Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60A03C82736311EF90B7AAAB762E951A.roa
File: 60A03C82736311EF90B7AAAB762E951A.roa (raw, json)
Hash identifier: SMTLwQkTDPwbfiwg39/bTwRk1fFWYq8CSGfPQsiRJbU=
Subject key identifier: 71:CF:F2:C1:65:89:47:F5:29:B8:41:2B:36:BF:B2:08:FE:B9:E8:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EEE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60A03C82736311EF90B7AAAB762E951A.roa
Signing time: Sun 15 Sep 2024 13:06:53 +0000
ROA not before: Sun 15 Sep 2024 13:06:49 +0000
ROA not after: Sat 30 Nov 2024 13:06:49 +0000
asID: 142403
IP address blocks: 154.221.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61160 (0xeee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:06:49 2024 GMT
Not After : Nov 30 13:06:49 2024 GMT
Subject: CN=66e6dbed-2799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:b6:31:ba:8f:5d:b8:9b:34:52:4a:36:e6:
ef:a3:6b:b4:92:10:04:3d:e3:1f:fd:8f:aa:ad:15:
64:59:b0:f1:81:67:7a:ad:89:ca:dc:a0:14:27:8d:
2f:b4:11:3d:6c:3a:0a:84:03:50:55:41:8c:c8:33:
3d:d1:3b:af:62:c9:a8:e7:6a:65:95:c9:9f:ef:c6:
46:0e:87:be:db:3a:65:cd:0f:ba:b3:d3:24:45:d6:
e2:9b:c7:0d:6f:b8:51:54:c6:6b:4e:c3:23:e2:3d:
7b:02:96:5f:0d:bf:0c:13:d4:11:4d:b6:12:20:52:
83:d8:59:df:dd:11:23:2e:75:ae:47:b9:0c:cb:ab:
75:f1:b9:dc:1b:78:57:3b:f0:e3:11:a9:a8:f3:c9:
99:48:ab:87:aa:f8:58:8a:8c:50:e3:a2:a1:25:61:
98:4f:84:02:36:3d:a8:26:17:b9:c2:6c:f3:0b:28:
f6:0e:e9:37:6d:9b:aa:88:96:cc:23:7f:db:33:3e:
61:a3:98:9c:56:ef:ba:28:dc:b3:3c:d9:7a:6b:5f:
88:28:ed:88:94:b5:bc:0a:9e:1a:aa:bc:68:b3:68:
e9:0b:75:04:c8:99:a0:24:bb:e8:9c:94:a3:c3:26:
46:b7:b3:e0:15:cd:45:fc:c2:24:6e:a8:1e:1b:11:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CF:F2:C1:65:89:47:F5:29:B8:41:2B:36:BF:B2:08:FE:B9:E8:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60A03C82736311EF90B7AAAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.30.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6b:b0:ad:9c:13:f0:59:8a:1c:f0:45:27:be:db:4e:8d:9a:
2e:23:90:ff:65:d4:fa:72:2f:6c:1e:7a:8a:b8:25:12:97:89:
07:51:fe:d8:da:09:70:5e:2d:19:53:ee:94:2f:98:90:44:5a:
79:59:f0:49:75:2a:34:89:85:96:b6:28:2b:a0:fa:b6:ba:11:
09:00:bf:a0:14:0a:57:03:44:a9:bb:2f:22:7e:87:4d:50:41:
e7:1c:f0:89:11:af:8e:0d:ac:43:67:3a:22:77:f9:b9:40:90:
c0:ee:d9:b6:4f:53:f1:cd:1b:6e:6b:c8:70:28:ab:73:ef:22:
69:76:84:7c:11:46:e7:58:ae:4f:72:54:62:f3:c1:95:1f:01:
66:b5:aa:3f:02:de:f5:7d:3d:7c:19:75:e1:f0:04:44:d4:c1:
e9:5c:02:21:23:36:4e:65:09:b7:c6:b1:63:ba:8f:57:1f:3e:
4a:20:ad:bc:d1:1c:5a:78:bd:be:31:5d:20:84:07:8c:95:82:
7a:33:6a:bf:84:9f:1c:4c:63:8d:fc:76:69:05:41:7d:23:8a:
62:ec:35:a8:8c:d2:28:43:a8:c8:3d:5f:d1:17:cb:68:0f:9d:
e2:73:24:35:10:64:b8:9c:52:d9:fd:d2:95:b8:66:95:21:b8:
d1:74:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org