Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FAABB2A7F1011EF8C90F958762E951A.roa
File: 3FAABB2A7F1011EF8C90F958762E951A.roa (raw, json)
Hash identifier: JkFCUYutO3v9rRt6/GgP4DpM8MjRtbgxE5t7opd1KCs=
Subject key identifier: 30:11:0D:05:B1:04:EE:70:3B:C2:CE:90:E7:73:39:71:FE:C1:15:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F5C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FAABB2A7F1011EF8C90F958762E951A.roa
Signing time: Mon 30 Sep 2024 09:42:04 +0000
ROA not before: Mon 30 Sep 2024 09:42:00 +0000
ROA not after: Sat 30 Nov 2024 09:42:00 +0000
asID: 138915
IP address blocks: 154.93.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62912 (0xf5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:42:00 2024 GMT
Not After : Nov 30 09:42:00 2024 GMT
Subject: CN=66fa726c-0d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:37:ee:61:2c:17:28:d1:f7:c9:c0:f9:3d:
c5:29:55:06:c3:c1:2a:1e:cf:69:75:b1:5a:76:98:
3e:ec:78:09:d1:46:b8:17:5b:cd:d1:f5:53:23:11:
0f:21:6f:07:76:4e:b9:29:b5:fb:db:b5:6f:60:ef:
15:45:10:6f:d0:87:87:24:f9:35:23:7d:02:aa:4f:
91:e1:1d:0a:f8:9c:76:6e:1c:60:a9:fb:92:92:8c:
1c:4c:1d:4c:d9:ce:31:21:64:39:a5:11:e6:86:ba:
fd:9f:68:a1:af:51:3a:ee:91:f3:14:ab:ed:74:fa:
f9:ab:bb:f0:75:7d:48:70:5c:a6:c5:cb:60:29:88:
f5:98:b1:c5:51:d6:b1:88:10:1f:9d:59:31:94:34:
fb:91:89:bd:97:4d:a6:48:b5:83:05:63:48:90:3b:
52:73:d5:ca:f5:78:ee:13:21:ae:50:e2:21:d1:d3:
80:c8:5d:85:07:6f:18:b7:12:62:b9:29:ce:7d:66:
09:bd:0a:5d:e3:6b:c0:8e:ae:4a:38:ca:3b:91:92:
5d:00:b0:2d:a5:87:84:26:15:fb:2a:be:dc:56:32:
57:6a:a5:4b:1a:3c:88:53:58:6d:7f:f0:47:10:46:
f0:b5:10:f1:bf:f5:c2:07:72:13:c0:6a:ce:37:17:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:0D:05:B1:04:EE:70:3B:C2:CE:90:E7:73:39:71:FE:C1:15:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FAABB2A7F1011EF8C90F958762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/23
Signature Algorithm: sha256WithRSAEncryption
50:1a:e0:94:c2:d6:62:8f:61:83:18:89:ac:09:de:b7:11:23:
86:ff:52:69:da:63:6c:01:6d:7d:30:99:cf:79:50:23:02:50:
7a:4c:40:30:dd:23:8f:17:0e:30:7c:5e:de:cc:7c:f7:22:9c:
89:53:0f:cb:c4:af:93:14:49:87:af:0f:de:60:cc:4a:3c:17:
df:35:61:92:68:ad:65:6a:26:3f:04:41:74:89:ed:10:cb:49:
33:92:e4:f6:27:20:2d:4a:b1:46:da:18:e6:91:8e:71:a3:77:
21:80:53:d9:b0:8a:1f:81:4f:1e:b7:54:da:22:be:59:7b:e2:
18:8b:6a:47:c9:d3:d0:57:9e:f4:63:e2:b7:fb:bf:9a:5c:44:
20:d4:16:d3:33:bc:d9:0a:f8:6e:df:c9:c0:24:f9:74:d4:2b:
84:63:5e:ac:30:7f:5e:b4:d0:df:4d:d2:c9:cb:49:10:ee:f1:
d4:d2:0d:73:06:d6:8b:4c:b2:bb:cc:f9:e6:e0:c7:5c:b2:7c:
51:4e:f0:24:df:f3:5e:0b:40:4e:1d:2d:96:d8:ed:81:03:59:
0e:3d:7c:b0:c7:44:e2:f1:49:3e:ee:cc:28:3b:5d:56:31:d7:
d5:66:c8:fe:47:a3:f1:ed:0e:d2:af:6c:57:74:79:d5:0b:bf:
b9:74:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:06 2024 by rpki-client on console-ams.rpki-client.org