Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1830B208911B11EF83C4879B762E951A.roa
File: 1830B208911B11EF83C4879B762E951A.roa (raw, json)
Hash identifier: S9PYrOU2DYAKQ2MeF1Ejtuix38vu0fqrOgPnfjoSHYQ=
Subject key identifier: 4D:11:87:12:88:4B:0A:F6:3A:F5:19:35:AE:C2:69:F3:20:4D:40:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1830B208911B11EF83C4879B762E951A.roa
Signing time: Wed 23 Oct 2024 08:45:03 +0000
ROA not before: Wed 23 Oct 2024 08:44:59 +0000
ROA not after: Sun 24 Nov 2024 08:44:59 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65750 (0x100d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 08:44:59 2024 GMT
Not After : Nov 24 08:44:59 2024 GMT
Subject: CN=6718b78f-e4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:a4:d9:ac:11:cc:26:8b:8c:aa:56:1b:74:
04:88:7f:88:25:92:ce:da:0a:21:61:9d:81:8a:59:
98:8d:c0:24:7f:ea:57:fa:41:c0:5f:25:02:9a:fd:
a4:ef:0a:c0:73:e2:8a:c8:bc:d0:e3:b3:04:ce:36:
96:a0:90:c4:a5:67:2e:5d:68:29:18:bc:15:f5:58:
53:fb:e6:47:51:01:fc:97:e6:0b:9b:1f:16:63:59:
e5:9b:14:5b:6b:d5:50:06:b9:2c:a7:44:5d:4c:a8:
7d:b8:1b:77:31:68:f4:12:45:5f:d5:70:8f:7f:84:
08:9c:1b:c0:8c:54:78:4e:dc:d0:5f:1c:56:f5:65:
09:8a:10:ae:97:57:a4:dc:ba:7e:a7:da:6d:13:91:
28:ac:59:af:16:65:5c:84:fb:a0:4d:68:3d:97:a3:
a9:87:8a:3e:1c:28:c2:18:03:87:1a:81:e9:77:3e:
e2:2d:6b:c6:87:d8:8a:e6:61:87:0b:3c:61:8b:df:
ce:c0:37:ff:78:84:39:f9:ec:dc:ab:7f:08:6c:24:
d7:20:96:cf:11:3e:68:ae:34:68:a5:01:25:5a:ff:
f9:3e:fb:df:82:fc:84:41:ff:55:7f:ad:9b:fc:a8:
a9:66:28:70:70:83:f0:94:59:01:5d:2b:85:fb:22:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:87:12:88:4B:0A:F6:3A:F5:19:35:AE:C2:69:F3:20:4D:40:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1830B208911B11EF83C4879B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d7:ad:9a:55:a3:1d:72:65:e5:fd:fb:7e:9c:d5:33:44:d5:
a8:9a:b9:ee:0e:27:97:d0:d9:86:53:0f:e1:85:75:72:f2:a0:
98:30:b2:91:c0:75:ac:96:65:50:69:0a:04:ae:13:17:67:ce:
ef:6c:e9:b2:13:43:4a:a1:22:0d:5f:54:28:89:78:01:4b:1e:
1e:8f:92:de:cf:42:ac:63:b6:3f:bd:b1:c8:c2:12:37:55:ff:
9a:79:5e:26:24:63:d7:4c:98:7e:ce:e3:9b:c8:73:6b:00:1f:
90:86:38:98:e8:a8:e4:42:4f:37:bd:14:4e:98:d9:2f:8f:d4:
21:e9:47:32:ed:4c:c4:1b:f4:15:83:ab:02:71:bd:ad:af:7f:
09:e2:0e:a4:cc:34:59:f7:80:0b:84:38:de:b3:65:6c:92:22:
ab:42:d4:88:39:e2:98:7c:43:b4:4b:56:3d:c3:1a:c7:6f:0f:
3b:8e:e8:8a:7e:27:4e:7a:8a:1c:de:d9:60:39:71:01:85:59:
19:33:79:f3:d7:18:34:1c:ba:f1:bd:a7:1d:fc:f2:0a:ef:c8:
2e:4e:0f:81:33:7e:22:3a:ca:f0:0d:76:30:04:67:32:ee:11:
76:24:10:bd:c5:4f:36:65:b3:f8:60:de:12:e0:90:ba:a0:e5:
51:e1:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org