Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335BEAA6022411EF8FD8EB58017001B1.roa
File: 335BEAA6022411EF8FD8EB58017001B1.roa (raw, json)
Hash identifier: 4gY9sjDxDjj5KseRH2AEdvc2dIJ6POnccZg56zLxHfA=
Subject key identifier: 20:A2:0E:DB:F4:E3:17:64:E3:0C:FC:44:F5:B1:AE:81:CA:7D:D2:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B026
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335BEAA6022411EF8FD8EB58017001B1.roa
Signing time: Wed 24 Apr 2024 10:19:58 +0000
ROA not before: Wed 24 Apr 2024 10:19:54 +0000
ROA not after: Thu 12 Sep 2024 10:19:54 +0000
asID: 135097
IP address blocks: 154.89.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45094 (0xb026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 10:19:54 2024 GMT
Not After : Sep 12 10:19:54 2024 GMT
Subject: CN=6628dccd-343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:a4:60:86:56:41:35:a7:e8:6c:51:3f:a5:
b9:fc:21:23:69:46:13:cb:c9:ca:55:af:91:a6:1c:
fb:23:af:2b:26:3e:80:e6:09:0f:a6:ce:ed:c7:94:
8d:0b:17:1e:39:5b:b5:e8:75:1c:b4:68:4a:65:91:
15:c0:47:6d:f8:f1:40:b2:e9:64:a6:7a:92:8d:7e:
67:ff:49:5c:6c:dc:3b:92:af:12:09:5d:08:27:6f:
95:58:e4:bc:a8:c5:e9:c9:7e:38:48:55:d7:9b:18:
54:83:39:f6:b7:f9:ae:b6:e1:cb:dc:f8:ae:b1:ec:
46:eb:fa:e1:2b:2c:04:92:90:51:d5:92:e1:28:c2:
8d:10:b1:76:fc:4e:19:5c:e7:ef:42:99:ec:59:9c:
41:41:73:98:03:7d:06:5f:04:99:f7:5d:ad:a9:15:
7f:f3:e6:ca:1e:06:74:cc:0d:bd:99:4b:2d:f8:8e:
b0:42:da:f6:fc:4a:9a:43:f0:12:00:a3:ab:6f:9b:
9c:de:2f:71:7c:18:10:50:1d:78:a0:1e:38:84:2f:
b4:ee:03:7b:61:2d:79:5d:a6:82:9a:c8:ab:83:15:
f3:4a:76:ea:55:17:d8:8b:be:31:58:49:62:5a:2c:
2c:e5:71:cc:44:01:01:43:55:2f:ce:d8:a7:6f:0a:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A2:0E:DB:F4:E3:17:64:E3:0C:FC:44:F5:B1:AE:81:CA:7D:D2:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335BEAA6022411EF8FD8EB58017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:83:00:29:f4:7f:95:1a:d3:a7:8f:3b:fa:f9:63:95:4e:7a:
c8:a3:3a:8a:07:7e:e9:ce:57:4d:57:67:41:0a:d1:5e:bf:87:
e8:72:1e:60:5b:72:bb:d7:55:60:8b:bf:25:ae:d6:43:33:c0:
64:23:f6:da:a2:1a:47:6a:b1:bd:f5:f8:db:a1:f2:c0:72:3e:
a3:cb:cd:df:97:73:d4:97:b2:cc:d1:14:f4:69:37:53:10:bd:
0e:1d:d1:de:11:4c:9c:af:07:fb:9b:77:e9:7e:71:0c:0f:53:
93:e1:be:3c:20:7a:e1:77:db:28:57:ad:4a:8a:1c:43:26:c2:
23:e5:6e:01:1b:f3:e4:c3:f4:b4:65:af:5c:79:31:99:75:8f:
b6:87:41:6c:10:59:e3:19:45:0d:83:ee:9a:4f:b2:35:ed:2b:
4c:ce:b2:91:b6:cd:96:00:73:54:3e:c1:73:93:56:3e:32:d3:
09:d1:3e:30:29:4a:bb:27:d1:42:c9:88:75:42:92:a8:3d:01:
c4:9b:83:fb:1e:07:e2:27:51:08:24:16:3a:31:a3:85:69:d8:
3b:a6:f2:97:77:a7:18:87:7f:c8:36:5f:35:77:32:28:a2:29:
7a:29:a9:c4:c5:c3:4e:6a:a1:79:77:87:e3:f5:e3:38:a4:d8:
93:75:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:20 2024 by rpki-client on console-ams.rpki-client.org