Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4CEA6610DD11EEAFC3C32B4AD9E6FC.roa
File: 3E4CEA6610DD11EEAFC3C32B4AD9E6FC.roa (raw, json)
Hash identifier: RHbt2pxnPK/tlqItaUMyLbHGNfb4upfa2uYKrs7JYLw=
Subject key identifier: BC:2F:65:79:19:8B:42:82:CA:3C:BE:B4:2E:A3:B4:AB:94:44:31:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4CEA6610DD11EEAFC3C32B4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:14:51 +0000
ROA not before: Thu 22 Jun 2023 09:14:48 +0000
ROA not after: Fri 05 Jul 2024 09:14:48 +0000
asID: 210334
IP address blocks: 154.89.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11632 (0x2d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:14:48 2023 GMT
Not After : Jul 5 09:14:48 2024 GMT
Subject: CN=6494110b-8b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:04:a4:0f:43:c7:59:e4:78:d9:58:54:3b:
92:37:3d:e0:8f:fd:3e:13:c8:2f:1b:29:f7:5e:7a:
4b:0f:cf:de:26:d7:f4:aa:e0:69:c5:66:f1:21:10:
f9:08:7b:25:ce:e9:1e:26:33:55:1f:a3:31:8e:b1:
3e:a4:70:a4:bd:10:64:e8:73:2d:aa:37:77:a5:f3:
ed:50:78:14:6b:9a:18:52:39:0b:7e:5e:3c:40:c0:
ea:8b:9e:4b:d1:de:3b:d8:f1:85:52:d7:ab:3c:c3:
66:6d:22:90:44:49:1d:b2:a9:60:af:eb:fe:fb:f1:
11:0e:cc:d9:44:af:97:28:c8:34:72:88:f6:ec:9b:
e6:c7:ad:e1:ef:29:63:c3:71:f5:60:32:b8:11:92:
21:f8:1e:4a:64:b5:5f:4f:9c:72:ab:16:ad:19:22:
07:47:14:fe:e9:1f:85:91:9c:e8:19:74:b5:bb:2d:
c5:66:fb:00:1e:c3:b2:73:84:15:49:dc:10:0f:24:
3f:2f:cf:db:73:1a:f8:ef:4d:2a:cb:39:d5:e9:1d:
1d:c4:3c:aa:70:f7:ff:02:06:9b:a9:8b:8a:6a:7d:
43:5e:e5:dd:40:a3:dc:8e:d9:f1:79:ac:d4:a3:fc:
9c:a7:4a:e8:8a:0c:66:92:6e:30:8c:9c:cc:23:f7:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:65:79:19:8B:42:82:CA:3C:BE:B4:2E:A3:B4:AB:94:44:31:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4CEA6610DD11EEAFC3C32B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a7:82:31:37:69:50:f2:d2:f3:f2:4d:57:83:30:81:bc:b6:
59:34:8d:33:f3:fe:58:e4:26:6e:2f:87:99:b2:00:b1:cb:ca:
d8:de:06:3e:54:9f:07:fe:c1:38:92:7b:a3:18:4c:b7:9e:de:
1d:63:38:e7:2a:41:16:df:a7:c3:51:d3:a0:82:8e:22:da:fc:
ca:16:79:bd:0a:79:2e:06:13:7a:32:9c:9b:d6:14:e8:05:e7:
6c:4e:31:3a:bf:69:f2:8c:5f:81:07:5c:01:3a:7a:cf:fd:1e:
55:7d:b6:6a:b4:e8:fd:06:06:f9:d6:1a:37:11:2e:11:f0:8e:
bc:4f:15:ac:90:a5:9f:6c:46:fd:b0:76:fb:36:36:2f:cb:52:
9d:22:bb:72:c9:b4:7c:4e:8d:e7:0f:67:1f:0e:c3:03:25:ff:
5f:be:ce:59:32:8d:3e:68:f5:1e:69:b2:04:10:15:00:78:26:
54:fd:4b:a8:1c:f9:6f:6f:27:3f:ae:e1:74:ff:ab:ce:a8:ca:
01:5c:22:d7:65:81:13:83:27:b4:cf:38:fc:4d:a1:40:77:d6:
d3:28:19:c0:d4:50:ae:bc:ba:b3:97:93:82:7e:59:65:28:64:
d7:97:2e:71:42:d2:75:bd:4e:3a:b3:bd:01:4d:c3:99:89:57:
04:73:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:21 2024 by rpki-client on console-fra.rpki-client.org