Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45012202595B11EE932B4D254AD9E6FC.roa
File: 45012202595B11EE932B4D254AD9E6FC.roa (raw, json)
Hash identifier: 3P72N/ffdFImCvgYhuqajqWUNRkynNyS3UozFWa/tJ8=
Subject key identifier: BD:E1:8F:53:11:09:CB:C0:12:A2:4B:18:5C:AB:92:E7:E4:02:B8:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4008
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45012202595B11EE932B4D254AD9E6FC.roa
Signing time: Fri 22 Sep 2023 15:18:23 +0000
ROA not before: Fri 22 Sep 2023 15:18:20 +0000
ROA not after: Thu 04 Jul 2024 15:18:20 +0000
asID: 210334
IP address blocks: 154.89.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16392 (0x4008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 22 15:18:20 2023 GMT
Not After : Jul 4 15:18:20 2024 GMT
Subject: CN=650db03f-21d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:a9:f6:3a:1b:85:d7:f8:a0:32:21:ff:95:
51:f9:19:02:8c:51:68:13:41:e7:46:5a:d0:ef:51:
1f:56:b6:b2:56:39:0e:85:d4:bf:98:bd:d4:5f:44:
05:df:e8:bd:d2:a5:81:92:75:6c:2b:d5:5f:c5:f8:
32:8c:2b:23:e9:f9:06:2a:5a:52:ea:de:9e:2f:e4:
83:54:1f:de:26:cc:4f:15:a2:b5:f2:e0:c6:fa:71:
dd:aa:5b:22:e6:ae:fd:6a:3a:63:bb:b5:64:ba:dc:
41:a3:62:0d:6f:e6:59:7b:25:10:c5:c5:03:1d:db:
bf:f1:aa:25:f6:25:4a:53:64:62:de:82:74:b3:71:
ad:9a:8b:79:d3:30:dd:ab:a1:b8:96:a9:44:b9:d5:
7e:b2:54:35:88:82:16:e2:f1:42:c9:25:66:e4:6f:
64:8e:e7:94:eb:dc:5a:85:fd:a0:b3:f7:e7:e7:e8:
33:76:5c:9d:a4:eb:3f:1d:36:0b:62:d6:37:ed:2f:
31:22:9c:31:fc:59:20:9b:ee:d3:d2:6f:0c:14:1e:
85:52:6d:e1:f4:82:90:4e:61:6a:63:bf:ca:71:2e:
6b:ea:ca:6b:2e:ff:f3:d8:98:57:d5:4b:53:3d:6e:
85:5a:f1:63:5e:3b:33:b2:31:06:90:dc:36:9f:26:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E1:8F:53:11:09:CB:C0:12:A2:4B:18:5C:AB:92:E7:E4:02:B8:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45012202595B11EE932B4D254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4d:59:61:a9:14:a4:96:52:62:f9:57:4f:26:35:5f:61:86:
fe:cc:20:dd:5a:8e:53:84:61:3e:e4:b5:1f:0e:17:48:c5:f0:
f8:c2:b6:09:cf:7e:62:92:40:6f:d5:ee:7b:4a:9c:8a:88:af:
da:71:67:37:1e:6e:81:12:4d:f2:67:42:d5:32:00:e8:80:cb:
8a:35:40:d9:1a:9a:d2:f1:23:42:6c:df:93:40:55:86:76:9d:
aa:9a:17:50:72:83:38:e4:c9:cb:5b:8d:15:fe:f0:f6:43:5f:
04:16:70:52:ef:89:70:1e:dd:a6:4d:6a:ce:1d:4b:c7:2b:30:
81:e4:45:ff:33:f3:ac:33:90:fc:30:6d:e9:72:0d:b2:b4:75:
51:be:c7:f3:74:9a:1c:7b:9c:70:dc:49:3b:ae:f6:b4:0c:88:
48:9e:dd:9e:ce:c8:d4:bf:49:23:4d:fe:85:d6:cd:9e:40:73:
25:b7:10:63:a3:1b:5c:9a:1d:ce:4d:0e:e2:79:21:1f:2c:49:
44:c6:31:cd:b8:47:de:95:aa:e1:2b:05:f0:9f:68:d0:b6:79:
2a:5d:65:b3:12:66:d7:63:d8:f5:31:ce:91:2c:4c:dd:c4:db:
30:94:09:cd:48:02:49:04:2e:74:e7:a0:92:36:55:b3:4a:97:
ad:9d:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org