Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30241C72A9D211EF8D6F4569762E951A.roa
File: 30241C72A9D211EF8D6F4569762E951A.roa (raw, json)
Hash identifier: Gj8IsnWmBBl86kjxm3DqFZXsw2b4rRbywO4pslnqkbc=
Subject key identifier: 4A:71:06:AF:3B:7F:52:5F:7F:DC:4A:44:4E:EA:29:EB:92:1D:D5:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01122A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30241C72A9D211EF8D6F4569762E951A.roa
Signing time: Sat 23 Nov 2024 19:36:09 +0000
ROA not before: Sat 23 Nov 2024 19:36:05 +0000
ROA not after: Tue 03 Dec 2024 19:36:05 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70186 (0x1122a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:36:05 2024 GMT
Not After : Dec 3 19:36:05 2024 GMT
Subject: CN=67422ea9-5404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:c1:8b:7c:7b:56:86:6f:e5:f9:b8:f6:f7:
12:8e:de:45:52:41:50:aa:90:9b:89:41:3f:61:c3:
5c:cc:55:bd:39:c8:88:30:67:49:fa:82:17:5e:a2:
b8:31:ef:44:ec:86:1c:6e:1b:84:25:8c:36:c5:97:
65:6c:75:c7:80:8a:fc:c3:12:6c:f3:e3:81:14:75:
cf:f9:a6:27:4e:54:b0:31:c2:e8:71:92:d7:e4:78:
da:4f:2f:cc:97:7d:38:bf:fa:62:57:cd:97:2f:27:
db:b7:c4:52:06:ae:27:3f:69:02:00:cc:09:a5:42:
f8:6f:37:c0:2e:1e:7b:a0:a4:e6:18:a0:2d:be:32:
e8:04:69:4f:be:c8:cc:90:69:6f:30:d7:2f:d2:e8:
cd:85:7a:b1:23:d3:80:bd:b8:11:d7:9b:ff:74:f7:
8d:29:e5:72:ee:62:97:3a:3c:3a:a5:0f:11:ad:a6:
b9:da:e4:3d:db:15:65:c1:2e:01:f0:e7:74:1c:1a:
33:6d:8e:9a:14:5a:f3:31:12:c2:74:a6:dc:33:61:
76:b1:26:8b:50:f8:7e:76:3c:92:6e:10:65:cc:9c:
45:44:19:b8:11:aa:b9:d8:60:83:66:68:2f:29:74:
72:31:fd:51:24:e2:99:3a:11:d8:20:4d:eb:97:1a:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:06:AF:3B:7F:52:5F:7F:DC:4A:44:4E:EA:29:EB:92:1D:D5:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30241C72A9D211EF8D6F4569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
48:ac:68:ce:7d:d2:c4:c4:bb:74:63:00:1a:d2:9d:a4:b7:9b:
1f:40:a5:c2:12:55:5a:5a:6b:7d:e1:56:ce:6a:1a:36:0b:d2:
4c:c8:60:94:15:96:52:3e:81:7b:f4:f3:45:e3:26:37:cf:e1:
be:af:e8:89:0a:ce:c8:3a:58:f6:00:f4:3c:ee:ae:33:74:6a:
cb:dd:91:03:44:01:91:cf:07:18:73:61:bb:40:e7:2a:65:c3:
1a:12:84:b4:e9:35:68:f6:bf:46:6e:21:22:d6:0d:75:f0:88:
8a:30:9d:70:cc:ca:dc:7b:e9:38:c5:d4:0d:b8:e4:5b:10:ca:
58:21:d3:49:cf:37:9f:c5:7e:27:be:d0:0c:34:3e:f9:07:2d:
c3:61:42:2a:73:c1:ec:46:cb:bf:53:f8:1c:b7:44:5d:5a:c2:
75:36:8f:a8:d2:a6:c0:ea:86:6c:bd:48:9c:ca:01:27:2e:86:
9f:8f:c8:5a:36:20:b6:74:33:23:28:2e:5f:20:cc:cc:93:28:
59:47:dd:ad:19:c6:6a:8d:4f:b3:ca:e0:15:12:d5:47:ab:b3:
89:89:c3:19:bc:0d:0e:88:d3:e2:91:8c:88:aa:6c:88:bf:c4:
ba:e8:c9:df:46:5d:d3:0c:97:fb:07:61:99:b0:79:29:c1:43:
ef:06:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:17 2024 by rpki-client on console-fra.rpki-client.org