Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89AFEA6EA30211EE8A13F01AD25BE465.roa
File: 89AFEA6EA30211EE8A13F01AD25BE465.roa (raw, json)
Hash identifier: nWvY/UOSGbw58AcCyuqomcUy4Et/gonM1vLllDNqcAk=
Subject key identifier: C3:47:78:37:A8:4D:49:F9:4C:21:CE:B0:20:E9:20:05:85:93:29:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6713
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89AFEA6EA30211EE8A13F01AD25BE465.roa
Signing time: Mon 25 Dec 2023 08:49:39 +0000
ROA not before: Mon 25 Dec 2023 08:49:36 +0000
ROA not after: Tue 07 Jan 2025 08:49:36 +0000
asID: 139057
IP address blocks: 154.85.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26387 (0x6713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:49:36 2023 GMT
Not After : Jan 7 08:49:36 2025 GMT
Subject: CN=65894223-412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:42:44:76:f4:e4:ec:41:fa:4e:10:3e:86:
05:eb:f6:07:fe:ca:4a:e2:f6:34:53:be:90:a9:45:
05:8c:63:c8:71:3c:a6:86:ca:28:f6:e6:08:55:47:
de:13:0f:27:07:df:c8:68:af:47:c5:9b:e4:32:73:
a1:a8:79:4f:85:0f:5c:51:56:76:1f:f1:f4:f6:55:
30:4f:05:6e:21:6c:25:f6:87:ee:6d:d0:09:90:d1:
69:10:8c:c3:28:97:f3:28:de:1a:9f:65:82:54:34:
86:c9:2c:0b:a2:12:92:44:06:6b:0f:67:a1:03:63:
d9:28:b0:21:16:44:72:d5:7e:41:9e:9e:b4:61:d4:
52:b8:69:b4:38:c9:c5:85:10:94:5e:66:f1:0d:33:
08:71:60:53:8e:7d:5a:39:af:61:01:6e:fd:bf:55:
dc:a3:9d:2f:a3:7b:60:93:80:02:b2:89:19:e9:ea:
21:84:22:0f:7e:dd:74:01:85:06:23:67:c2:b5:83:
2c:a7:43:90:d9:2c:00:fb:89:76:c7:35:92:60:82:
09:6f:e3:70:c0:ca:e3:a0:b4:05:c8:3c:50:c3:7d:
55:a1:34:6a:55:57:09:b8:b6:36:db:54:b9:45:80:
b0:d0:95:b2:c7:fd:2f:03:71:a6:4e:72:45:8a:d9:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:47:78:37:A8:4D:49:F9:4C:21:CE:B0:20:E9:20:05:85:93:29:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89AFEA6EA30211EE8A13F01AD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.69.0/24
Signature Algorithm: sha256WithRSAEncryption
15:80:6f:26:f9:64:6f:77:ca:88:c8:e5:ac:a1:5a:37:ea:06:
dc:57:b9:67:70:d6:1a:ff:fd:a4:de:46:eb:76:c7:ad:a5:e9:
79:26:c2:03:a3:7a:42:25:89:38:ca:ba:3b:ef:95:85:48:7a:
d6:10:55:55:04:43:3f:6c:1f:1a:b6:3a:50:53:61:6c:e0:3a:
30:e7:95:ca:bb:47:a3:ef:ed:1c:2b:e3:e0:f6:80:90:9c:ee:
ab:bf:f0:85:ec:a8:52:0b:9b:59:f3:c7:ea:43:3b:64:c9:da:
bc:e2:0a:10:f7:a2:fe:ef:ee:20:69:54:ef:c4:3f:53:d7:a4:
0d:ff:ee:d6:8b:6c:2e:5b:3c:ce:80:7a:f1:5a:be:0c:15:4b:
a6:af:8f:e0:de:7b:fd:2b:8a:c1:74:3e:2a:46:71:14:25:73:
f6:ea:63:6b:a7:56:a2:4b:1e:98:9d:5f:b5:38:49:06:ea:62:
e5:6e:0a:41:91:40:39:5a:55:b2:6b:7a:f1:34:c3:bf:df:e2:
22:92:72:4b:7a:9e:3e:ed:c8:fa:40:31:9f:f9:b2:95:b4:af:
e9:b7:c4:f9:35:28:b0:d9:0e:16:85:2c:99:15:38:bd:b7:a0:
20:4a:cf:d3:2b:f5:0b:da:ce:ea:6b:9d:ef:c1:e9:24:ea:90:
af:cc:1c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org