Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D25B69A10D811EE95D8621D4AD9E6FC.roa
File: 8D25B69A10D811EE95D8621D4AD9E6FC.roa (raw, json)
Hash identifier: e1U7V9xl7yKcyrRuCI7Oo9vmRsaXWKllxx8DhBbffno=
Subject key identifier: FF:42:45:A9:37:F2:B9:95:57:87:CC:9B:29:BA:0C:26:E8:77:9D:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D25B69A10D811EE95D8621D4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:41:16 +0000
ROA not before: Thu 22 Jun 2023 08:41:13 +0000
ROA not after: Fri 05 Jul 2024 08:41:13 +0000
asID: 210334
IP address blocks: 154.89.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11562 (0x2d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:41:13 2023 GMT
Not After : Jul 5 08:41:13 2024 GMT
Subject: CN=6494092c-b241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:42:fa:91:83:b9:2e:e9:76:17:1f:be:6c:
53:24:45:4d:2b:6b:72:98:24:c9:44:05:fc:f8:d5:
60:5c:a8:fa:87:ae:a7:ed:73:75:c1:60:e4:a4:ab:
52:9b:1c:8f:87:86:8e:cc:27:c0:9f:63:84:2e:12:
b1:e8:14:59:b3:08:d8:b6:0f:b4:6e:52:62:f1:cb:
48:56:a2:d2:c4:1c:a2:30:05:b4:21:d8:37:25:8e:
73:22:8e:d0:ac:73:f7:eb:2c:56:2e:1c:b8:79:a0:
9f:29:ee:69:3d:c7:41:8d:bf:70:a3:5f:4d:e3:87:
d1:50:80:c6:d1:c6:a9:02:9c:2e:15:07:47:ea:45:
dc:16:b4:22:44:26:d3:35:0b:ba:5c:cf:10:22:fa:
a3:07:cd:6f:01:8f:bb:5a:9e:13:12:98:e8:2d:f4:
d9:80:e6:13:20:4e:7c:cc:6e:73:f2:6b:df:c2:a2:
23:00:d9:eb:c4:bb:51:d1:4c:1f:22:ed:5b:da:db:
59:a4:cb:4e:2f:75:fd:a3:24:80:49:1b:f7:4c:e8:
61:4f:fb:79:b7:f8:e9:d1:c7:98:cf:88:7e:f4:43:
0b:31:a6:f1:2d:9d:84:08:d5:13:f8:48:2e:10:a3:
1a:ca:1c:f5:a9:78:ae:b0:4b:36:39:37:60:9d:cd:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:45:A9:37:F2:B9:95:57:87:CC:9B:29:BA:0C:26:E8:77:9D:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D25B69A10D811EE95D8621D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.32.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:02:73:29:23:71:83:cf:4c:82:29:b9:dc:72:8f:24:9f:aa:
61:d0:f1:7a:fa:62:69:71:74:a4:19:b8:90:b1:2c:a8:8d:95:
95:ab:69:dc:90:73:72:8a:71:d4:7f:2e:d4:6c:e0:1d:b2:1c:
3d:21:2e:6e:f8:66:dd:1d:db:f3:40:1e:55:4e:e3:62:13:59:
ab:7f:07:f3:2f:af:20:73:81:e6:4a:84:3d:11:90:8a:0c:1c:
0d:7f:1a:4b:33:85:4a:27:45:8b:2f:b2:09:9e:b9:5b:8d:73:
8e:ba:6c:b9:ba:c2:d6:4c:bb:2e:cc:b3:cc:c9:10:9d:56:af:
e8:47:de:a9:4a:0d:42:72:6b:02:72:b2:42:b5:12:92:c2:39:
4a:14:1c:b6:d1:3c:ef:b7:b3:9b:7c:7c:75:4c:74:2e:b1:bc:
d3:02:a6:bd:42:45:a6:cf:53:43:20:e9:9f:11:5e:53:b7:fe:
43:ce:01:a4:e5:46:61:1d:7b:30:d5:99:34:8e:eb:59:fd:84:
f8:1a:89:04:ce:99:5e:e6:3f:af:fa:94:1d:4a:8a:ed:b4:44:
44:c6:c4:f6:bb:ff:2b:23:3e:f3:04:a6:3d:5a:4d:3b:87:86:
7c:e6:b7:96:60:32:f3:42:0f:e3:a0:46:17:ab:95:2c:08:e0:
19:be:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org