Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC50D1F810DA11EEA2CF3D244AD9E6FC.roa
File: DC50D1F810DA11EEA2CF3D244AD9E6FC.roa (raw, json)
Hash identifier: ucdyoFtNHfScdFfTSZDWy0k6D7tORN15Gq1dWE4QWW0=
Subject key identifier: F6:78:E3:C1:CF:A0:21:69:91:D3:D2:B6:C9:AF:E6:F0:E9:EC:42:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC50D1F810DA11EEA2CF3D244AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:57:48 +0000
ROA not before: Thu 22 Jun 2023 08:57:44 +0000
ROA not after: Fri 05 Jul 2024 08:57:44 +0000
asID: 210334
IP address blocks: 154.89.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11594 (0x2d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:57:44 2023 GMT
Not After : Jul 5 08:57:44 2024 GMT
Subject: CN=64940d0c-2641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:ef:55:85:70:fe:0d:a7:33:64:ac:14:18:
2b:1c:37:75:b6:e1:cb:1e:19:70:0e:e9:d8:12:ef:
bb:e9:43:f7:3b:84:72:90:4c:4f:1d:43:56:8e:af:
76:a1:d6:a6:01:9b:63:0b:2d:0a:2f:27:63:32:88:
45:bc:3f:9e:4d:7b:b9:83:ab:49:e0:86:d3:ce:6c:
ee:dd:db:ef:2e:49:0a:f3:40:34:c2:f3:a6:72:30:
d7:2f:ca:d7:af:86:75:80:6e:61:1b:f7:45:2b:1d:
4d:bb:d8:8d:d3:03:e9:90:04:4f:1e:27:91:ba:fe:
24:24:60:07:5d:55:ab:0e:b7:e3:55:58:85:10:3c:
84:88:b5:58:e6:48:b4:e2:fb:38:36:32:12:f1:e2:
b8:b8:48:e3:5e:23:9d:c8:1b:33:02:05:07:a2:4d:
47:46:c7:70:ee:05:23:a8:40:6b:f2:02:31:49:80:
93:fa:3a:ba:21:76:3e:1b:bb:f5:e8:24:05:3f:0a:
36:0d:77:16:ef:ea:e6:e7:7f:5a:2f:d2:96:ee:3f:
9e:31:f6:26:9f:d7:e9:84:2b:3a:b5:b2:53:c2:65:
97:68:3f:79:40:60:c9:43:a6:e8:ad:10:04:19:ab:
75:54:a4:38:a9:51:8f:b3:bf:84:38:4d:b6:89:c8:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:78:E3:C1:CF:A0:21:69:91:D3:D2:B6:C9:AF:E6:F0:E9:EC:42:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC50D1F810DA11EEA2CF3D244AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.41.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9f:5e:16:85:49:5b:d6:36:ba:94:15:ec:f8:93:c4:62:72:
e1:0a:92:c7:08:c4:cc:36:39:97:7e:15:94:86:36:5a:f4:7e:
5f:8c:61:78:f5:a8:70:53:e3:81:c6:5a:b8:e0:c0:87:be:c0:
8f:30:9c:de:e1:37:fe:1a:04:41:fe:46:31:87:32:7d:cc:09:
ea:25:67:1f:c7:54:84:75:77:cd:8a:37:1b:80:4b:c6:bf:9f:
43:e5:ef:f5:68:ff:c1:77:5e:2d:cc:b6:86:1f:61:0d:4f:89:
4a:4e:7f:78:58:24:47:7e:1e:69:a7:7c:59:54:6d:c3:36:fa:
14:5d:6b:b9:36:48:2b:5a:7a:29:55:57:95:c1:19:f0:d4:e9:
2d:ae:c3:3f:39:71:37:fd:3c:22:27:2c:f9:7c:14:a6:c9:89:
90:27:f9:89:21:c8:a9:93:6c:c0:df:fa:aa:e5:89:5f:04:21:
1c:ee:d1:ab:72:30:d7:fa:b1:ab:31:36:0e:d9:af:7e:e3:be:
e9:3a:69:75:23:75:ce:a4:73:e2:af:39:b4:d4:9e:3b:24:0e:
02:c9:19:2c:97:46:e6:eb:18:05:a5:c5:37:bb:28:f2:b4:5a:
15:38:a2:44:e7:c1:d4:16:99:92:6b:e4:0a:5c:cd:c0:0f:2a:
b2:3a:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:40 2024 by rpki-client on console-fra.rpki-client.org