Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78D946FE10DB11EE8EC741264AD9E6FC.roa
File: 78D946FE10DB11EE8EC741264AD9E6FC.roa (raw, json)
Hash identifier: PtmH1F/RGKp5uiQO7XU4K2lT1xG+IH2JYBRTeOQwb/k=
Subject key identifier: 3E:25:E1:B6:3E:59:03:F2:16:6F:37:D6:82:64:A0:BC:82:42:85:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78D946FE10DB11EE8EC741264AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:02:11 +0000
ROA not before: Thu 22 Jun 2023 09:02:07 +0000
ROA not after: Fri 05 Jul 2024 09:02:07 +0000
asID: 210334
IP address blocks: 154.89.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11604 (0x2d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:02:07 2023 GMT
Not After : Jul 5 09:02:07 2024 GMT
Subject: CN=64940e13-72ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:d5:2e:0b:0a:fb:0f:f6:b8:77:9e:11:aa:
8f:13:12:40:67:e1:98:f6:00:a0:f7:a1:b3:60:c7:
9e:61:ab:c2:fd:c4:e8:6d:88:0b:35:47:a3:7c:f7:
55:8d:32:0d:1e:7a:a8:3d:ce:39:cc:f5:1e:7c:52:
59:25:7b:9b:6c:8c:ad:9c:38:7d:42:a3:b6:5c:73:
fd:6d:f1:a5:f3:6c:d6:17:ba:5e:f5:cd:81:94:7c:
da:b5:bc:15:5f:b6:0a:52:de:56:dc:3d:9d:ef:37:
b3:2d:74:43:7d:23:e2:9d:70:e6:40:6c:10:da:43:
0f:e6:17:68:39:92:22:9a:dc:c2:72:84:86:3d:ac:
58:40:f2:cf:4a:52:1f:e1:da:72:ae:87:4a:83:60:
39:ba:6c:0c:96:bc:aa:d2:d3:69:ac:78:a8:c5:49:
bb:ab:40:5a:7f:3f:77:1a:6e:ba:4c:bd:24:73:31:
b7:33:a0:02:1c:78:56:21:8d:04:fb:60:36:e1:90:
e3:dd:14:db:fa:13:29:b5:94:e2:95:46:a6:d8:82:
b0:b1:ff:e3:0e:65:b6:c0:07:43:d7:2f:90:77:a5:
d9:c4:ed:c0:af:c2:e3:50:64:ab:0d:ac:d4:2b:48:
ef:8c:13:9a:55:d2:11:53:b0:57:ae:13:3b:dd:2d:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:25:E1:B6:3E:59:03:F2:16:6F:37:D6:82:64:A0:BC:82:42:85:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78D946FE10DB11EE8EC741264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e8:3f:74:ff:c7:01:b5:6d:7b:35:b1:11:d2:9c:7a:1d:03:
1c:32:e3:d9:3c:d1:55:03:8f:01:3f:c4:17:92:7c:2e:12:a2:
1c:26:54:6b:5e:00:d3:63:10:f9:f2:86:6b:29:53:72:3d:aa:
19:36:aa:bb:5c:16:da:ea:33:8a:6a:30:53:8f:c7:30:9f:a0:
6d:8a:e0:7f:97:da:6a:97:6c:51:92:0a:91:c7:91:e4:c5:08:
69:f6:1a:c0:05:e5:d6:90:89:8b:ec:28:93:bb:66:d5:41:ee:
f2:8e:48:15:bd:4f:e8:2d:6d:65:c9:a8:c9:40:35:8e:b8:9d:
61:24:ba:1e:1e:dc:0a:f2:d9:9b:64:0b:e2:07:3d:12:51:77:
98:6f:79:99:74:d2:51:cf:53:dc:e8:5f:ca:ae:a8:e9:c9:5c:
db:5e:96:c1:1a:c7:df:f8:3e:94:46:29:44:c2:74:7a:85:ca:
8e:53:47:c6:23:b7:91:3d:db:a1:7f:1a:fd:59:84:4e:b0:ff:
5a:68:df:aa:93:18:48:aa:d0:c5:27:94:96:5c:8a:6e:f8:6a:
1d:91:33:66:da:8c:ec:06:12:07:40:03:ed:81:d4:7d:cc:5e:
c5:cf:ce:80:9f:c9:e5:66:e4:01:4e:cf:45:88:7d:5d:f2:8c:
27:4a:20:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org