Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D74C4B6E10DB11EEAA2680274AD9E6FC.roa
File: D74C4B6E10DB11EEAA2680274AD9E6FC.roa (raw, json)
Hash identifier: pRvihx6W6sOcKtiv9ier4pSsxS0xcCSuIU9nFvq8f3Q=
Subject key identifier: 55:67:53:82:CB:29:8E:FC:E0:D4:FE:0E:F0:CA:0D:E7:BB:1A:F7:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D74C4B6E10DB11EEAA2680274AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:04:49 +0000
ROA not before: Thu 22 Jun 2023 09:04:46 +0000
ROA not after: Fri 05 Jul 2024 09:04:46 +0000
asID: 210334
IP address blocks: 154.89.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11610 (0x2d5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:04:46 2023 GMT
Not After : Jul 5 09:04:46 2024 GMT
Subject: CN=64940eb1-e13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:02:7c:99:a4:97:04:74:9c:44:bf:7f:73:
93:83:76:e4:d4:e3:df:65:1a:6f:47:63:3d:dc:fa:
98:5c:e3:e9:8d:db:18:b9:42:83:17:ef:8b:d7:1c:
73:1f:03:04:2b:fc:37:19:b9:7c:2c:36:3f:4b:40:
97:cd:c8:55:b0:f5:b1:00:b5:65:b4:16:cf:f8:1b:
be:86:ef:5d:c0:e0:2b:8a:c5:62:de:c0:6d:1a:f8:
71:22:55:f9:60:5d:11:65:b2:cd:1a:2b:b4:59:e4:
95:5a:4f:79:43:58:49:67:4e:33:1c:66:c1:b2:c5:
6d:98:73:ce:a6:97:ee:7b:05:64:90:72:9a:07:de:
19:e2:0c:2c:23:98:ed:f9:87:cb:31:2c:80:9c:91:
70:06:88:2d:b7:e7:26:be:d9:c2:3c:a6:7a:c0:fb:
85:3d:a2:b7:8e:28:21:e8:28:1b:7f:3a:06:7e:fb:
eb:5d:d8:21:64:4d:30:47:2b:e7:b4:b5:a7:74:0e:
18:84:aa:b7:3c:ea:70:43:43:a1:26:e0:46:26:50:
e2:4f:e3:c2:7f:fd:de:96:00:5b:21:28:50:6e:47:
70:35:56:11:e4:ca:a8:f2:3f:63:73:18:39:0a:1b:
3f:b6:7a:35:b0:c3:05:37:2c:c3:6c:ac:8e:d4:f4:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:67:53:82:CB:29:8E:FC:E0:D4:FE:0E:F0:CA:0D:E7:BB:1A:F7:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D74C4B6E10DB11EEAA2680274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:56:b4:06:a2:8a:93:a4:81:9b:89:7a:36:9a:90:5e:fa:95:
46:db:3c:22:5f:e8:9a:0e:b2:65:0f:c8:c5:0c:d6:b8:f0:0e:
aa:c7:36:10:64:e3:d3:b2:47:32:4e:88:37:59:ea:0d:7e:59:
2d:f0:36:79:1a:2d:ff:a0:0e:4e:4e:bb:52:89:69:aa:4c:1c:
f7:ab:c8:83:6d:e4:4b:37:fd:5a:e2:d7:cf:c9:ce:0b:87:e7:
be:ef:87:cb:93:a9:59:bb:41:a8:20:fc:3f:ea:2b:7b:e1:00:
9b:22:61:20:ba:4d:40:30:41:14:4f:4a:c3:7c:82:c7:44:8a:
03:0c:0d:80:93:a7:d1:0b:f4:8f:34:e5:1d:cb:31:bc:fa:8e:
82:25:45:56:9e:de:20:7b:7f:b8:a3:5f:72:39:fd:e3:1b:1d:
60:28:34:8e:86:13:80:30:b0:d6:fc:94:b6:5c:5c:ce:1b:e6:
aa:02:dd:79:1f:6b:7d:3b:0b:63:1a:e2:89:a4:9d:bb:ca:9a:
c9:2e:a8:ac:da:0d:63:5f:10:56:52:14:59:14:92:ae:0d:71:
e9:67:0f:ac:d0:56:b8:35:9d:3d:e5:c2:b3:63:98:33:e3:f8:
c8:11:a7:10:93:bc:66:69:20:09:40:da:62:67:4c:af:ef:e1:
85:14:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org