Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B2A6CA91E211EFAFF6FA7F762E951A.roa
File: 30B2A6CA91E211EFAFF6FA7F762E951A.roa (raw, json)
Hash identifier: qaBMBkc/0aTzn4phJEdiw315it6nB6awNlWByuycsMA=
Subject key identifier: 30:8E:FD:F2:EE:A2:65:C7:8F:61:21:F4:8B:C4:2A:AA:00:2F:FF:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01011F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B2A6CA91E211EFAFF6FA7F762E951A.roa
Signing time: Thu 24 Oct 2024 08:30:14 +0000
ROA not before: Thu 24 Oct 2024 08:30:10 +0000
ROA not after: Wed 27 Nov 2024 08:30:10 +0000
asID: 396073
IP address blocks: 154.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65823 (0x1011f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 08:30:10 2024 GMT
Not After : Nov 27 08:30:10 2024 GMT
Subject: CN=671a0596-d187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:35:e9:0c:0d:de:bc:ab:81:3d:41:32:2c:
c7:6d:69:43:7e:2e:9a:4a:26:bb:0d:e8:68:b2:9a:
ea:53:1f:47:d1:21:8d:2c:77:93:03:b6:af:ea:e7:
e7:9a:7e:d4:20:a7:2e:34:5c:6f:e5:0f:f3:4b:0b:
c8:e1:59:81:47:76:2b:fe:3c:a5:8a:53:25:63:f5:
6c:d6:a9:2f:76:1e:f5:3d:ac:9b:b1:31:fb:bd:93:
90:9e:cc:23:38:ef:60:d6:ef:e5:7f:3c:ef:37:f0:
e4:0b:58:da:f1:60:b1:8a:f9:0b:d1:8c:a4:9c:2e:
fa:55:f3:27:4f:42:84:40:2d:a7:c6:f1:5f:5d:c3:
02:65:e1:60:c4:9c:fe:dd:eb:80:db:82:92:c3:b7:
e9:39:f7:3a:8c:3b:b6:e4:fd:26:c9:04:0c:6b:c9:
2b:06:ff:cb:fc:03:fb:19:18:2a:f0:f8:80:27:32:
34:f4:c0:86:d1:84:a9:ff:ab:aa:3b:82:3d:b0:28:
ce:35:1f:e8:1a:a0:d3:34:1d:e5:ce:b8:4b:33:23:
10:50:e2:1a:d5:6d:3a:90:d9:39:87:af:c1:35:71:
bb:89:f7:d1:cf:d7:d7:ba:af:af:d3:c2:a0:56:95:
a0:ea:f3:25:f8:b5:d1:4d:68:0b:84:a9:16:4b:71:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:FD:F2:EE:A2:65:C7:8F:61:21:F4:8B:C4:2A:AA:00:2F:FF:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B2A6CA91E211EFAFF6FA7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:02:15:90:6f:b5:ac:1d:d4:b1:5f:66:5f:36:c3:94:24:94:
67:43:fc:2a:4b:80:c7:89:95:b8:12:b4:80:0a:83:76:67:66:
4e:ed:cc:9a:ed:1c:e9:aa:d7:e7:2c:36:0d:9e:a8:55:ed:ec:
68:93:2b:fb:01:3e:69:02:75:c9:00:4b:d9:d8:b4:df:36:88:
17:81:51:e7:8b:86:9e:2e:fa:42:e4:ac:a1:78:4a:0c:e4:15:
d4:d5:1d:27:14:4f:f4:c8:ed:4e:55:87:7d:16:c6:41:b2:32:
01:ca:95:66:ca:01:9e:76:f6:55:15:fa:8e:a1:7d:c2:00:39:
e6:20:8b:26:d9:4b:d2:75:fd:9f:39:87:c2:76:6c:11:fc:51:
0a:0c:89:27:1d:9e:d9:6f:e1:0f:11:0a:45:ed:17:d1:a9:a8:
9f:15:8d:af:cf:79:a6:20:e3:a8:bf:d3:da:eb:36:33:43:1a:
4b:16:61:5b:06:76:2b:6b:04:55:98:2b:6f:cf:3a:11:03:27:
1a:06:c6:04:55:0f:5f:9f:ff:ed:b9:1a:d7:ad:f0:0b:39:57:
28:da:a9:05:83:c9:af:bd:06:f7:00:98:89:99:f8:1e:03:3f:
45:2f:fa:6f:fe:00:55:93:fc:5c:94:54:f8:28:9f:bc:81:66:
d0:3d:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org