Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89F77AECFD5111EEBD3CF409017001B1.roa
File: 89F77AECFD5111EEBD3CF409017001B1.roa (raw, json)
Hash identifier: kOYvnNl2Jzaf/BEDXbag/QI8KTtweOhJj/eJS7ocYiI=
Subject key identifier: 65:7C:A3:5F:A2:A0:78:D4:97:A1:18:21:84:FD:34:7F:E3:F0:75:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89F77AECFD5111EEBD3CF409017001B1.roa
Signing time: Thu 18 Apr 2024 07:01:54 +0000
ROA not before: Thu 18 Apr 2024 07:01:51 +0000
ROA not after: Fri 26 Apr 2024 07:01:51 +0000
asID: 39600
IP address blocks: 154.203.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44593 (0xae31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 07:01:51 2024 GMT
Not After : Apr 26 07:01:51 2024 GMT
Subject: CN=6620c562-6aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:2b:92:da:10:bf:46:03:f2:af:4a:79:99:
54:af:85:10:b8:db:e5:93:d1:66:0b:90:07:50:93:
f7:16:a1:49:91:96:1c:28:4b:4d:6f:fe:67:4b:6f:
cd:32:7f:03:6e:35:b4:a9:4a:00:6b:d5:a5:66:b3:
e7:ce:56:a5:48:94:36:5c:f0:c6:52:02:9c:8a:7f:
c7:ca:22:4b:d5:96:7a:4e:90:f5:00:5a:02:e3:d6:
c2:07:20:45:aa:d4:65:59:1f:ce:20:7c:41:6a:6d:
79:3c:84:3a:3b:aa:a9:3e:d3:36:df:bd:9f:03:d5:
8e:00:22:5f:7e:f9:10:c9:87:05:b6:b7:39:36:d7:
74:8c:ed:22:c7:ba:0e:73:69:21:43:21:2e:7b:a7:
eb:80:6d:65:61:29:84:2e:56:31:d4:e9:59:4c:6b:
8f:ef:26:b6:81:d1:cc:c7:db:d5:0c:a2:03:a8:0d:
ed:89:e1:67:c5:20:9e:57:d2:b7:13:68:c2:5f:1c:
ef:fe:db:ce:f7:82:ff:c0:57:02:38:0a:a1:de:e4:
5c:4b:ae:f0:f5:cf:32:d9:dc:ec:3d:84:a9:eb:20:
c7:09:86:e5:64:de:eb:55:bd:24:3b:9a:4a:67:e1:
10:ed:ab:f0:8e:3e:bc:13:25:35:fd:cf:c5:22:f3:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7C:A3:5F:A2:A0:78:D4:97:A1:18:21:84:FD:34:7F:E3:F0:75:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89F77AECFD5111EEBD3CF409017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.72.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:68:f8:26:ef:cc:b8:57:6e:80:41:06:60:af:23:0a:89:07:
1d:69:f0:59:78:40:10:de:06:28:7b:c8:70:80:d9:18:2a:83:
7f:83:93:c6:70:c0:37:bc:a1:74:bd:61:9d:df:b3:2c:7a:63:
1b:6c:43:23:fa:d1:f5:f1:d9:91:c9:e2:a3:6f:c2:80:ce:25:
b3:2d:0f:35:24:7e:48:d3:3c:c8:58:24:c6:f7:34:bb:63:ad:
15:80:ce:34:c3:dd:64:01:c8:da:29:6a:66:a3:af:78:83:ff:
ab:2b:91:a6:0b:13:e7:db:d1:a8:93:92:e0:07:e6:41:42:6b:
cd:e7:23:fe:7d:07:1f:d4:84:4a:3d:64:d1:9f:5e:29:45:3c:
a0:4f:e6:a2:e0:c5:bf:51:d9:fc:41:a0:da:ad:5a:d6:b7:c1:
c8:ec:a4:a0:79:29:9b:32:16:2d:2d:dd:45:9a:0f:97:15:1c:
b1:52:8f:ae:02:5f:f7:52:cb:c7:e0:64:81:2b:21:fb:bd:37:
4c:7c:28:cf:f0:8c:1d:c5:e5:b2:3e:a2:ea:b4:85:5c:27:b8:
80:ad:90:b4:c9:eb:31:fa:27:d1:25:ee:3c:5e:21:3e:24:d5:
63:dc:f5:89:91:d6:8e:00:c9:bc:c8:79:12:1b:b1:dc:f0:cd:
e4:2e:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:37 2024 by rpki-client on console-fra.rpki-client.org