Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A60AB3E10DC11EEACD623284AD9E6FC.roa
File: 1A60AB3E10DC11EEACD623284AD9E6FC.roa (raw, json)
Hash identifier: 6HWYUE5v+nd9rgFPbyAf4TFONAf6mA47ZJMJ8KtaIME=
Subject key identifier: 20:33:A3:D3:53:71:46:0D:18:51:4B:B6:5F:36:C0:29:31:42:E0:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A60AB3E10DC11EEACD623284AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:06:42 +0000
ROA not before: Thu 22 Jun 2023 09:06:38 +0000
ROA not after: Fri 05 Jul 2024 09:06:38 +0000
asID: 210334
IP address blocks: 154.89.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11614 (0x2d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:06:38 2023 GMT
Not After : Jul 5 09:06:38 2024 GMT
Subject: CN=64940f22-973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:37:74:49:04:e4:d1:b0:2f:9e:83:e8:ea:
00:49:8b:f4:30:bc:61:cf:34:ae:e9:57:73:72:18:
93:57:1e:fb:62:c0:76:a2:3c:d0:fd:cd:79:5d:ea:
4c:5c:a0:b5:20:6c:bd:e2:75:77:69:de:37:0c:a4:
ce:54:fd:ee:b4:57:02:ab:c7:65:6e:0b:13:54:0c:
5f:6f:69:13:55:e9:71:f2:cf:88:33:fe:d0:54:ee:
45:cc:9c:c3:30:8e:4b:71:25:cf:fe:f1:c5:b0:e6:
da:da:70:29:4c:61:d4:74:60:d0:36:aa:3e:9b:b1:
f6:c9:13:bf:c7:5c:0f:51:62:be:27:e3:e5:72:bf:
97:b0:a3:c5:73:b3:f9:c8:9e:a1:7d:8f:25:96:1e:
5e:f9:f6:c2:ef:b7:5d:63:cc:07:b8:94:44:7b:0e:
1e:84:05:91:18:41:4d:b6:28:10:c1:dc:87:c5:65:
f7:b4:1c:8e:cb:fa:72:36:f0:52:a3:9f:79:ed:ae:
af:8b:58:10:b2:63:4a:7f:57:7d:a4:58:fd:b7:9a:
77:16:fb:04:70:6f:16:a5:79:a4:f0:de:40:92:9e:
71:af:a2:cb:9a:94:c5:ad:5d:8d:dc:a6:48:24:c8:
fb:46:00:1d:af:43:fd:80:98:eb:2e:70:d6:7d:7e:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:33:A3:D3:53:71:46:0D:18:51:4B:B6:5F:36:C0:29:31:42:E0:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A60AB3E10DC11EEACD623284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1c:65:d2:a1:ef:ef:ab:2e:8f:10:9e:ff:8f:a1:32:d7:0b:
ac:9e:09:2d:8d:d2:a3:51:9d:4d:2f:1d:92:d1:aa:7f:48:e3:
ca:87:b6:63:ef:b4:6f:5d:ae:a9:d9:62:43:1f:ee:24:82:87:
5e:05:60:67:c7:72:15:ba:72:b3:84:a6:1f:89:23:05:fb:4b:
c6:5b:3b:eb:75:6c:85:81:8b:12:1b:d9:c0:2a:41:75:c4:4f:
a8:a0:9b:6d:fc:43:5a:ed:e6:67:c5:c4:a8:e3:35:5b:19:0d:
d2:01:e0:9b:cd:63:34:f7:9a:4b:5c:ac:49:74:35:2a:df:be:
b8:7d:be:69:a3:77:5b:8d:2c:81:5b:67:96:32:3a:3e:8d:80:
89:f9:3e:fd:e4:4d:f9:21:52:24:08:6f:ff:85:3d:3a:7a:db:
92:38:d1:35:24:f8:0d:6b:ba:4f:7c:5e:29:45:e2:56:d7:fc:
0e:a9:f5:21:79:6d:43:2e:9c:d3:47:78:e1:0b:72:f6:1b:04:
f3:09:36:ac:a0:c0:10:80:25:2f:21:9b:36:4b:63:e0:f7:f9:
1e:03:76:cb:19:f6:c4:33:9f:7d:1e:af:c6:78:de:87:d9:0a:
4c:df:60:b5:2f:a2:7d:bf:1a:4a:2d:47:8a:e7:4d:14:47:8c:
ca:4f:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org