Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39F4550AE1B11EEB384709B775412E6.roa
File: E39F4550AE1B11EEB384709B775412E6.roa (raw, json)
Hash identifier: Ow+BsmkEgAAPnJV+0lvWwUVlgFyzIYuH2AXPK90CnRY=
Subject key identifier: 9D:E3:2F:5E:33:77:E6:B9:D0:4E:54:A0:71:D5:9F:4B:97:17:25:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39F4550AE1B11EEB384709B775412E6.roa
Signing time: Mon 08 Jan 2024 11:48:50 +0000
ROA not before: Mon 08 Jan 2024 11:48:47 +0000
ROA not after: Tue 14 Jan 2025 11:48:47 +0000
asID: 138965
IP address blocks: 154.223.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29356 (0x72ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 11:48:47 2024 GMT
Not After : Jan 14 11:48:47 2025 GMT
Subject: CN=659be122-05a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:23:1a:8d:c4:14:11:0c:6e:27:ff:67:29:
0e:01:c3:5b:4c:9b:4e:e1:d0:a5:c7:af:13:e9:f5:
8d:2d:bb:a1:6e:2b:0f:33:bf:19:7b:1a:2e:55:9a:
b0:8a:fc:17:27:d4:e3:d1:f6:52:49:5b:db:a9:95:
e5:be:bb:f6:30:71:8f:5a:72:c6:a9:e3:e4:57:48:
80:c0:e1:89:b5:a3:3f:01:99:bc:5d:03:5c:92:8f:
82:59:3c:08:01:09:92:16:03:34:a7:99:19:12:86:
ec:76:1d:da:a2:42:3b:e4:46:d2:00:ce:ac:f2:8e:
3c:01:6d:72:23:70:77:0b:b7:f6:23:d8:f3:c9:c9:
b1:3a:d1:82:52:e0:9a:b8:6e:dc:30:eb:a2:49:6f:
54:c1:57:0c:3b:e2:b0:94:4c:25:85:ab:ad:89:9e:
2e:ca:d7:84:1c:f6:bc:57:84:a1:67:04:c3:79:53:
4b:ba:c4:d7:bc:59:ed:7b:82:fd:e2:de:95:66:ef:
d1:b1:ae:2c:20:ca:81:bb:14:a4:7e:7e:6c:61:ea:
56:8f:6b:f5:18:14:aa:78:b4:11:10:d2:e0:8b:d7:
11:a5:1d:c1:e5:65:2b:02:fd:0b:65:b5:20:ac:59:
b5:85:fd:cc:54:45:e9:13:3e:d1:31:69:e8:aa:8d:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:2F:5E:33:77:E6:B9:D0:4E:54:A0:71:D5:9F:4B:97:17:25:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39F4550AE1B11EEB384709B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.13.0/24
Signature Algorithm: sha256WithRSAEncryption
22:65:de:85:ca:bb:1e:d0:2b:b9:67:a5:33:18:c7:53:67:13:
21:cb:d5:00:8b:0a:b1:7d:72:d0:8f:f4:14:d3:ce:14:55:d7:
b0:50:37:fc:ca:2a:eb:0b:56:e4:97:54:dc:67:41:dc:e7:44:
0c:ef:a6:3f:f4:27:49:fa:90:02:a2:8f:93:34:7b:33:07:59:
cd:89:b4:80:c2:e6:e8:b5:3d:59:f9:9b:21:16:7c:7f:9e:6b:
f1:83:36:35:36:f4:d2:4d:38:3e:9d:2d:56:95:d5:6d:7e:d3:
f6:b3:17:bc:36:d1:de:6f:85:ad:92:3d:9f:df:af:57:fb:28:
f5:e0:0c:90:7d:0c:c4:08:46:8f:74:3f:31:2a:bc:a2:7a:51:
b5:05:79:f5:bb:da:2c:69:1c:40:ef:ee:c6:08:72:e2:f4:cd:
47:d1:43:04:69:12:ce:c6:c5:a6:3c:fe:26:da:74:ba:9f:5e:
e6:ef:dd:27:fc:b5:0b:15:6e:a2:f1:c7:7c:b3:33:f2:38:3e:
0d:b1:76:e8:80:8e:e2:bd:8a:89:6f:e7:4d:0c:cb:29:53:12:
28:f8:4a:c5:45:eb:35:b8:bf:f7:34:d5:47:d8:09:42:56:4d:
d2:a5:b1:19:17:ba:df:01:43:15:91:8b:fb:ed:23:29:e7:88:
2c:b6:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org