Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E4A1BA912011EF9F62B9BA762E951A.roa
File: 30E4A1BA912011EF9F62B9BA762E951A.roa (raw, json)
Hash identifier: hCXA0CBo+DWqPBx0drZRobiRY5E0Sw29g55Rvy/mrqw=
Subject key identifier: 2E:25:26:1D:BE:F7:CD:82:2D:83:9E:28:22:A9:9D:E4:AF:F8:02:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E4A1BA912011EF9F62B9BA762E951A.roa
Signing time: Wed 23 Oct 2024 09:21:32 +0000
ROA not before: Wed 23 Oct 2024 09:21:28 +0000
ROA not after: Sat 13 Sep 2025 09:21:28 +0000
asID: 23764
IP address blocks: 154.198.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65786 (0x100fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:21:28 2024 GMT
Not After : Sep 13 09:21:28 2025 GMT
Subject: CN=6718c01c-acc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:de:ac:b7:33:44:0d:49:f7:df:ce:d4:cd:0b:
06:76:78:4d:5d:b3:f0:ba:b2:cb:77:63:dc:26:e8:
bf:0c:f4:67:4c:b7:11:92:a2:ed:1a:59:27:8b:6a:
1c:1c:55:0c:c7:c5:4c:49:61:73:94:60:5c:29:e2:
12:28:c6:88:03:d5:02:a4:5a:92:59:f9:55:04:82:
85:02:7a:94:4e:ac:33:e7:90:b2:8a:a8:63:8a:a2:
9c:c5:63:3c:c6:53:f9:78:6c:81:70:d0:87:1b:83:
99:e3:bd:9b:45:3f:ab:fc:81:98:15:76:3d:c9:b9:
a4:77:5b:bb:52:61:1a:1d:2a:6a:c7:e6:cd:3d:49:
d8:6f:5a:82:fc:81:b7:18:6f:66:87:18:bf:27:58:
65:21:41:5a:32:b4:f5:7f:8b:d7:55:70:c9:b6:9d:
15:46:7b:52:95:14:85:eb:c5:02:04:21:7e:82:81:
8c:c6:fb:f4:1a:7e:a4:07:ef:3a:99:42:36:20:a9:
a0:89:5f:72:14:84:39:02:1c:e7:aa:ee:37:71:30:
c4:a2:fa:05:f3:1a:b5:aa:a4:c9:07:48:da:24:3b:
50:9f:36:29:2b:4f:20:d2:dc:07:85:c6:9a:b4:f9:
74:fe:aa:a7:49:86:6d:42:9f:07:0f:a7:a4:81:de:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:26:1D:BE:F7:CD:82:2D:83:9E:28:22:A9:9D:E4:AF:F8:02:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E4A1BA912011EF9F62B9BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:24:ea:ef:58:55:96:4f:11:cf:51:bb:c5:b9:bb:e0:1d:15:
f1:89:3f:10:bd:94:55:96:fc:3a:8b:4b:dd:e1:59:4a:47:5a:
a9:f4:b0:5a:09:ce:68:28:6b:bf:cc:49:2d:d3:8d:44:26:58:
50:82:32:05:5a:5a:ca:33:fd:d8:85:79:d3:3d:44:21:78:42:
cf:7c:d2:a9:a2:9c:36:82:79:fd:2a:ee:af:14:04:5f:da:84:
37:fe:19:5f:7e:3a:e8:dd:53:0c:12:27:c2:42:b0:42:75:48:
3d:24:3a:ec:0d:03:0a:c1:24:74:e6:bd:92:8d:f1:6d:24:8b:
78:bf:3e:f7:b2:9d:d2:d5:84:3a:09:e6:63:0a:e8:68:ac:0f:
f2:ce:72:c8:3a:ad:9d:9a:9d:f7:67:3e:f9:f4:af:b3:45:69:
0d:fe:8c:8e:87:75:93:22:30:92:03:2d:d7:ec:51:9b:c3:54:
f2:d8:fe:9b:0c:29:3e:82:e1:e8:29:03:44:59:11:7a:a1:07:
17:50:fc:11:f4:11:66:87:73:48:28:71:ac:da:52:af:06:c8:
29:89:c6:88:db:cb:3b:4d:26:2b:ba:49:fe:92:41:0a:b1:1b:
00:b3:a5:cc:9e:58:c9:3c:49:9a:22:f5:1c:63:48:27:03:7b:
f8:8c:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:03 2024 by rpki-client on console-fra.rpki-client.org