Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E24406010DA11EE93BC5E234AD9E6FC.roa
File: 7E24406010DA11EE93BC5E234AD9E6FC.roa (raw, json)
Hash identifier: CwFFe4Jr0ZV4/RAyfLpu4fjkKSMCrfv2yD/s5jOyMY8=
Subject key identifier: DF:96:8A:70:A7:EA:3F:8C:8F:0D:05:15:3F:F4:0C:26:B4:D6:00:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E24406010DA11EE93BC5E234AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:55:10 +0000
ROA not before: Thu 22 Jun 2023 08:55:07 +0000
ROA not after: Fri 05 Jul 2024 08:55:07 +0000
asID: 210334
IP address blocks: 154.89.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11588 (0x2d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:55:07 2023 GMT
Not After : Jul 5 08:55:07 2024 GMT
Subject: CN=64940c6e-4e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:ee:72:ae:4e:d2:54:35:ac:a2:36:c0:53:
0c:89:b6:fa:0b:c7:27:27:ac:99:f1:2b:77:61:55:
ee:14:5f:34:25:a5:41:65:ea:2d:a4:04:39:d6:a4:
a3:bb:e4:88:61:7d:b3:f2:79:ae:74:fd:db:87:8c:
5f:48:0f:64:c9:d8:a8:6b:f8:db:11:06:88:cc:0d:
b9:e0:32:85:b4:c3:c5:81:c1:bc:f6:12:2b:25:d6:
a0:48:f9:62:1d:30:c9:b2:60:67:c4:59:a4:1b:8e:
a6:57:01:51:41:8b:88:2a:e4:58:e4:03:92:b2:ee:
fa:75:85:1f:67:1f:a4:c3:06:1e:d9:7f:b9:a6:90:
5f:0e:76:b9:ba:fe:93:ac:19:9d:f8:7b:b9:21:de:
da:ac:f7:f3:40:3f:e1:53:74:df:cb:ab:ae:af:07:
45:01:07:93:12:9f:f8:d2:1d:77:27:0b:66:3c:c9:
a0:16:f5:42:d3:ef:ca:64:65:2e:c7:7b:78:21:f7:
0b:9a:4b:40:ec:1d:66:ef:20:37:ff:54:4a:7f:eb:
4b:a7:f3:d0:3b:2f:08:05:d8:0c:5c:11:75:22:0b:
b5:7c:65:86:05:2f:ff:01:0d:eb:82:8b:36:be:bd:
3b:10:3a:b8:1f:1a:6c:46:ce:e3:84:f8:42:c3:f6:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:96:8A:70:A7:EA:3F:8C:8F:0D:05:15:3F:F4:0C:26:B4:D6:00:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E24406010DA11EE93BC5E234AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f4:e5:e9:19:df:93:e8:5e:d7:7c:41:c8:17:96:41:bc:d1:
dd:1c:32:35:22:da:de:72:69:2d:b8:a6:47:e5:d6:39:f9:c1:
59:b0:97:9e:a6:a0:53:bb:7a:02:60:c5:1c:1c:2c:9b:e4:e6:
7c:1a:99:a2:6e:86:2d:53:72:1c:92:31:60:96:c9:94:75:d1:
8f:e1:ae:bc:c5:de:a6:85:c9:c6:bb:ce:bd:02:7b:76:98:d9:
96:5e:3b:fb:39:05:53:74:09:1b:05:36:bc:7d:b2:27:6f:57:
0e:7c:2b:e7:4a:2b:74:09:f9:a0:73:91:a3:4e:ed:01:3c:e6:
75:bc:24:6e:1d:2a:c2:3f:b2:f9:37:de:1c:80:05:c3:27:4d:
2c:0c:b8:10:00:a2:c0:34:bc:46:fd:c0:41:a6:93:fa:df:80:
52:d2:22:e9:a5:41:06:17:cb:b4:a8:1d:9b:aa:bc:25:3a:de:
ce:62:5d:9f:34:a8:10:ad:82:b6:ed:2d:b9:16:a5:88:e3:2e:
4d:37:45:8b:0e:e8:c4:d5:0e:b8:31:ce:c3:fb:13:25:c1:85:
b2:50:4f:4b:3d:a1:d0:48:b3:14:ea:bc:ee:61:f0:14:ef:a5:
38:b4:58:68:df:50:d7:ee:f4:cf:8a:cf:40:5c:c9:45:14:59:
65:74:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org