Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68A164610DB11EE97BACD274AD9E6FC.roa
File: F68A164610DB11EE97BACD274AD9E6FC.roa (raw, json)
Hash identifier: rizXOKezcs0V88Zg95la0ZXcJGuSp0fB5Y4fhof/En0=
Subject key identifier: 00:AF:7D:22:AC:77:0D:7F:2C:B1:F2:AA:3E:03:5E:AC:A5:E4:A9:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68A164610DB11EE97BACD274AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:05:41 +0000
ROA not before: Thu 22 Jun 2023 09:05:38 +0000
ROA not after: Fri 05 Jul 2024 09:05:38 +0000
asID: 210334
IP address blocks: 154.89.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11612 (0x2d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:05:38 2023 GMT
Not After : Jul 5 09:05:38 2024 GMT
Subject: CN=64940ee5-8f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:7e:b7:18:f2:99:b7:6e:69:1a:be:f0:f2:
55:bf:20:8d:8b:96:e7:fa:4e:ff:6a:9e:28:10:d3:
c2:c1:88:d5:a5:a8:7c:23:45:3d:ec:98:1e:05:8b:
25:0d:c9:b1:ec:ae:d7:aa:79:a2:4a:12:ea:a7:86:
ff:c3:e5:cb:72:ea:bf:7e:0c:73:2e:5e:bb:aa:64:
83:07:f7:01:a3:2a:9c:8a:26:ca:f9:82:3b:eb:90:
d5:61:6b:51:cb:a2:95:d0:d9:0b:22:cc:92:51:cd:
b7:3e:6b:3d:d1:de:00:9e:f3:1e:9d:6e:16:9f:8e:
b5:16:3e:06:ca:87:33:1c:cc:bc:0d:b8:c3:dc:bc:
7e:94:99:01:bb:d2:f8:13:ac:78:3d:8f:bc:52:71:
13:b7:37:59:f7:58:ba:b6:3d:4f:83:a2:ca:f3:61:
99:4c:90:65:5e:43:0a:a2:e1:50:1f:2a:07:26:49:
74:6a:27:fd:12:f5:a5:4c:dc:8e:70:c7:39:49:83:
29:78:8e:35:f7:03:5e:83:ba:0d:46:b5:77:36:a4:
d0:63:82:ca:67:77:dc:ce:3d:14:99:94:82:1e:c4:
25:63:fb:73:46:3a:87:c7:a0:4a:44:9b:01:ce:fe:
50:7b:af:14:f7:1f:4f:e7:f0:40:27:6b:f4:54:eb:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AF:7D:22:AC:77:0D:7F:2C:B1:F2:AA:3E:03:5E:AC:A5:E4:A9:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68A164610DB11EE97BACD274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.51.0/24
Signature Algorithm: sha256WithRSAEncryption
47:04:46:52:43:b4:d3:dd:0b:7d:aa:04:a1:44:39:0e:90:5b:
a9:94:fc:dc:88:45:38:d4:d8:7f:32:b0:f4:9d:de:ee:30:19:
f3:0f:e4:a0:f3:b2:3d:0e:3b:6b:ff:89:82:a6:9a:57:0c:a1:
a6:8f:1f:76:45:0a:89:6d:9d:37:fc:12:bf:62:42:49:f8:66:
c3:81:a5:f9:3b:ef:5c:77:c1:0d:a2:2c:b1:cb:2c:ec:6f:4b:
e3:e3:27:f0:7a:11:c1:26:68:ca:96:66:a7:03:28:e5:0e:f3:
14:8f:72:05:0a:c7:58:fe:fb:e8:8a:0f:b4:e9:9f:3e:0c:f0:
2c:cd:57:fd:2b:b6:28:1d:b9:97:62:84:bd:4e:99:11:a8:fd:
88:04:bc:56:c9:41:ef:23:ac:60:14:e5:f9:0e:b2:c3:75:1c:
1b:65:df:2c:df:e6:a1:fb:63:f9:4e:4b:d4:33:5d:96:5a:16:
35:d6:f8:dc:c2:95:75:dc:d9:4a:eb:ca:4f:65:4f:55:e1:85:
91:05:aa:48:3e:e0:f3:23:1c:98:a8:c9:81:1e:5c:08:84:b4:
47:fe:01:47:26:ad:c5:ec:41:77:27:e1:5e:5d:13:1e:59:17:
3c:1f:7f:54:8d:99:8a:97:de:2a:42:65:23:d0:a2:b0:6b:a4:
f5:da:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org