Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0AE06B09B7711EF838B866A762E951A.roa
File: A0AE06B09B7711EF838B866A762E951A.roa (raw, json)
Hash identifier: 5DSHWZgQTUlQmN1WpGeXaYk+kTvje7i8ull+GYkjIa4=
Subject key identifier: D7:FD:3F:CC:61:BF:92:87:13:0E:3A:1D:36:64:14:BF:43:DB:52:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0AE06B09B7711EF838B866A762E951A.roa
Signing time: Tue 05 Nov 2024 13:12:37 +0000
ROA not before: Tue 05 Nov 2024 13:12:33 +0000
ROA not after: Mon 13 Jan 2025 13:12:33 +0000
asID: 212238
IP address blocks: 154.202.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67537 (0x107d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 13:12:33 2024 GMT
Not After : Jan 13 13:12:33 2025 GMT
Subject: CN=672a19c5-241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:57:6e:dc:fa:23:7c:ea:5a:ee:06:cc:91:
f1:4f:56:33:48:ec:65:42:89:79:99:6c:51:05:74:
e3:9e:90:6e:5a:90:c2:03:10:3d:36:cb:3b:8a:fc:
ad:47:a3:9c:86:30:22:1d:b0:f2:7e:16:4a:e5:83:
99:42:d6:4f:7e:33:f1:43:cf:f1:76:fe:15:50:c0:
b3:bd:7a:f7:d4:97:ed:33:61:5c:8d:92:f1:fc:45:
73:ae:12:9a:78:f8:a3:df:ef:54:a4:78:24:52:c6:
8a:1e:b9:75:37:fa:b4:65:f8:12:68:a4:09:f6:6b:
f0:c3:e3:5d:d7:b3:39:cf:44:fa:90:cc:93:08:ec:
4b:26:c2:74:99:37:12:1a:33:4f:57:31:58:75:52:
32:30:0b:84:02:07:6b:bb:b4:af:e6:b3:54:1d:4a:
cb:76:e4:d8:9d:c0:ab:7b:29:9e:57:10:58:5c:b2:
d0:bc:6a:0a:1b:e9:10:da:6f:a9:b2:9e:cf:33:76:
8a:24:cd:81:d2:f2:a3:ab:fc:40:5f:7f:72:bb:11:
32:50:a4:57:ed:ee:90:e9:6e:10:5d:15:87:a1:84:
13:85:5c:72:67:83:93:27:af:2a:61:65:fc:8c:8c:
71:f3:1e:36:f2:11:3e:72:71:d3:05:3c:91:60:b4:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FD:3F:CC:61:BF:92:87:13:0E:3A:1D:36:64:14:BF:43:DB:52:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0AE06B09B7711EF838B866A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.30.0/23
Signature Algorithm: sha256WithRSAEncryption
41:34:27:12:ba:66:b3:cb:95:54:ce:7d:b7:2a:4c:55:6b:3b:
6b:03:ff:8c:3e:60:7c:cc:17:e3:d1:bb:6a:13:c2:99:20:38:
bc:85:d0:de:5b:a0:ba:b6:11:3a:09:83:bb:1b:3a:ee:ef:0e:
a7:fa:9f:28:31:af:51:83:c9:f1:6d:6b:6c:79:0a:74:85:61:
88:c5:2a:34:3b:67:24:5a:2f:ef:6d:9f:9d:ad:68:a1:41:12:
a9:49:10:21:b7:6e:c5:62:fe:2b:6b:e1:71:24:53:9a:41:98:
28:2c:e5:aa:48:95:68:03:e9:e3:eb:f0:18:95:97:a2:e0:6b:
69:a7:60:89:c3:e4:8d:13:d0:0d:1a:33:1f:39:c2:0d:f5:29:
5e:03:9b:b0:3d:0c:41:53:65:d5:bf:3d:cf:0c:fb:cd:17:d0:
2a:f9:0e:6c:51:66:bb:50:21:1d:74:ae:35:2d:fc:aa:81:0f:
b2:d8:7a:55:2b:90:a0:82:9b:c2:d3:1d:08:21:67:14:bd:f8:
29:64:b7:0f:5a:4e:05:d4:4a:8d:2a:a0:fb:a1:53:f6:d7:97:
7d:62:86:3e:35:b8:3f:a1:16:1e:f3:31:bf:6d:12:5c:43:cb:
dc:8f:a3:c5:f7:33:90:4c:9b:c3:f0:45:c7:7c:0e:d9:e8:c5:
57:b2:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:20 2024 by rpki-client on console-ams.rpki-client.org