Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C1A34B610DC11EEA2E87E284AD9E6FC.roa
File: 3C1A34B610DC11EEA2E87E284AD9E6FC.roa (raw, json)
Hash identifier: tqLJt+dFzm1DOom+QFxL0Ruty2Qd6Gv8ckq7kn51p9A=
Subject key identifier: 89:B7:87:75:CA:92:58:C1:72:67:9A:9E:A7:5E:67:C0:57:A7:2B:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C1A34B610DC11EEA2E87E284AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:07:38 +0000
ROA not before: Thu 22 Jun 2023 09:07:35 +0000
ROA not after: Fri 05 Jul 2024 09:07:35 +0000
asID: 210334
IP address blocks: 154.89.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11616 (0x2d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:07:35 2023 GMT
Not After : Jul 5 09:07:35 2024 GMT
Subject: CN=64940f5a-e391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:e8:14:da:d9:6d:98:8c:d8:03:98:cc:f9:
9b:94:e3:a0:d4:17:bd:89:e2:3f:62:01:ad:cc:80:
08:6f:e3:7d:93:8e:14:c2:d1:85:f0:42:b3:f9:05:
81:f5:1d:1d:74:68:50:b9:7a:f1:13:91:5e:8c:9e:
a1:69:87:05:d2:b8:37:50:d1:32:0c:7f:9f:b3:66:
f0:d0:34:a6:a0:c8:e0:f9:65:2a:b4:4b:5d:c9:06:
69:42:a6:71:cf:db:e5:a4:68:44:55:77:e0:11:c3:
da:5d:1b:b2:ce:7c:e0:09:85:33:3a:b9:d8:dd:48:
d0:a1:01:14:10:e9:7a:6b:4e:26:93:40:69:83:7c:
e3:26:15:df:e7:fe:69:51:1b:83:a6:2d:33:c3:7b:
54:e8:cc:52:9e:5d:f5:2f:54:f1:47:3d:9b:b9:8e:
29:72:e8:d3:ca:32:74:95:93:dd:d3:f8:c8:de:b9:
8c:b4:35:ff:60:62:0c:54:00:bd:73:13:c4:fd:a3:
61:3e:aa:6c:e9:d3:7f:7e:b3:70:18:d4:15:c3:f6:
b8:25:b9:08:d8:26:ec:a6:d7:39:ee:65:e1:09:12:
62:79:4f:fb:77:4a:8f:60:fc:ed:67:aa:11:a8:bd:
08:73:5a:89:8e:e4:34:00:bf:5d:e6:02:de:c6:71:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:87:75:CA:92:58:C1:72:67:9A:9E:A7:5E:67:C0:57:A7:2B:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C1A34B610DC11EEA2E87E284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e2:9e:ce:26:5e:11:42:b3:10:e9:22:a3:3d:ed:f5:50:8d:
42:bd:01:77:1e:2f:12:20:06:d9:f9:e2:f2:46:c6:09:d8:b8:
0e:66:ed:7c:d2:87:f9:68:0f:82:86:1b:5d:94:04:eb:08:21:
2b:f1:c8:b0:12:23:a9:22:89:47:45:96:a2:03:85:99:5a:8e:
79:99:a6:a8:03:d2:4c:34:04:f2:d7:b9:cd:75:fa:8e:05:13:
94:36:4d:8d:95:9a:fd:f4:08:dd:6e:c1:5b:46:48:bd:43:f0:
17:9b:a1:a5:13:51:c0:f6:17:55:ad:4c:75:f2:29:6b:2b:25:
65:2e:50:38:37:b4:8d:75:7b:d4:00:dd:b7:2c:60:15:29:c4:
7b:1f:89:79:e4:e8:3f:f7:94:31:77:24:62:05:48:72:d9:b6:
bf:9e:5f:a6:10:20:c4:c4:8b:41:ac:fa:99:90:78:53:a4:cb:
2c:6b:81:b1:c3:85:ac:e6:89:65:22:0c:43:89:eb:dd:91:c6:
48:20:66:85:33:e6:2c:3a:ae:b5:db:e1:71:a7:b5:60:d8:c8:
ef:b3:f9:f9:7b:9a:db:2b:e6:3f:b6:1e:0a:10:59:38:ec:5a:
7d:30:12:7c:4b:ef:28:cf:69:83:50:14:47:7f:ac:89:30:a4:
66:e8:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:21 2024 by rpki-client on console-fra.rpki-client.org