Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE8F7BB810DC11EE8359342A4AD9E6FC.roa
File: BE8F7BB810DC11EE8359342A4AD9E6FC.roa (raw, json)
Hash identifier: 01+hXfevhQInfTecj91iNxmzymVdbUXijYU04MPxpSg=
Subject key identifier: B0:94:BA:19:F6:94:7A:02:A3:D3:FF:3B:A2:C8:3C:AF:E9:7F:69:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE8F7BB810DC11EE8359342A4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:11:17 +0000
ROA not before: Thu 22 Jun 2023 09:11:13 +0000
ROA not after: Fri 05 Jul 2024 09:11:13 +0000
asID: 210334
IP address blocks: 154.89.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11624 (0x2d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:11:13 2023 GMT
Not After : Jul 5 09:11:13 2024 GMT
Subject: CN=64941035-c792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:0a:2a:a1:63:f3:a2:e7:56:f9:75:78:a4:
de:bd:ac:31:04:b2:92:d7:07:c2:aa:31:e0:2a:31:
a9:a2:fd:ab:7a:96:3d:fe:d2:e4:28:98:9f:fe:dc:
e1:da:fb:59:2d:a0:6a:97:83:d8:c0:13:1b:ba:24:
d3:0f:de:cf:87:09:7d:06:89:ab:0b:2d:a6:88:b4:
58:ff:b6:97:14:44:af:38:0d:29:12:cc:e8:02:4f:
dc:3f:8b:c8:67:11:c4:bf:3a:97:13:7c:32:7e:17:
19:82:17:95:13:ed:92:30:5f:92:1e:7f:96:c2:33:
9e:f7:4c:62:d9:0b:c5:57:26:7d:9e:73:df:32:54:
cd:f4:34:86:d9:ca:75:85:38:05:3e:45:a7:ec:4e:
ab:12:14:d1:5a:00:70:71:18:b2:77:2d:5d:ae:40:
44:e8:59:ac:36:06:6a:56:e8:bb:26:f7:72:62:2f:
74:c0:b9:4a:23:30:b4:6b:7a:3f:8b:41:b8:98:7e:
33:1a:bd:8a:8f:03:19:98:24:29:c8:df:df:7f:08:
72:21:ea:23:bc:06:21:7d:82:98:31:e1:91:0d:9a:
a2:eb:88:7c:e9:e3:d0:27:db:03:48:b8:86:81:6e:
ef:1e:de:e3:e7:fd:c4:29:eb:f1:a9:04:52:c0:db:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:BA:19:F6:94:7A:02:A3:D3:FF:3B:A2:C8:3C:AF:E9:7F:69:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE8F7BB810DC11EE8359342A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:93:98:c4:ed:99:13:c2:96:0f:b8:b2:38:93:e4:f8:17:7b:
c8:da:e7:11:33:bc:43:ee:90:4f:1f:78:1b:fb:9c:76:d6:f1:
86:16:3f:57:50:ba:7c:f3:4e:b0:f9:7d:b3:6c:cb:a6:d2:04:
c3:22:7a:6c:cb:25:7a:50:ec:9a:21:33:02:02:fc:cd:23:99:
f2:af:5b:23:32:bf:b3:da:c8:25:2c:ed:d1:d0:ff:6a:d7:ec:
d5:c6:f9:c3:d2:01:37:46:2f:1b:90:8a:a2:57:72:4e:71:be:
b1:c1:bd:75:5f:33:62:ed:bf:de:5c:c4:8e:d1:0b:35:cd:d3:
54:e3:42:48:0d:7b:ae:c2:61:ad:e3:4f:10:f6:90:41:62:48:
0b:bf:11:11:c0:b0:62:7c:8f:55:3e:c6:b5:fc:cd:43:25:fb:
08:6d:d7:b6:be:1e:ab:a7:87:0a:84:74:ed:e5:cd:ed:3e:3a:
b5:ad:8f:ac:59:c0:af:14:35:e4:a5:d4:85:28:16:52:b1:f9:
a7:bd:dd:1e:d8:ec:f0:1d:d8:4e:d3:fb:0d:9f:6f:28:16:13:
70:e5:93:9b:42:f1:2e:68:ed:98:c6:90:5d:32:eb:1e:25:9b:
6c:ab:f2:d7:59:ea:c6:72:a8:89:71:b4:59:e5:96:63:49:1a:
5d:56:ca:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org