Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D52DD020F1911EEA26E87504AD9E6FC.roa
File: 3D52DD020F1911EEA26E87504AD9E6FC.roa (raw, json)
Hash identifier: mkVCTnVjWH7UQhuqjSASJQeIY2zLALPFfkj+FTgQKaA=
Subject key identifier: 85:60:7D:7D:7F:EE:C9:82:82:86:BD:52:05:79:2C:52:34:3C:ED:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2CED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D52DD020F1911EEA26E87504AD9E6FC.roa
Signing time: Tue 20 Jun 2023 03:19:17 +0000
ROA not before: Tue 20 Jun 2023 03:19:14 +0000
ROA not after: Sat 20 Jul 2024 03:19:14 +0000
asID: 138915
IP address blocks: 154.90.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11501 (0x2ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 03:19:14 2023 GMT
Not After : Jul 20 03:19:14 2024 GMT
Subject: CN=64911ab5-c3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:bd:8d:32:1e:cb:b8:9e:27:9e:ce:00:ff:
86:00:42:32:b3:ea:e7:d0:d8:55:24:f4:8e:fa:21:
98:ed:9e:4b:0d:fb:0a:3f:84:d0:6d:b5:37:e4:67:
da:58:6e:6b:49:98:00:d1:0e:18:b3:7a:83:70:71:
43:bb:fe:2d:74:e5:c0:9f:5e:21:7c:3c:22:85:d5:
be:86:7c:f7:93:0c:3f:e6:3e:c8:26:db:39:9c:30:
ae:4a:f9:1c:81:6d:34:12:1f:10:a3:3f:a7:1f:2d:
8e:11:79:41:74:54:18:da:7f:f2:02:d8:bd:18:fd:
d9:44:5c:ae:cf:73:60:35:f7:32:0d:17:83:5d:04:
4d:3c:27:3e:22:fe:3c:95:85:18:ff:ed:83:20:9b:
88:17:78:55:2b:be:15:9b:e3:32:a8:07:34:5b:bf:
1c:7b:bc:52:f8:3c:93:bc:33:08:fa:11:f2:49:7c:
bd:28:60:ee:0b:37:0b:68:0b:0c:93:46:92:96:9c:
74:b2:e8:ff:be:3e:19:64:c3:ee:e9:93:b0:5e:41:
d7:ae:8d:83:71:30:ff:73:49:2b:f2:6b:1d:03:84:
f8:a8:30:dc:4e:bc:da:20:16:a8:e6:69:51:e3:57:
da:d0:70:6f:9f:c9:f8:72:fd:f0:b6:3e:35:59:ab:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:60:7D:7D:7F:EE:C9:82:82:86:BD:52:05:79:2C:52:34:3C:ED:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D52DD020F1911EEA26E87504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0b:00:37:8f:30:de:22:73:93:b9:1e:57:ab:fa:a0:03:17:
a6:33:b6:b6:4a:9c:f5:e7:c9:26:a7:ec:e8:21:e0:03:c9:67:
de:97:7e:43:0e:7d:86:9d:41:22:14:52:22:ce:e8:3d:cf:cb:
ad:a3:16:f3:ec:66:9c:bf:d7:f8:55:be:b9:e8:2e:9e:27:86:
c9:09:61:ff:c6:6a:fa:bc:55:06:09:f3:79:ac:f9:6f:58:fa:
81:10:4a:a9:9a:a3:ae:11:eb:5f:9b:46:d8:a5:82:55:7e:0c:
35:89:f5:43:b5:0b:f9:e8:c4:1e:89:ee:b1:05:14:ab:6d:dc:
0f:c0:49:85:c8:90:e4:93:f9:69:84:89:39:2d:08:db:d2:b2:
a5:66:c0:7a:d4:cb:ac:a6:fa:38:97:57:84:c1:09:74:6d:d5:
32:d5:03:d8:28:b8:7a:ab:d4:bf:54:1f:ff:e9:cc:c0:80:6f:
44:43:64:d3:19:77:7f:fa:f6:3f:70:31:29:8b:12:95:8d:6a:
67:b1:09:6a:9e:d9:1b:61:17:fe:65:77:5f:2b:4d:57:1e:c4:
39:26:4c:92:3a:3b:5a:5f:99:94:a1:e7:79:2d:51:c8:25:a2:
82:4d:70:97:2a:b2:99:6f:df:5a:1a:e7:39:b6:68:d7:3c:36:
e6:e1:ea:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:18 2024 by rpki-client on console-ams.rpki-client.org