Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89398EF8216711EF957CB1FB7CDC24C2.roa
File: 89398EF8216711EF957CB1FB7CDC24C2.roa (raw, json)
Hash identifier: 9+miuV5ee5Fc9OomrOX5MhYMiMTnSURIeTVq6OrE2u0=
Subject key identifier: 3A:FB:1D:23:EA:63:0D:EB:B1:95:1A:9E:AA:A2:56:94:23:7C:FC:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BD7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89398EF8216711EF957CB1FB7CDC24C2.roa
Signing time: Mon 03 Jun 2024 05:10:04 +0000
ROA not before: Mon 03 Jun 2024 05:10:00 +0000
ROA not after: Thu 12 Jun 2025 05:10:00 +0000
asID: 152711
IP address blocks: 154.202.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48508 (0xbd7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 05:10:00 2024 GMT
Not After : Jun 12 05:10:00 2025 GMT
Subject: CN=665d502c-aa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:e1:f7:00:ad:bc:7d:f8:a4:46:39:a3:85:
fc:ee:be:f6:f9:93:a6:81:ef:13:ad:e6:f5:16:83:
50:89:cb:fe:be:a8:f1:aa:2a:02:94:bc:ea:47:46:
5b:3a:2e:12:af:c4:7a:7b:51:9c:fb:ba:a2:63:35:
30:2f:cd:03:a0:0a:64:f1:6c:52:2a:81:4b:54:94:
9b:d9:e1:d8:78:7c:07:59:1b:11:26:83:30:ef:92:
51:4d:f4:a1:49:99:eb:33:c0:84:f5:40:a0:9b:49:
76:9f:8f:a3:ee:f4:65:50:03:da:ff:a7:73:a2:e1:
97:ef:47:03:71:80:c1:78:ed:47:04:26:7e:bb:ae:
ac:1a:be:3b:49:42:97:5c:a7:7a:84:b6:05:e3:59:
b6:0f:44:a6:1a:8d:f5:16:9f:b9:fd:87:f9:f2:18:
6f:f9:63:cd:a1:e9:22:46:f1:08:a8:60:55:0f:d4:
2b:e3:79:50:43:61:99:9d:17:f3:12:be:41:03:21:
c7:da:0c:77:ea:31:ac:dd:95:91:c8:92:e9:53:7c:
bf:3c:7a:c6:5a:6e:19:00:76:6c:df:39:b0:e3:dc:
a7:68:40:40:58:e8:56:d0:20:46:c7:47:81:13:f8:
0c:12:6e:78:e7:fb:cc:b2:ec:7f:19:3e:a0:d5:26:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:1D:23:EA:63:0D:EB:B1:95:1A:9E:AA:A2:56:94:23:7C:FC:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89398EF8216711EF957CB1FB7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.4.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2c:3a:70:1b:59:fd:75:fb:e2:86:01:45:1b:71:13:e7:0c:
dd:3e:ad:f8:8d:63:99:47:9b:4b:c9:95:a5:86:b4:56:22:bc:
e9:a3:3b:07:3c:ae:fe:24:cb:d1:db:73:f8:1e:e3:9e:00:e0:
de:a2:3e:8e:f6:f3:39:75:f4:44:89:3b:b1:ec:8a:6d:58:c8:
3c:e4:07:d4:6d:95:6e:e9:ab:31:ef:3c:f3:7c:08:78:1e:7a:
64:e0:db:92:e9:54:a6:0e:8f:61:fb:80:de:c2:1b:b2:a7:9e:
1f:07:d6:00:03:ac:89:17:10:08:1e:21:e3:4b:9e:c2:a4:75:
22:2b:0b:a9:9a:5d:2b:e9:07:41:80:d5:28:93:2f:b2:f9:87:
10:b4:64:bb:5b:c2:e9:43:0a:32:57:0c:68:59:f0:ad:1b:dc:
d6:19:fb:4d:9e:03:dd:58:c8:a7:47:4e:d7:c7:9a:7d:ac:1a:
66:1f:93:af:37:3e:5a:d0:28:c4:41:fd:70:b4:e4:2e:83:e1:
1c:18:a4:a9:c3:1e:f0:9f:77:17:93:ad:b3:c0:f0:44:d3:e4:
48:67:1d:0c:f1:75:3b:d1:d2:ad:97:32:b4:ed:8b:e2:ec:37:
6c:17:b0:0d:e2:48:22:d2:f6:97:f6:ba:40:f0:9f:36:ed:58:
9c:44:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org