Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1499BA78AF11EE89AE2D114AD9E6FC.roa
File: 8E1499BA78AF11EE89AE2D114AD9E6FC.roa (raw, json)
Hash identifier: gW+LRDek/uKwveUMNrcSgB4OPPL/FaZCptfS3HCv4Rs=
Subject key identifier: 93:61:46:CF:FC:D6:AB:1E:D5:1C:5A:8E:52:DB:62:D7:B2:FF:A5:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4B2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1499BA78AF11EE89AE2D114AD9E6FC.roa
Signing time: Wed 01 Nov 2023 12:09:49 +0000
ROA not before: Wed 01 Nov 2023 12:09:46 +0000
ROA not after: Mon 04 Nov 2024 12:09:46 +0000
asID: 134687
IP address blocks: 154.89.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19247 (0x4b2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 12:09:46 2023 GMT
Not After : Nov 4 12:09:46 2024 GMT
Subject: CN=6542400d-7092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:dd:fb:7f:a7:e7:7b:45:04:d6:f4:c0:8f:
ff:8d:8d:6b:50:9d:47:be:ea:a4:63:bb:34:d4:8b:
80:98:75:ef:eb:62:63:d7:5e:5d:3d:7e:c2:9a:15:
d5:fc:dc:83:e5:b2:cc:96:cd:fa:60:0b:ba:aa:18:
44:e5:1e:b0:c4:9d:a3:da:dd:07:c8:6c:f3:89:fb:
d9:81:34:c0:81:ab:5c:ad:61:91:64:6c:25:94:7f:
26:0b:13:0b:a8:42:4c:c7:7b:42:de:3b:55:80:5c:
eb:77:81:56:e6:b5:7d:5a:35:68:2f:16:8a:d8:0f:
d4:fd:ce:1f:c3:c1:44:ea:87:40:ac:24:e5:01:f7:
c1:34:59:b7:5d:1f:88:28:83:6b:af:d5:88:b8:b7:
9a:49:33:7b:a8:3b:73:7b:7a:5f:80:2f:9e:67:52:
9e:a9:67:10:1a:fe:9b:3e:14:31:94:ec:c6:f4:29:
65:7c:92:7a:9d:9a:1a:76:49:d9:5f:bc:35:93:cd:
ba:d0:4d:03:c3:59:a4:78:9f:22:9a:30:0e:92:1a:
24:24:89:a9:7e:dd:e2:e1:71:d4:77:57:ff:4d:1e:
73:58:74:b0:c8:38:63:8d:1a:28:5c:33:91:f4:d6:
b7:35:53:6d:d8:08:88:fa:84:72:7a:4d:b8:af:42:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:61:46:CF:FC:D6:AB:1E:D5:1C:5A:8E:52:DB:62:D7:B2:FF:A5:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1499BA78AF11EE89AE2D114AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.1.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a4:bb:ac:ef:88:68:17:33:f5:fe:3d:ab:12:5c:b0:09:d7:
7a:7a:b6:c3:04:d7:66:bc:35:a0:76:e6:b7:a5:43:bf:fa:a0:
02:fe:cf:cd:b3:af:c8:70:cf:10:a9:2a:c8:56:e9:c2:c3:98:
1f:f7:07:e0:e7:39:b1:ec:2b:e5:63:a2:fb:6f:85:e9:a2:23:
4c:8b:33:45:06:e8:c8:86:90:0b:df:03:4c:3c:76:1c:c7:70:
af:b1:2e:93:ed:bc:da:0d:90:56:40:b1:5b:6e:fa:45:71:36:
f5:6d:dd:88:40:0c:9a:4a:59:b8:3d:eb:66:92:67:1a:c3:2d:
d5:5e:0f:9e:ba:92:94:88:e3:32:3b:20:8b:98:e2:78:fc:a8:
b3:3a:e6:7b:fd:ab:86:e4:24:eb:07:16:84:cc:dd:b6:59:41:
6d:0c:bd:9d:52:3f:22:da:f9:5a:a3:83:99:45:10:21:aa:d7:
06:ce:b7:75:07:32:26:a6:df:b0:82:25:3b:71:ae:1a:c2:6e:
cc:16:52:d9:ea:67:1a:07:29:d7:8b:56:4a:78:29:a0:66:12:
26:ff:58:18:a2:99:35:de:d8:8a:28:0e:d7:76:19:1c:03:a7:
f4:5c:fb:6c:18:38:c5:73:bc:8a:b2:bc:b1:7c:09:e5:5d:65:
ce:a4:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org