:6d:1f:d4:26:bf:18:c9:78:df:76:30:7e:45:26:37:15:
cf:33:14:a7:f0:79:f6:0f:b8:f3:14:90:d3:77:02:ce:47:54:
d5:30:0e:71:2e:1e:86:98:de:a5:92:3e:e1:3f:00:91:85:c7:
dd:2f:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org