Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2890D5DE08EF11EEAD4335154AD9E6FC.roa
File: 2890D5DE08EF11EEAD4335154AD9E6FC.roa (raw, json)
Hash identifier: w1MR6oPeicswVvj5F5hABG1GgSN5m8oiQK2OQoKUu6k=
Subject key identifier: C9:D9:5C:3A:59:05:3D:16:30:D8:F6:43:91:45:BE:A6:C0:9C:E4:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2A50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2890D5DE08EF11EEAD4335154AD9E6FC.roa
Signing time: Mon 12 Jun 2023 07:02:57 +0000
ROA not before: Mon 12 Jun 2023 07:02:53 +0000
ROA not after: Wed 21 Aug 2024 07:02:53 +0000
asID: 209242
IP address blocks: 154.219.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10832 (0x2a50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 07:02:53 2023 GMT
Not After : Aug 21 07:02:53 2024 GMT
Subject: CN=6486c320-fed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:f3:20:44:23:b2:9c:84:89:ef:0b:bc:ca:
87:e0:3e:d2:63:de:0b:6c:ea:8a:7c:d3:d6:82:ef:
70:e3:e1:dd:d2:bb:51:53:f4:5d:ef:13:4b:37:88:
ed:c0:64:4e:d9:97:19:39:72:ad:22:45:4d:1f:09:
f1:d0:21:e8:f1:a8:e7:c8:79:18:4e:c4:6a:f3:f8:
84:37:63:0b:0f:72:0b:af:ce:ba:f8:c6:77:02:65:
53:2d:94:c3:da:b5:0f:23:33:30:da:f5:ed:08:8c:
12:eb:35:47:e6:b8:eb:d9:99:11:02:5a:1d:0d:d2:
7e:a9:93:97:a7:88:d3:9f:94:e7:1c:88:c0:1d:fe:
27:ca:6b:36:10:37:15:46:b3:fc:ce:c4:7d:d0:b2:
25:69:3e:14:d4:3f:ae:27:62:81:e2:88:49:ad:6e:
1b:df:55:0c:74:74:5d:5d:bb:d9:65:87:ec:f1:91:
e8:15:f4:f4:a8:d8:d7:b5:72:8a:7e:38:f6:32:16:
6b:67:5e:76:2a:cf:65:fb:37:f6:1b:98:66:7c:2a:
e0:cc:84:ff:50:68:4e:f9:e1:e8:1b:c5:c0:c7:8b:
36:fd:66:bd:ee:c4:e1:80:e3:3a:e2:be:39:b9:7a:
c4:0f:55:13:c9:f3:e1:28:0c:0b:ab:ff:4f:6c:17:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:5C:3A:59:05:3D:16:30:D8:F6:43:91:45:BE:A6:C0:9C:E4:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2890D5DE08EF11EEAD4335154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.2.0/23
Signature Algorithm: sha256WithRSAEncryption
05:33:77:c2:eb:8b:92:14:f0:86:e2:ba:c7:21:1e:fb:43:de:
7f:62:a6:ce:ad:4f:ba:22:64:fa:0f:98:3e:ec:1b:db:0b:7b:
24:8d:79:3e:d7:11:c4:35:26:ad:b3:cd:de:b3:ea:5b:b4:30:
53:0f:1e:db:9e:c6:a1:4a:da:ea:be:a5:e0:4c:34:06:b0:71:
7c:30:bc:5c:9a:b5:3f:63:1f:73:39:34:43:02:f7:62:0f:67:
78:18:8e:fa:cf:18:99:0e:98:89:bc:a4:6f:00:f1:d7:22:5d:
6b:67:42:05:c0:c1:e9:69:ef:0a:9b:f1:7d:af:e6:32:d7:27:
85:6a:8b:1d:7f:df:f9:9e:6d:b2:06:7e:f8:40:82:a9:28:52:
fc:39:a4:fd:34:ff:2c:79:1d:2c:43:3f:23:f8:9c:e7:10:80:
ec:3a:97:c9:b2:15:6e:d6:f3:06:fa:f5:61:1c:98:d5:99:9d:
92:70:75:e7:e5:57:33:31:e0:d8:e5:52:cf:f4:15:68:50:24:
4d:84:d0:d2:e4:59:e6:d3:65:bf:d8:d6:18:b3:11:7f:5f:ee:
f2:80:8f:de:3f:32:44:83:8a:89:4c:b9:60:d0:4a:3d:86:c0:
3d:28:67:57:50:83:93:89:29:19:19:38:a9:a2:cb:24:af:4d:
9d:07:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:04 2024 by rpki-client on console-ams.rpki-client.org