Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B88224010D811EEA8FB7A1D4AD9E6FC.roa
File: 9B88224010D811EEA8FB7A1D4AD9E6FC.roa (raw, json)
Hash identifier: M2zIJCtrIVowbryqKwSOBwwJrqIgcS7biI1j6lCJpaE=
Subject key identifier: 11:FD:11:9E:37:AA:2E:33:4D:AD:E9:72:6B:8E:B8:83:55:55:1F:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B88224010D811EEA8FB7A1D4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:41:40 +0000
ROA not before: Thu 22 Jun 2023 08:41:37 +0000
ROA not after: Fri 05 Jul 2024 08:41:37 +0000
asID: 210334
IP address blocks: 154.89.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11564 (0x2d2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:41:37 2023 GMT
Not After : Jul 5 08:41:37 2024 GMT
Subject: CN=64940944-2e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:15:f4:89:d5:02:d2:da:df:13:5e:c5:b9:
07:cc:97:c7:af:40:cd:9e:cc:6e:40:4d:85:6e:3d:
cd:f4:64:92:16:4b:69:71:52:30:82:4a:b4:89:7b:
ae:f8:1b:af:4f:bf:00:a9:c7:fa:6f:a7:5b:95:56:
ce:16:16:61:45:0f:0a:93:36:9f:e5:7e:43:9f:8a:
bd:0c:39:65:82:99:ee:e8:ad:f7:6c:07:6a:5f:65:
a8:ac:e1:ab:b3:6d:fc:ae:ee:10:1c:1a:fb:31:85:
8e:cb:39:aa:91:37:23:3e:25:c9:83:b8:aa:eb:38:
1b:b8:20:35:99:22:bb:01:59:27:db:c4:98:d2:86:
0a:f1:8a:d2:0b:88:0d:57:8b:98:1e:e4:51:1f:50:
7f:81:2f:f8:a2:b2:e4:25:be:80:4f:09:75:23:9b:
53:21:36:02:35:6e:12:53:a0:b6:2a:11:5a:6d:65:
cf:a0:24:44:72:d6:d9:3d:bb:95:d5:e1:95:dd:12:
ef:80:7d:44:f3:b5:33:a3:6c:37:ec:7b:83:02:8c:
95:c2:0b:e6:88:91:6f:91:05:d1:45:a3:20:f1:b8:
ba:a3:5d:08:24:fe:97:2e:b6:41:0f:59:d6:3e:70:
1d:24:49:dd:71:3d:5b:39:20:77:d7:ea:40:41:49:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:11:9E:37:AA:2E:33:4D:AD:E9:72:6B:8E:B8:83:55:55:1F:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B88224010D811EEA8FB7A1D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.32.0/22
Signature Algorithm: sha256WithRSAEncryption
11:86:ed:a8:61:0b:ea:fa:80:7a:37:4d:93:b6:3d:42:46:8c:
e1:07:92:94:17:09:d3:0e:b8:b8:c0:c2:a6:ae:82:b9:08:27:
a3:f5:45:1c:9c:f7:d9:e1:02:7e:3c:a6:8b:11:28:da:14:e4:
b1:3b:6c:e5:ca:5d:ed:aa:50:12:69:35:34:23:7d:2e:ac:70:
78:74:99:38:68:73:8c:66:37:72:ad:dd:89:4c:a5:ab:91:6e:
01:e0:27:30:55:1f:6d:c3:91:d4:28:a7:86:54:02:0f:ca:78:
01:00:99:bf:09:a4:73:64:d5:b4:d4:e8:23:d6:78:b5:9c:91:
42:20:a2:b8:8e:3c:80:74:20:f0:ce:2e:7c:95:4b:06:07:97:
7c:03:d5:7f:93:87:ae:fe:b4:c4:b7:4a:54:8c:aa:08:8a:c4:
47:d0:82:c5:76:8c:29:b0:e8:a0:5d:a2:2b:7e:f1:1d:93:52:
f3:0e:bd:40:6a:b8:ef:d0:0c:27:35:fc:56:8a:e6:3f:b2:89:
7e:1d:b3:90:c2:4c:ab:e8:40:72:05:e9:f8:a7:82:7b:7c:49:
4c:48:8a:dc:bb:16:22:99:47:d3:8e:04:65:d9:6c:ee:4a:6f:
65:56:b8:af:bb:91:b7:c6:14:d2:25:f6:f6:4f:36:4e:c9:61:
61:60:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:16 2024 by rpki-client on console-ams.rpki-client.org