Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAE75CEED0111EE82830D9F775412E6.roa
File: CEAE75CEED0111EE82830D9F775412E6.roa (raw, json)
Hash identifier: ZIGtqXEgjNnyxmE3h2TYjqT7arP764lmkAxKaCXCWGo=
Subject key identifier: 4F:A0:76:C0:8F:04:0A:A7:42:57:D5:6D:D3:E0:60:16:94:2D:35:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAE75CEED0111EE82830D9F775412E6.roa
Signing time: Thu 28 Mar 2024 12:50:51 +0000
ROA not before: Thu 28 Mar 2024 12:50:48 +0000
ROA not after: Sat 15 Mar 2025 12:50:48 +0000
asID: 139265
IP address blocks: 154.89.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42722 (0xa6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 12:50:48 2024 GMT
Not After : Mar 15 12:50:48 2025 GMT
Subject: CN=660567ab-3923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:db:29:15:56:e8:73:a3:f0:73:4a:f3:31:
b5:dd:88:7f:d2:2e:ad:19:67:df:87:25:fa:1e:09:
46:c0:fb:66:e5:61:f5:a4:95:af:9d:fa:85:29:28:
68:93:1f:9b:94:8f:5e:45:ad:e3:fe:7b:0b:87:13:
26:62:36:05:af:57:f8:57:64:94:db:bc:bf:fe:0e:
90:3b:dd:d0:11:f9:83:55:07:9e:59:e7:4b:47:74:
04:90:86:f8:6d:e6:cb:de:d9:a1:9b:60:99:b4:6b:
60:cd:4c:fb:fe:5e:96:95:8f:7d:39:9c:4a:29:ea:
c3:d0:28:3a:1f:3d:10:1a:0a:a0:3d:db:fa:a2:e0:
11:af:56:5f:24:a1:99:13:a0:1a:4c:96:b0:9f:41:
a4:71:e7:f0:48:ec:b6:f6:74:92:d7:49:de:3f:86:
94:e1:b8:f8:be:61:f4:90:65:65:81:38:86:a1:04:
4a:08:7d:44:5d:33:23:cd:c8:8c:7b:48:a6:d4:2c:
af:a7:4a:c6:30:65:8d:c5:34:fc:37:7d:a3:7b:81:
f5:18:5c:48:08:8d:e5:dd:7e:ce:14:12:fd:7d:83:
17:4f:bc:ee:f8:08:90:2f:fe:b6:1d:42:7a:54:d2:
30:f4:cc:53:ab:14:79:7d:15:a2:73:41:fa:48:3a:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:76:C0:8F:04:0A:A7:42:57:D5:6D:D3:E0:60:16:94:2D:35:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAE75CEED0111EE82830D9F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.8.0/22
Signature Algorithm: sha256WithRSAEncryption
20:86:12:d6:0e:7b:97:b5:5b:32:92:e9:10:eb:62:ae:bc:65:
12:67:1d:74:45:95:41:d6:bd:84:0b:79:c8:37:c5:1b:97:ad:
7e:8a:ef:2a:54:b3:1f:c9:52:66:ec:25:92:99:8e:50:28:fb:
5e:d4:95:c8:48:c5:7e:67:d3:ec:e8:c2:7b:1d:bd:7e:0d:b5:
1d:31:61:37:00:f7:22:a9:92:05:d4:43:c2:9a:b2:7c:c8:1f:
d8:34:f0:76:7c:2d:38:0a:e3:c1:e4:9a:21:d2:e5:cd:4b:f4:
60:d1:70:31:06:32:b4:20:2c:7d:6f:5b:ff:f8:61:c8:3e:cc:
7d:09:a6:f8:1b:88:a7:d5:75:61:6a:07:75:96:11:fc:8e:c5:
da:e9:ae:e3:59:b2:40:0d:15:bc:3b:4d:7d:5f:d0:f4:d4:0d:
cd:9e:50:56:90:25:19:1b:e6:a1:be:86:4b:2c:3f:e9:16:29:
ae:be:b8:4a:e5:30:46:e5:c5:55:c6:32:51:f5:e6:f0:6c:25:
44:36:37:1a:b7:d9:cf:da:10:e1:11:d9:be:d8:d7:e5:18:3f:
54:aa:9d:51:58:b7:1f:29:dd:d8:43:46:e2:68:93:95:95:e2:
54:b8:a1:11:88:91:4c:b7:00:60:b3:72:ee:1a:50:1b:d6:4d:
2b:e6:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org