Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397AF2078AE11EE85C3C48B4AD9E6FC.roa
File: 6397AF2078AE11EE85C3C48B4AD9E6FC.roa (raw, json)
Hash identifier: NTT46iLfHzN2jNVlck58WQwF/xfeFU5M3GQKjziPeq0=
Subject key identifier: 75:92:0B:92:8A:A2:DD:C4:27:2A:A4:5A:33:D7:92:34:0A:7D:3F:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4B25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397AF2078AE11EE85C3C48B4AD9E6FC.roa
Signing time: Wed 01 Nov 2023 12:01:29 +0000
ROA not before: Wed 01 Nov 2023 12:01:25 +0000
ROA not after: Mon 04 Nov 2024 12:01:25 +0000
asID: 134687
IP address blocks: 154.89.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19237 (0x4b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 12:01:25 2023 GMT
Not After : Nov 4 12:01:25 2024 GMT
Subject: CN=65423e19-668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:7c:d4:a6:03:f2:01:9d:30:88:5a:0a:9f:
af:8e:24:5b:28:b7:bf:af:60:f7:3f:12:83:11:bb:
a7:30:a9:33:47:43:e9:ca:1c:f1:23:f1:40:48:75:
40:72:1c:19:c8:f8:f3:16:d5:ee:0c:2f:ad:7f:68:
dd:88:9c:91:51:64:a0:e3:6c:c1:66:5f:7f:f4:09:
77:7d:d1:e3:2b:7f:78:88:4b:74:58:4b:39:06:eb:
48:72:fe:69:80:18:5b:ff:18:cd:59:e8:62:4b:4f:
0d:c4:3c:1d:c8:ff:69:a7:a8:32:16:99:44:84:09:
7f:90:ba:79:c8:d4:aa:77:0d:23:1f:9d:75:67:61:
76:e7:02:c2:64:2b:8e:2d:c6:4f:59:04:ad:52:dc:
be:ec:8f:75:56:3b:06:18:12:d6:5c:1b:b5:8d:c5:
e7:50:46:ff:ba:60:dd:43:6e:08:7c:e7:aa:09:24:
72:11:f4:84:75:5f:e9:66:ee:b8:8c:2d:26:10:00:
48:9e:92:14:fe:70:6d:67:56:6d:f6:b8:e0:2f:28:
95:20:03:4f:0b:c2:c7:c2:08:56:aa:a2:52:2c:26:
ad:dc:7d:77:39:07:2a:2a:a2:eb:96:fc:9d:bf:8b:
c5:a9:27:2a:25:36:d0:f4:b6:4b:76:24:fd:cb:1c:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:92:0B:92:8A:A2:DD:C4:27:2A:A4:5A:33:D7:92:34:0A:7D:3F:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397AF2078AE11EE85C3C48B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2b:1e:53:d0:08:df:a1:05:5c:ca:43:2f:2d:5d:2b:33:8f:
87:97:e2:2d:a0:b7:b2:5f:5a:d4:a0:6d:26:ca:8e:1f:dc:ac:
59:6d:b7:91:48:88:98:9f:e8:a4:94:94:c9:34:3d:ae:5e:d5:
0b:c8:2d:e4:54:1f:d0:3b:2c:2b:d2:df:60:c8:48:cc:5d:c4:
96:0f:e1:eb:75:e2:4d:2e:14:e0:ce:89:a3:a2:0e:ba:59:b9:
1e:be:d0:83:43:91:46:73:a5:00:27:8a:90:a0:f5:0d:91:a0:
85:3b:d8:6d:03:be:11:9d:0b:a3:66:9d:2c:b8:c9:43:6b:f5:
51:3b:c5:cb:e3:06:5c:e7:4d:1c:aa:9c:02:86:ff:7c:3c:0d:
06:42:0a:fd:2a:d0:c8:c9:5a:02:74:b4:93:02:75:73:5b:56:
0d:3e:0b:3e:7a:2e:79:20:74:9d:69:16:af:61:d9:d9:5e:6d:
95:c2:65:b0:f2:6d:e3:00:5f:1d:d4:75:78:ee:3d:59:0d:09:
68:1c:11:eb:4f:f6:14:a2:d0:ec:48:90:01:1c:cf:5d:2d:ac:
2c:fb:3c:e9:4d:c9:f5:f7:1a:b8:b0:16:11:cd:56:4f:07:b8:
00:71:7e:d1:9a:40:4a:ba:4c:7f:e2:9d:84:21:c0:84:22:f3:
c8:bc:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:11 2024 by rpki-client on console-ams.rpki-client.org