Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4409D9DAA19311EFB36C088E762E951A.roa
File: 4409D9DAA19311EFB36C088E762E951A.roa (raw, json)
Hash identifier: 1D/dKUvpCBWNOQAIHCkbM3rizGfHINxhHAZF9T4AQfI=
Subject key identifier: 26:CE:2C:CB:DD:D4:CE:1E:49:B5:98:AC:6D:37:AA:64:BF:BB:7C:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4409D9DAA19311EFB36C088E762E951A.roa
Signing time: Wed 13 Nov 2024 07:45:35 +0000
ROA not before: Wed 13 Nov 2024 07:45:31 +0000
ROA not after: Thu 06 Nov 2025 07:45:31 +0000
asID: 139057
IP address blocks: 154.92.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68763 (0x10c9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:45:31 2024 GMT
Not After : Nov 6 07:45:31 2025 GMT
Subject: CN=6734591e-edb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:ac:19:c3:9c:3d:29:ec:66:f0:7f:ca:78:
23:01:28:d5:f7:6b:66:36:8e:eb:45:1a:71:96:36:
8b:70:fd:d3:a6:be:11:16:e7:e4:03:53:8d:e4:69:
9c:ba:e5:ad:98:40:3d:86:bf:8a:2f:ca:fb:4e:bd:
49:71:9f:ef:80:ea:d4:3b:bc:37:74:b9:18:fc:ec:
53:52:64:e7:b6:98:a7:5e:55:c0:cd:43:78:0d:80:
74:71:d3:e1:33:7b:a0:9e:a1:90:0e:48:d9:d9:31:
fe:be:ea:da:9b:b2:a5:f2:2e:78:01:ba:41:b5:35:
5b:d1:1c:33:e8:fd:e6:c3:10:b1:cb:fe:6d:52:b9:
b0:8d:12:a9:81:24:17:96:f4:0f:30:4e:10:57:d1:
a7:33:e1:af:d6:49:84:d0:e8:de:22:3b:5e:12:f7:
9a:68:9e:e7:5d:68:cd:17:7b:76:d6:2a:77:aa:0a:
47:93:a3:0d:c4:59:fb:4b:9c:00:79:c7:2b:43:d1:
4c:f0:01:93:0c:66:6b:eb:1c:fd:df:e0:8c:2a:55:
8a:ca:a2:1c:d2:0f:f4:2a:27:bd:fe:af:7d:37:b2:
b6:ad:53:96:57:23:f5:2d:5f:82:0b:93:c5:35:21:
b9:7e:76:e3:79:ff:0a:64:34:23:51:5f:9e:19:f0:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CE:2C:CB:DD:D4:CE:1E:49:B5:98:AC:6D:37:AA:64:BF:BB:7C:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4409D9DAA19311EFB36C088E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:b7:4d:23:23:db:b2:56:fd:4f:67:04:34:71:2c:27:8c:85:
94:85:61:2c:00:ec:a6:e9:74:ba:f8:49:76:21:cb:c3:13:be:
94:89:c1:61:15:9e:05:51:59:cf:d2:27:a3:47:3d:19:df:63:
3b:22:d6:be:2f:f6:5b:e6:06:13:c6:4d:7b:f8:73:cd:fe:71:
71:39:ac:fd:7f:89:0c:79:da:c5:31:87:50:e3:ae:cc:b6:20:
80:57:56:ef:22:0c:ea:1f:45:ed:ad:4a:40:ab:6e:0e:28:18:
c1:33:cc:b0:ab:3a:cc:23:cd:2f:8d:a7:e1:d8:ae:9d:8b:be:
e3:70:00:34:77:16:a7:cb:c0:ed:da:8d:bd:d2:4a:93:bd:ad:
2d:79:d5:46:20:16:6c:b8:b8:8f:32:5c:9f:ec:2e:d4:8c:ac:
67:42:3f:03:e3:71:48:eb:74:81:7c:1f:93:c2:35:37:dd:36:
c3:8c:db:cf:b8:dc:1b:f2:39:cb:39:96:7b:73:e0:a5:3b:0a:
56:fa:9a:ea:1f:fc:05:84:76:e7:4d:ba:6a:fe:a5:22:e8:f8:
c9:a5:86:70:b8:5f:24:fc:3f:2e:c5:a7:bf:94:05:1d:d2:cc:
78:07:d8:c6:dd:ea:9b:23:36:48:cc:3a:9d:e7:78:34:a1:2b:
6c:b9:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org