Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA85A2E10D911EEBA3AB1214AD9E6FC.roa
File: FEA85A2E10D911EEBA3AB1214AD9E6FC.roa (raw, json)
Hash identifier: 0lEVVHS+GMMCJ1QdrJ2uOlsVgERTGW6vw2MqJloJG18=
Subject key identifier: 0A:8A:97:92:72:8A:C6:39:F2:C6:F5:74:13:0A:09:FF:0B:64:01:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA85A2E10D911EEBA3AB1214AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:51:36 +0000
ROA not before: Thu 22 Jun 2023 08:51:33 +0000
ROA not after: Fri 05 Jul 2024 08:51:33 +0000
asID: 210334
IP address blocks: 154.89.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11580 (0x2d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:51:33 2023 GMT
Not After : Jul 5 08:51:33 2024 GMT
Subject: CN=64940b98-4433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:91:e9:ca:08:47:7a:ac:f1:a4:ae:b7:3e:
cf:e6:73:9b:47:12:13:10:ed:53:cd:5a:8f:4f:da:
37:b4:e9:d9:f3:98:8f:c2:4c:fc:b6:15:6c:59:45:
eb:28:56:d8:bb:9c:ee:82:74:ef:ce:86:31:53:48:
b7:15:ef:6f:4f:47:0a:0d:8c:02:0b:cc:00:9f:5d:
e5:27:b4:ef:9c:3b:d6:9f:00:8c:e2:47:bc:4b:08:
03:8a:1c:cc:2a:17:9d:fb:e9:3a:27:8b:b4:0b:43:
37:32:2b:c9:4a:1f:4c:b0:c0:d1:ba:13:14:aa:cb:
89:53:62:46:08:a5:30:7d:b8:cf:7f:e2:63:3f:d8:
d8:75:8b:ca:fd:c2:1b:c8:1b:a0:6d:22:28:e4:fe:
c4:cb:9a:1a:ad:af:34:ca:ae:a7:62:bf:23:3a:57:
b2:27:9d:d3:0b:92:a5:b4:40:6a:cc:33:64:d1:72:
bc:61:a9:d3:63:0c:04:c3:59:ce:39:1a:a4:67:b8:
e2:88:93:da:51:85:e6:f2:21:4c:25:b7:d0:e3:35:
1c:53:c5:4a:67:29:bd:d5:cf:2a:e3:66:ac:de:cb:
65:c0:9b:9f:75:72:69:dc:b9:e5:91:87:78:75:de:
91:81:96:80:d4:a5:ff:dc:96:a9:24:e7:40:45:f2:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8A:97:92:72:8A:C6:39:F2:C6:F5:74:13:0A:09:FF:0B:64:01:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA85A2E10D911EEBA3AB1214AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:37:ac:0b:f3:d4:55:9c:55:18:0f:1a:e9:e5:53:ed:fe:2d:
a6:30:47:4d:1d:94:a5:be:38:31:f2:8f:7a:35:d4:5b:7d:1f:
44:37:0c:de:60:5c:b3:de:bd:18:e3:e7:a8:86:14:5b:15:51:
10:70:28:18:09:7e:e7:bb:4b:2c:52:c2:16:f4:56:08:29:77:
1d:85:49:e5:b7:dc:e8:ab:ba:51:29:09:74:87:c7:36:be:00:
56:3b:19:d1:52:c9:d2:d1:d8:e6:de:1b:2a:f0:1b:7f:9e:ca:
aa:ce:ad:12:e0:ab:56:3c:35:25:2f:04:ff:6e:7c:39:bc:5e:
67:0f:52:0a:6c:a9:5c:a5:f4:35:91:90:be:fd:ca:e9:8e:45:
ec:c0:5c:de:58:d6:a7:60:d8:b3:2a:1a:b3:b7:a7:a6:67:58:
e8:07:57:e1:16:9e:bb:e7:80:7c:98:5d:2b:52:bc:08:b6:c5:
90:15:92:17:70:bd:68:d3:83:14:af:30:d6:2c:04:39:e8:0e:
40:2c:4c:18:da:b6:43:ef:a9:24:6b:a5:21:57:fb:13:86:56:
7f:1c:82:99:e8:c8:00:9f:ca:19:ef:51:73:7f:0d:f3:b9:76:
40:9c:b1:4e:b2:1b:fc:20:e6:a0:1b:b8:ea:e5:00:5b:a4:d5:
2f:86:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org