Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A80F382061211EF9872AF63017001B1.roa
File: 0A80F382061211EF9872AF63017001B1.roa (raw, json)
Hash identifier: okYIKrfZDHFGlN5Zxxln8DLSpSTXyyxGIeJadDX/PVs=
Subject key identifier: 87:FA:ED:8F:BD:3D:98:54:B8:8C:12:0F:46:EB:9F:25:6B:72:CF:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B240
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A80F382061211EF9872AF63017001B1.roa
Signing time: Mon 29 Apr 2024 10:20:03 +0000
ROA not before: Mon 29 Apr 2024 10:19:59 +0000
ROA not after: Fri 07 Jun 2024 10:19:59 +0000
asID: 138915
IP address blocks: 154.223.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45632 (0xb240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:19:59 2024 GMT
Not After : Jun 7 10:19:59 2024 GMT
Subject: CN=662f7453-9b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:6e:95:e6:58:e2:44:1a:fe:2a:12:4c:94:
6c:b4:c1:97:99:e3:fc:ab:4c:05:8a:c0:84:cc:14:
11:53:6d:80:48:1f:00:a4:be:8f:83:c1:bc:c8:f5:
82:00:3e:a0:69:5e:6a:9b:d4:7e:07:54:bb:34:8c:
2a:b9:47:a7:04:74:b4:d5:ae:b5:1e:57:df:f2:5d:
7e:76:09:07:1c:83:7c:37:cb:7f:fc:e8:26:fd:6d:
eb:66:c7:3d:da:d3:02:2d:27:23:e8:28:88:3e:bd:
f3:8f:1a:7a:98:5a:42:8d:fd:c8:dd:81:e8:fd:df:
09:6f:f2:a4:80:70:c1:e4:23:d1:43:05:63:da:b0:
f1:41:21:5a:79:7b:a2:75:99:f7:9d:11:9d:77:5b:
88:7b:16:95:df:05:07:f6:64:51:00:6c:81:1e:3c:
80:4f:50:53:79:06:2b:fd:83:25:de:13:46:4b:ac:
8c:28:f3:32:c8:ce:f5:93:89:92:8c:8f:f5:f2:45:
b1:19:6c:e7:79:58:52:d2:ab:e6:6a:df:e8:05:8f:
05:51:82:36:40:e3:ee:d1:59:fa:17:f9:0e:29:f9:
ca:ae:d9:44:28:ec:36:a5:0b:7d:a0:d3:ed:44:2d:
a5:cd:07:ad:ff:f1:da:d7:c5:28:94:55:62:60:31:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:ED:8F:BD:3D:98:54:B8:8C:12:0F:46:EB:9F:25:6B:72:CF:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A80F382061211EF9872AF63017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:37:39:19:c6:73:29:92:fd:f0:8f:1b:5d:c6:d5:56:20:3e:
df:04:e0:4a:8f:1c:62:e1:a8:a3:99:35:21:08:52:72:bc:9b:
e0:19:5e:ee:48:21:32:fc:8e:28:5c:e9:a6:e0:8c:92:20:45:
1f:5f:37:4a:f3:8c:f2:da:63:71:d6:8d:92:76:57:5e:47:23:
dd:50:8d:c2:9f:26:5b:de:7b:24:e7:8b:08:0b:b3:69:20:d9:
27:3d:d7:16:2b:49:98:40:18:36:c3:e5:a2:68:92:f1:79:20:
51:c8:ae:1e:ca:96:b5:4d:f3:92:d3:95:f1:4a:0d:0f:ea:72:
e1:32:50:c0:0f:33:df:85:fd:84:c1:e2:71:4b:e8:ee:e8:91:
07:48:ff:43:d4:78:50:fc:80:5f:6b:07:27:ee:89:cf:18:00:
dc:27:ed:78:6c:1d:17:cf:f6:02:ba:bf:da:ce:e2:2d:9b:ed:
26:c5:79:ec:27:59:aa:c3:ed:a0:e6:c9:04:82:87:d6:b3:f7:
3b:15:82:d1:7a:5b:10:10:43:97:b0:b3:04:eb:ac:f6:cc:f1:
2e:ac:30:59:8d:c1:08:81:7c:b7:13:08:84:8a:ce:13:8f:16:
ee:89:5f:7d:61:4f:db:72:df:3b:f2:74:4c:6d:ca:9b:9c:4f:
5d:03:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:17 2024 by rpki-client on console-ams.rpki-client.org