Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE489F2010DC11EEA4F58A2A4AD9E6FC.roa
File: DE489F2010DC11EEA4F58A2A4AD9E6FC.roa (raw, json)
Hash identifier: wTFOJ+mXFLLE7xukmIGvEb3vhI7wXPtqLd04DVOYBmA=
Subject key identifier: 81:AE:F1:73:0A:A1:A7:E5:17:27:D3:42:BA:B8:52:FC:0F:40:57:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE489F2010DC11EEA4F58A2A4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:12:10 +0000
ROA not before: Thu 22 Jun 2023 09:12:07 +0000
ROA not after: Fri 05 Jul 2024 09:12:07 +0000
asID: 210334
IP address blocks: 154.89.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11626 (0x2d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:12:07 2023 GMT
Not After : Jul 5 09:12:07 2024 GMT
Subject: CN=6494106a-9c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:4a:16:b3:6d:8f:ed:9c:ec:cd:4c:7a:98:
e5:5c:82:1a:c4:72:cb:11:89:bb:23:63:9e:b8:1e:
ef:0c:b3:d3:fe:40:da:89:92:55:74:0c:02:7d:53:
ad:d0:57:0d:fb:4e:e3:2e:07:75:ca:8b:93:b1:c4:
42:81:6f:4d:e3:75:3a:98:0d:06:e0:f3:00:55:90:
00:84:b1:3a:64:e0:cb:25:40:d8:52:7a:a7:5c:61:
89:88:ea:a1:72:9b:75:f2:9b:b0:67:16:3f:79:fa:
d4:f6:97:72:fd:58:55:14:b7:b8:d2:67:e7:74:bc:
e2:20:97:ca:b2:60:bd:7d:1f:f4:11:19:eb:09:81:
5f:1a:35:9b:20:39:22:7a:eb:49:17:6e:fe:50:21:
f5:5c:10:f4:1e:48:b2:bc:62:b9:be:8e:f9:03:d4:
67:21:b8:f1:cf:c7:c3:a7:26:ba:08:0b:f1:ae:39:
4a:c4:9b:e9:22:7b:aa:fe:90:49:69:b0:8a:d3:d7:
a1:ee:e7:12:53:c0:0d:52:37:6c:64:4f:9b:b6:14:
d9:04:50:f4:50:74:70:c2:dd:21:bb:0d:1d:ed:a2:
50:fb:c5:6b:c0:0b:97:0c:f8:3d:2c:4b:31:a4:5a:
8b:f9:43:fd:33:05:f5:5d:0e:3f:a0:21:11:69:67:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AE:F1:73:0A:A1:A7:E5:17:27:D3:42:BA:B8:52:FC:0F:40:57:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE489F2010DC11EEA4F58A2A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.59.0/24
Signature Algorithm: sha256WithRSAEncryption
13:90:58:7f:09:d5:fe:bb:78:6e:4a:a3:71:8f:35:bf:d7:4e:
ac:d5:71:df:1d:bf:6b:91:81:1c:8f:06:cd:91:2f:cc:86:47:
76:af:bd:db:fc:15:4b:5f:e8:0d:f6:d4:d1:c9:dc:2b:b7:d8:
90:e1:f5:52:97:60:96:dc:ed:ff:e7:a6:6b:71:63:a1:43:30:
bb:a5:d6:0d:66:f8:95:95:6e:47:33:a2:2a:01:7d:e2:f5:d5:
eb:bd:d4:89:94:f3:82:49:7f:e0:cb:d5:b0:95:af:4b:d0:49:
47:c2:65:c2:3e:75:25:58:a4:b2:82:cc:15:1f:78:d5:b5:bf:
cc:f1:e0:d7:03:03:39:86:aa:4c:71:45:20:68:a9:1d:ec:3c:
ab:2d:7f:2a:b8:90:5d:2e:8f:62:58:58:7c:f3:c6:f4:a7:3f:
d5:af:74:bf:7a:d2:b2:09:b0:89:36:f4:41:aa:ca:ec:17:f8:
bd:a4:1c:b8:81:d8:d2:74:d1:e8:13:c7:20:4b:0c:30:aa:2b:
b8:e4:ca:63:d9:3f:0c:ec:a3:2e:62:4b:4a:00:45:9f:ae:ca:
51:b6:fb:73:42:a6:8d:e0:ad:1e:c8:48:3c:bc:57:e8:69:1d:
7e:0a:9b:45:44:81:91:05:08:aa:cd:9e:11:06:b0:d2:f3:ec:
86:6e:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org