Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E73180410D811EE8D8A2B1D4AD9E6FC.roa
File: 7E73180410D811EE8D8A2B1D4AD9E6FC.roa (raw, json)
Hash identifier: aiuTZXXqkA28ZXI2/HsrEZDz6c12/mvXJNe9ZKjS9bk=
Subject key identifier: 04:28:80:16:25:BD:08:26:6B:71:C6:E8:9D:1A:7E:A6:83:16:DB:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E73180410D811EE8D8A2B1D4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:40:52 +0000
ROA not before: Thu 22 Jun 2023 08:40:47 +0000
ROA not after: Fri 05 Jul 2024 08:40:47 +0000
asID: 210334
IP address blocks: 154.89.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11560 (0x2d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:40:47 2023 GMT
Not After : Jul 5 08:40:47 2024 GMT
Subject: CN=64940913-44d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:e2:98:d2:e4:04:ee:54:6a:34:5c:05:03:
c5:7c:bb:0f:c3:a6:63:a5:3c:24:ef:62:3e:7c:e3:
7f:fe:59:68:25:a1:5d:85:59:30:df:43:3a:30:b3:
fb:2d:98:66:d0:f1:48:e7:58:35:72:e8:32:09:e3:
b3:55:b1:ec:fd:b2:fd:0e:52:23:eb:08:3e:b3:02:
68:5d:b7:17:44:22:d4:f3:ff:0d:b7:80:22:86:a4:
43:85:e4:ed:46:11:a2:7e:9b:72:c5:ec:16:46:bc:
d8:ff:de:70:43:bb:35:cf:ca:33:ca:c3:87:af:4f:
63:67:19:de:b9:a6:73:a6:37:f3:a3:c6:f6:52:34:
a9:e6:29:fc:cf:c8:5d:b7:55:be:13:b2:cd:11:1f:
77:26:20:5c:09:af:e9:e1:00:c3:24:d2:85:f0:fc:
bc:c5:2c:29:48:de:4c:94:56:09:57:03:15:c6:c1:
7d:f4:9a:6a:b9:ac:30:0e:50:54:d8:95:0b:22:5d:
28:b1:39:c8:87:55:27:24:b5:cf:30:24:2f:fc:38:
3a:29:b8:82:ef:15:90:46:ed:20:d0:12:b6:67:04:
e0:67:4e:e9:56:b6:ed:58:a3:a4:de:5c:17:56:e2:
e2:85:44:df:9e:65:23:83:08:bf:a4:22:85:d1:ec:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:28:80:16:25:BD:08:26:6B:71:C6:E8:9D:1A:7E:A6:83:16:DB:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E73180410D811EE8D8A2B1D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.32.0/19
Signature Algorithm: sha256WithRSAEncryption
00:15:ef:4d:da:24:bc:f7:e6:b4:b6:ba:00:8b:b6:ce:87:06:
82:e0:52:fd:b9:56:97:97:6d:4c:aa:84:89:4e:91:89:4b:de:
b7:c9:ae:21:83:ea:ed:f3:6d:67:ab:93:e4:83:5a:94:d5:58:
32:4a:4d:ab:50:d8:0d:34:03:e0:66:f7:ba:54:1f:f2:91:02:
ac:b2:b7:76:01:37:13:17:4c:3d:9c:9e:f8:4f:87:92:e3:13:
4c:ed:1e:73:d4:76:3d:bd:45:f8:8e:62:f6:5d:65:1a:22:5d:
5d:32:94:68:a9:d0:e2:17:dd:4d:bf:57:91:83:a5:27:55:80:
12:30:f7:5e:b9:94:7d:f2:66:b2:2d:1f:b5:02:6b:c9:66:36:
4e:1f:93:53:4c:fc:d8:b4:b8:91:cf:6d:6d:4a:bb:9b:88:1b:
eb:6c:24:45:24:6d:62:dd:b8:53:9a:69:7f:02:15:a3:f4:8c:
1c:3b:47:07:f7:07:df:66:31:1a:39:cc:33:27:5a:31:0a:f8:
e5:34:2b:22:e2:c7:61:4e:10:00:a7:e1:6f:da:5d:0b:6b:d5:
e8:f7:a7:5d:1f:a1:6a:4f:3e:36:7d:48:30:e7:5d:80:25:6e:
ea:08:d9:47:a2:33:c8:6c:65:71:1e:cb:7a:dd:19:ba:c8:66:
c8:bc:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org