Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3FC9870AE1E11EE8FA68AA0775412E6.roa
File: D3FC9870AE1E11EE8FA68AA0775412E6.roa (raw, json)
Hash identifier: bpG5B6RtBNo0gjnN2CCjQw15gQkFSVDr80zxFqxbzsw=
Subject key identifier: 29:35:2B:7F:F8:1D:FD:87:DA:01:5B:CB:D4:C5:68:47:71:13:7F:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3FC9870AE1E11EE8FA68AA0775412E6.roa
Signing time: Mon 08 Jan 2024 12:09:52 +0000
ROA not before: Mon 08 Jan 2024 12:09:49 +0000
ROA not after: Tue 14 Jan 2025 12:09:49 +0000
asID: 138965
IP address blocks: 154.222.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29382 (0x72c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 12:09:49 2024 GMT
Not After : Jan 14 12:09:49 2025 GMT
Subject: CN=659be610-69d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:56:30:c8:5b:5c:42:ed:19:1d:aa:7a:5a:
71:a8:ea:f6:b6:a1:ec:45:0b:d2:3c:0e:10:b2:6d:
2c:36:10:f2:a0:a5:a7:b7:fc:b4:ff:d3:ec:14:75:
53:f2:d3:fa:23:99:ad:49:04:d2:d6:60:84:75:91:
28:3d:68:3c:7b:24:d1:19:78:fe:7b:6d:f6:19:21:
c6:69:28:f2:87:6c:f8:01:34:49:4b:e7:76:69:92:
bb:4e:fe:12:0b:f7:a1:3e:fe:49:58:24:4c:44:8a:
53:77:76:fd:7f:14:a1:66:37:30:a6:08:93:18:89:
68:e7:59:fb:67:a2:ba:37:22:c1:ec:af:96:61:df:
58:20:ea:02:59:7b:70:c4:83:5c:5d:7e:0e:43:98:
8d:36:e3:49:08:b5:c5:bb:ad:fb:09:2e:ab:bf:58:
7c:7b:f5:59:71:a5:58:fd:41:ef:a6:e3:74:dd:7a:
4f:82:93:2f:ad:f4:18:ac:60:17:f8:22:0c:fb:42:
e1:d8:9c:17:02:21:43:f9:74:f6:d3:f6:9e:4c:1c:
1a:20:45:7e:89:b9:f1:1d:ad:48:35:41:5e:97:da:
02:35:20:84:e1:a7:36:1d:a5:14:53:64:96:27:7b:
c5:3a:7d:28:72:e1:82:64:a5:83:52:29:98:7a:ca:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:2B:7F:F8:1D:FD:87:DA:01:5B:CB:D4:C5:68:47:71:13:7F:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3FC9870AE1E11EE8FA68AA0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:5b:7d:a6:da:9f:ed:16:30:aa:e6:a1:d8:84:bb:d6:14:27:
83:e6:0f:e4:54:99:79:45:6e:ed:f9:db:79:a3:1b:68:15:f1:
16:07:b4:01:4a:27:be:12:49:69:a9:50:d8:f3:eb:79:d9:00:
d8:2f:2c:77:b7:55:54:a3:18:04:49:35:07:e8:4b:75:da:26:
14:8c:c8:13:e0:e3:d9:d6:0d:20:f7:b9:43:da:26:d0:bd:5f:
f7:8f:ea:1b:46:5b:e8:53:97:47:48:78:05:68:17:05:2f:64:
4d:82:eb:9c:3d:c7:5a:f5:4c:36:2a:bd:e3:33:82:a6:a1:00:
df:51:a2:32:16:23:2f:6d:6a:be:c4:59:7e:8d:c7:03:0b:79:
21:f1:0e:63:4a:f4:f9:74:f7:71:84:cd:d6:63:51:b1:20:a9:
90:b4:93:d9:f0:c1:f8:b2:8d:2e:98:83:85:ff:f8:1c:33:fd:
d5:c9:b0:d5:74:70:80:7b:6a:b6:1b:05:61:80:0f:53:ce:87:
2d:ec:c1:85:73:9f:15:55:59:ce:91:78:99:b7:85:84:75:4d:
0a:e9:81:f4:ce:2e:ee:7d:1e:9a:4f:cf:72:47:d0:7a:2d:07:
db:e0:e0:27:7b:26:16:09:23:e6:1a:7d:73:7b:74:3c:7f:cb:
8c:c7:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:29 2024 by rpki-client on console-ams.rpki-client.org