Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F13EAAA9AA11EF82DEDF6D762E951A.roa
File: 30F13EAAA9AA11EF82DEDF6D762E951A.roa (raw, json)
Hash identifier: 9lb0Xq/bgVQiY62QL2vxjj4npDPLn/dCVJDcGSHxQZE=
Subject key identifier: 5C:D6:B3:E3:2B:06:98:84:46:CA:60:1D:CF:72:6A:D4:38:CE:23:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01117E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F13EAAA9AA11EF82DEDF6D762E951A.roa
Signing time: Sat 23 Nov 2024 14:49:50 +0000
ROA not before: Sat 23 Nov 2024 14:49:47 +0000
ROA not after: Mon 23 Dec 2024 14:49:47 +0000
asID: 6079
IP address blocks: 154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70014 (0x1117e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 14:49:47 2024 GMT
Not After : Dec 23 14:49:47 2024 GMT
Subject: CN=6741eb8e-b816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:d6:01:41:94:a6:ff:a9:54:01:a4:79:16:
1d:cc:2f:c2:69:d5:b9:dd:54:16:72:0f:71:60:f5:
3c:f5:d9:9d:f2:cf:d8:a6:5d:ce:ff:ce:79:09:c3:
d6:98:4c:25:97:84:6a:b4:23:51:ed:10:0f:0e:0d:
15:98:0a:ce:a8:cc:8a:02:59:0e:20:21:fe:a1:b6:
53:6e:04:18:30:da:95:4e:fb:43:0a:10:d4:51:2c:
ea:fd:d7:e5:2f:9b:87:8b:f4:28:cf:b2:6e:eb:aa:
f5:6a:1a:22:cf:77:0f:a2:67:01:94:40:ab:f0:eb:
7d:02:f1:4e:50:a8:dd:dc:2f:35:90:b3:a1:c7:42:
f5:98:d1:fb:7b:88:65:57:8d:27:b1:05:b2:ea:e3:
da:9b:db:44:8f:b5:51:ad:2b:3f:64:b2:d0:82:a5:
e6:b3:63:74:e2:fb:70:6e:78:25:7c:ec:36:cf:3b:
38:5b:ae:dc:f5:2c:af:de:61:38:b8:5e:21:ac:55:
4f:e7:91:19:31:14:88:e3:63:c7:dd:e9:95:2e:90:
94:1d:4e:47:9a:e8:53:33:fa:4d:dd:d9:16:c5:3d:
14:85:12:85:19:ee:ee:88:dd:65:9c:9f:3d:ed:81:
7f:6f:90:f9:d9:28:2b:bd:bc:96:51:3f:52:97:62:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D6:B3:E3:2B:06:98:84:46:CA:60:1D:CF:72:6A:D4:38:CE:23:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F13EAAA9AA11EF82DEDF6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
37:11:4f:9c:38:11:49:af:40:5d:81:45:fb:e4:57:f1:ee:22:
a0:3f:71:19:0c:23:3a:e2:a5:22:1f:90:86:4d:7b:af:b0:15:
88:fe:05:f9:99:74:96:52:de:cd:f0:cb:fe:9e:5b:84:4b:1f:
04:9a:aa:af:18:b0:55:28:f5:9e:78:cb:0c:cf:35:d8:a2:43:
1c:5f:cf:f5:ee:b3:9e:a5:6a:41:86:be:c4:b3:5e:0e:c0:cb:
f6:c9:92:d0:7f:bf:30:2c:e5:b7:e0:97:f5:3f:79:3e:54:07:
2b:4d:59:1c:66:66:73:85:eb:db:f9:93:dd:b6:f4:59:5a:40:
ee:52:dd:f7:7f:69:81:2c:34:bc:f4:76:6d:6c:19:89:c7:e3:
38:2e:00:c6:ff:cb:46:cf:c7:5e:0d:65:1a:7f:e6:59:a5:aa:
a7:51:87:54:1c:2a:56:7c:fe:34:c2:e8:e9:db:d5:2a:99:c8:
8d:4f:93:25:46:e7:63:2c:b7:b8:72:d0:4c:46:5d:e8:d9:b5:
86:dc:58:86:eb:3c:16:da:b9:df:0b:0a:c7:16:44:0d:c3:b8:
92:fe:38:df:57:70:b4:8c:c3:04:0f:5c:9b:fd:34:c7:94:db:
49:0e:bd:9c:11:5f:da:e1:52:2c:3d:df:e2:9b:4e:c4:a8:3c:
8f:5d:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:26 2024 by rpki-client on console-fra.rpki-client.org