Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05AFFD32EDBA11EE990B7EC2775412E6.roa
File: 05AFFD32EDBA11EE990B7EC2775412E6.roa (raw, json)
Hash identifier: acDVntVksQmjR8WGq42KNnc4nQEGVMCfTjyyPk01jrg=
Subject key identifier: 0E:A4:A5:FB:46:75:13:0B:67:1F:93:78:F6:6A:DD:58:F4:DA:FB:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A743
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05AFFD32EDBA11EE990B7EC2775412E6.roa
Signing time: Fri 29 Mar 2024 10:49:31 +0000
ROA not before: Fri 29 Mar 2024 10:49:28 +0000
ROA not after: Sat 04 May 2024 10:49:28 +0000
asID: 142062
IP address blocks: 154.86.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42819 (0xa743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:49:28 2024 GMT
Not After : May 4 10:49:28 2024 GMT
Subject: CN=66069cbb-0d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:8e:37:8c:07:ba:5d:f4:93:f7:26:2d:8b:
65:79:1c:9e:d6:e0:51:cd:2c:5a:e6:49:00:b8:f3:
5c:77:b3:9b:c0:03:5a:30:27:61:fd:d0:b9:4e:04:
64:85:3c:7f:3e:44:66:41:24:6d:6f:82:0a:d7:6d:
28:22:e4:16:f3:89:3c:95:af:7b:39:a1:bb:4a:0f:
a6:49:65:2d:82:2a:69:d8:f5:af:69:8d:45:3b:5a:
7c:3d:20:ad:cc:0c:8f:cc:6f:de:89:18:a5:d5:06:
51:a4:50:7f:70:13:0f:44:5e:da:43:f3:c6:a3:61:
7d:57:a7:66:d5:1f:cd:4a:8d:03:26:fa:f9:74:38:
18:d4:7c:2d:91:1e:39:f3:53:d8:be:f6:df:38:ed:
e5:f8:44:15:c7:21:5f:91:42:74:23:f5:ec:a0:68:
90:c9:75:9c:6b:8a:7c:a7:e9:6f:76:d0:f0:c7:dd:
5b:c6:35:ca:22:04:32:14:d9:c5:3a:18:22:28:18:
38:ad:a6:1b:fd:cf:bc:3f:c8:00:21:1e:e1:80:7e:
23:b9:9b:9a:fa:19:db:1d:c3:ea:6d:0b:ff:30:d7:
6d:80:16:c4:cd:6c:42:3d:e3:83:07:90:de:ab:48:
09:90:c4:8c:64:7d:2c:a1:27:75:e3:ed:fc:a3:63:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A4:A5:FB:46:75:13:0B:67:1F:93:78:F6:6A:DD:58:F4:DA:FB:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05AFFD32EDBA11EE990B7EC2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.89.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b4:0a:e9:72:25:a6:31:b3:a5:ff:e9:22:f1:0d:a4:01:ac:
74:b7:2b:77:4f:27:e9:1b:5e:ef:91:2c:9f:15:33:d4:99:6a:
f6:c5:d0:68:a3:31:e4:9e:40:2a:34:b1:9a:19:85:90:a4:1a:
4f:f1:73:d9:e1:f7:bc:cc:f6:79:e0:9c:61:5e:45:f4:de:e6:
5a:e4:a5:e4:51:75:85:f8:87:a9:73:1a:f1:f9:2f:c5:ab:e7:
a9:da:69:dc:28:f0:3a:24:d5:7a:5f:a3:88:63:bb:d0:27:5c:
02:a8:a5:5b:ac:06:34:21:97:1a:5e:12:9d:f0:e8:ef:97:18:
ca:89:39:bf:6d:db:e3:8b:f3:3d:fe:58:d0:8a:e8:1a:16:f2:
8c:44:ec:7b:d5:5b:65:9e:2d:33:d0:70:7f:30:eb:7f:29:f7:
93:26:61:35:aa:ff:58:4e:14:0e:f6:bb:0a:c3:12:a9:24:73:
7c:cb:78:c5:e1:63:03:0b:2c:4e:0f:94:75:88:8c:f5:8a:75:
30:48:9c:68:33:48:3f:9f:f1:2a:7e:d7:71:26:0b:f4:ec:9c:
df:85:ed:b8:4d:47:8d:be:53:ce:c9:88:23:86:88:5a:4d:4c:
f9:1e:9f:69:a2:72:ea:c1:4d:db:8c:e8:c2:d9:9b:73:3e:f8:
4a:07:3e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:01 2024 by rpki-client on console-ams.rpki-client.org