Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AB9DA0C10DB11EE801743254AD9E6FC.roa
File: 1AB9DA0C10DB11EE801743254AD9E6FC.roa (raw, json)
Hash identifier: Gd0rCN43Dsgube3I6FHxCQ8odR+HLDhqIvr7D1K+J5o=
Subject key identifier: 57:61:65:E6:61:CD:A5:E9:B8:BA:A5:23:69:ED:73:91:F7:FB:D5:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AB9DA0C10DB11EE801743254AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:59:33 +0000
ROA not before: Thu 22 Jun 2023 08:59:29 +0000
ROA not after: Fri 05 Jul 2024 08:59:29 +0000
asID: 210334
IP address blocks: 154.89.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11598 (0x2d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:59:29 2023 GMT
Not After : Jul 5 08:59:29 2024 GMT
Subject: CN=64940d75-964a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:1c:c3:0b:0b:ea:df:8a:ff:ed:06:f8:13:
1f:1c:49:29:56:43:d7:b1:17:93:b2:c0:36:bf:14:
c1:a3:72:a2:17:fc:a9:e2:35:3c:bc:f6:ec:93:e2:
23:f3:70:6a:64:9b:f4:24:b8:f6:c0:2f:5b:a2:35:
d9:fc:41:c7:ce:c4:47:67:88:0e:e6:d7:27:6f:ed:
74:b6:fe:91:6b:ce:4c:34:ac:86:b9:dd:46:45:59:
07:7b:28:fa:27:8d:d1:49:52:e7:07:5b:aa:9e:dd:
2f:09:a0:15:47:e4:71:9f:f5:6a:35:73:76:a1:1a:
b1:11:e9:9a:9a:1c:b9:76:2b:dd:ce:d8:16:5d:6f:
1e:bd:8a:de:aa:d9:c3:29:d0:63:ed:5b:cd:4c:5c:
26:56:a2:9f:c4:6b:d3:32:c6:e5:21:d3:e3:36:b4:
ca:9c:dc:a2:c9:e6:c9:ca:0a:55:b0:16:3d:7b:35:
09:b4:55:11:02:38:82:f5:54:1e:84:5a:b2:30:6f:
5e:e3:1f:1b:31:6e:6a:06:6a:7f:68:43:4a:70:58:
92:94:9a:c7:91:6f:98:2e:56:99:1a:43:2a:99:30:
5c:9d:b0:2a:c0:52:4a:60:a0:00:92:a0:5b:38:94:
39:2c:e0:76:b0:b0:68:fe:a6:4a:e5:6d:ed:2f:f1:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:65:E6:61:CD:A5:E9:B8:BA:A5:23:69:ED:73:91:F7:FB:D5:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AB9DA0C10DB11EE801743254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.43.0/24
Signature Algorithm: sha256WithRSAEncryption
21:33:93:fa:84:06:ef:19:50:ea:f3:96:bd:ac:ab:12:39:ea:
03:70:35:68:22:2d:29:7d:86:7f:c1:c8:93:91:1b:d9:fd:22:
94:87:3c:31:d8:e0:12:f5:f1:e5:aa:9f:a4:57:d5:d2:5f:6b:
16:76:01:57:cd:54:ed:61:f5:bf:f6:d3:57:5b:d8:25:a2:b5:
22:be:64:fd:45:eb:ac:d5:39:f4:fe:bb:4d:dd:56:e1:6b:b6:
09:b2:ba:2d:de:4d:db:d0:9d:36:38:5a:fe:b5:c3:23:0d:e9:
c6:1d:d1:5a:ad:99:ed:01:39:45:a7:75:1a:01:c6:a6:53:03:
51:8d:de:85:d8:27:e7:5b:70:69:4e:e2:38:1e:68:cc:51:b0:
c0:a3:a6:ee:9e:98:60:72:ee:20:87:1e:fd:b0:11:10:8c:46:
36:8b:fa:47:70:67:4d:1e:92:cf:8c:be:1d:9e:68:a7:6c:19:
77:2c:f6:11:ea:01:32:e7:b5:f0:73:91:3b:9c:c5:4e:d4:dd:
c0:65:a9:55:ab:df:dd:90:7f:35:f3:a7:6e:23:f5:00:75:3d:
5a:98:42:9e:25:99:6b:93:6c:5e:86:73:d3:35:16:9e:56:57:
80:07:22:d6:41:0c:f0:d2:c0:26:08:01:de:bb:74:51:69:ae:
e8:1c:0c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org