Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86CF6D70A0D511EFBA768CB5762E951A.roa
File: 86CF6D70A0D511EFBA768CB5762E951A.roa (raw, json)
Hash identifier: PgEPVCniRhSQ6FW6ES5CTAEwR8T4oCCcYEnHFHGBXHQ=
Subject key identifier: 13:29:44:BA:12:A7:79:66:77:39:B2:4D:23:3D:D4:65:34:94:C0:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86CF6D70A0D511EFBA768CB5762E951A.roa
Signing time: Tue 12 Nov 2024 09:07:22 +0000
ROA not before: Tue 12 Nov 2024 09:07:18 +0000
ROA not after: Sat 14 Dec 2024 09:07:18 +0000
asID: 135983
IP address blocks: 154.200.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68604 (0x10bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:07:18 2024 GMT
Not After : Dec 14 09:07:18 2024 GMT
Subject: CN=67331aca-685d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:ee:10:28:84:48:2e:3a:8a:2f:c3:29:41:
f6:c5:93:dd:54:c5:de:d8:fa:c7:f5:f8:10:a7:65:
4c:9c:30:01:ad:bd:57:86:73:ea:f0:66:dd:4e:1c:
9c:f2:59:bd:40:da:1e:d6:24:88:27:33:5a:47:cb:
6f:b1:0f:0a:b8:aa:64:2e:85:2b:59:8a:1b:1a:14:
25:de:86:7a:d5:ca:27:12:43:b2:f1:19:42:2a:c6:
6d:03:c0:ff:df:20:d2:46:61:bc:12:2e:9c:01:fb:
c1:dd:ee:4b:62:f2:0f:f7:c8:3e:90:d5:8b:fd:a9:
d5:b6:89:cd:81:e0:71:cf:df:56:76:38:dc:9a:59:
b3:6a:b4:27:f9:9a:de:16:43:33:52:90:dc:f6:83:
b9:58:63:bc:a1:d3:21:1b:c6:40:91:57:b3:33:b2:
a2:d0:6e:a2:bd:95:9b:aa:7e:f1:9d:53:75:b2:3e:
2e:3f:31:d8:bc:ac:26:63:69:a1:68:7a:7a:c3:1e:
3a:d4:81:5e:fb:43:98:96:de:0a:d8:5b:16:d4:1e:
ad:46:98:50:1e:20:85:ab:f1:30:3d:d4:1b:ab:4e:
22:db:31:2c:42:d9:9c:3f:73:eb:74:56:ee:73:44:
0f:ca:28:16:3c:5e:1f:4d:2a:6f:ff:c9:1c:ce:94:
a7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:44:BA:12:A7:79:66:77:39:B2:4D:23:3D:D4:65:34:94:C0:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86CF6D70A0D511EFBA768CB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:fa:c6:dc:2f:ee:ae:96:76:9b:3f:08:4b:9e:06:8b:ea:02:
b6:b6:1e:a7:aa:00:dd:66:fd:e1:c1:94:1c:d5:a5:ea:36:27:
bc:30:34:6c:13:6a:99:a6:d1:ca:b0:2b:94:8f:b1:cc:bc:11:
88:6f:b0:7b:81:63:ed:01:27:3e:48:f0:ca:ac:6b:56:52:2b:
07:69:26:91:32:3c:74:26:7d:af:c1:89:46:b9:d6:da:88:c9:
b5:d3:46:32:3f:41:b2:99:76:98:47:db:0d:63:52:ef:f3:55:
cc:9e:6b:78:75:4a:fd:dc:b6:b4:7e:49:0c:57:f2:e7:af:39:
90:45:01:7d:d7:77:63:cb:56:ac:59:87:04:a6:20:e7:06:26:
58:0b:75:8b:a4:7e:7c:e4:1e:11:19:c0:44:7f:53:8b:dc:62:
e0:72:02:f0:1e:27:68:ed:ca:ae:1d:99:df:62:0c:c5:68:c4:
a5:9c:f2:e5:bb:f8:87:a1:73:98:44:23:97:1b:cf:50:1c:d0:
f9:24:8d:15:31:4c:c8:bc:19:ca:b4:e8:42:93:a4:00:18:fc:
30:85:01:08:4c:3a:c4:c0:3b:1c:42:2e:80:68:5c:4e:50:a6:
fa:3a:41:53:32:a2:40:32:93:45:6f:c1:b2:51:f7:8d:d7:82:
91:5a:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:48:01 2024 by rpki-client on console-ams.rpki-client.org