Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30033496696711EEA2C62E3E4AD9E6FC.roa
File: 30033496696711EEA2C62E3E4AD9E6FC.roa (raw, json)
Hash identifier: BjVtBAfBEwD6xep+EcgDj7B2DmQ5529HXiWAstwaeF8=
Subject key identifier: ED:71:13:16:33:C4:0A:18:AB:B8:FF:28:7E:0D:72:C6:C4:1B:FC:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 45B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30033496696711EEA2C62E3E4AD9E6FC.roa
Signing time: Fri 13 Oct 2023 01:24:00 +0000
ROA not before: Fri 13 Oct 2023 01:23:57 +0000
ROA not after: Mon 30 Sep 2024 01:23:57 +0000
asID: 136897
IP address blocks: 154.210.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17841 (0x45b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 01:23:57 2023 GMT
Not After : Sep 30 01:23:57 2024 GMT
Subject: CN=65289c30-ef8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:f9:5c:4f:cc:4e:cb:8a:38:51:57:ab:6a:
49:da:fa:87:36:31:17:22:34:c2:60:5e:e1:89:c4:
a2:13:28:34:8f:4f:2a:38:fe:76:f8:7d:44:d6:b6:
84:68:32:ab:ec:3c:24:80:92:71:8a:eb:34:40:ef:
91:3b:32:0a:b7:4e:72:3b:20:d9:4b:8f:99:ed:ff:
2a:66:9a:5d:f9:5d:24:d9:bc:72:5d:b3:38:51:49:
2a:db:58:a0:a2:e0:77:68:96:4c:8a:de:80:c4:29:
a1:da:92:0a:fa:64:99:06:d5:c9:16:82:ee:b7:cf:
d6:66:ed:75:e7:d5:e9:97:4e:9c:a9:9f:ef:80:5e:
e5:78:f3:1e:7b:62:36:74:7c:49:8a:1e:42:77:4b:
8f:c4:f0:fa:c4:c9:e2:5d:e3:c7:08:7b:e7:42:66:
71:a8:84:ff:8b:2a:48:bb:0d:57:a2:d4:25:ab:4f:
83:21:d3:6f:42:d6:ed:4b:12:3c:0c:af:43:60:15:
be:58:07:6d:2d:86:e7:43:3e:98:47:62:e1:14:e2:
2a:b3:85:48:0d:f1:3d:77:1a:80:df:3d:9e:db:8e:
a4:6d:06:fe:01:7a:1c:3b:e2:dc:1e:f4:39:57:8b:
9a:17:f6:98:23:38:8d:00:6d:aa:44:2e:30:17:81:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:13:16:33:C4:0A:18:AB:B8:FF:28:7E:0D:72:C6:C4:1B:FC:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30033496696711EEA2C62E3E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d3:39:83:aa:ee:12:2b:fe:61:8c:0b:84:0a:48:7e:eb:98:
50:fa:a7:3d:a2:a3:5c:29:0d:04:15:f0:f2:74:dd:66:b5:eb:
80:73:71:22:32:d3:78:30:a9:67:1f:9f:27:b5:f9:43:77:83:
f7:80:8b:6a:50:ef:68:4b:c2:36:b2:d6:78:2f:2d:d6:22:e3:
05:60:c9:1a:a9:31:2a:2a:f5:eb:3b:e3:6f:6d:64:f9:b6:35:
36:41:48:c9:5f:2b:45:75:19:f6:9d:46:d5:f9:a3:7a:68:8c:
86:37:3f:25:36:e4:d8:e5:1c:4a:5a:9e:b1:55:9a:88:af:8e:
bd:78:3d:78:f3:a0:f9:e0:bd:d3:25:e0:29:71:04:63:10:b0:
43:0c:4b:4b:96:67:5b:dd:39:c6:a0:7e:10:52:5f:85:fe:63:
14:bf:d1:b8:5c:5e:a6:78:be:8d:28:fe:0e:99:43:db:eb:38:
37:77:ee:ea:51:08:b2:ae:b6:e5:26:5e:5d:62:6a:66:ea:bc:
6e:94:9f:c1:eb:20:51:10:15:f9:c8:d9:b3:fa:f6:be:19:3a:
62:d0:3e:a7:74:2a:85:93:61:ca:b1:bd:c9:83:52:f7:d1:23:
1a:b1:ce:4f:37:60:31:2c:05:e1:db:bb:47:24:aa:30:59:5c:
10:17:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org