Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1905FE28D3911EFAC39BDA5762E951A.roa
File: B1905FE28D3911EFAC39BDA5762E951A.roa (raw, json)
Hash identifier: sZjqPt02HzLkfKl3DFoC0hxYtN7NsY9qAa8Xl6umFp8=
Subject key identifier: F5:12:97:42:87:1F:ED:0E:14:8C:72:1D:E8:9A:35:26:3D:5D:AF:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FFE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1905FE28D3911EFAC39BDA5762E951A.roa
Signing time: Fri 18 Oct 2024 10:14:00 +0000
ROA not before: Fri 18 Oct 2024 10:13:57 +0000
ROA not after: Sat 04 Jan 2025 10:13:57 +0000
asID: 138630
IP address blocks: 154.213.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65507 (0xffe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 10:13:57 2024 GMT
Not After : Jan 4 10:13:57 2025 GMT
Subject: CN=671234e8-fbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:c0:ac:a6:68:ba:dd:41:56:87:90:9c:e1:
09:35:80:5c:f1:0e:3a:aa:c9:9c:5c:22:b8:76:d2:
32:fd:fb:78:f3:1b:f4:ed:71:55:8d:95:44:fa:f1:
1f:15:80:97:44:c8:db:91:e8:75:04:57:e1:80:1c:
c5:cc:f0:ac:a4:7c:96:55:5a:59:04:2e:c4:2c:9b:
3e:fb:58:8e:b0:2c:4c:6d:5d:1c:d3:42:49:5b:39:
99:4b:dd:9b:e8:ad:37:34:30:72:b9:73:22:1c:47:
6c:04:17:19:73:93:5d:b9:d2:db:c4:83:56:97:b7:
71:4b:8c:f5:bc:22:e5:4c:b7:95:08:5a:e5:f1:bb:
1e:b5:a3:63:9a:6c:5b:b9:40:44:9f:2b:d9:88:ee:
a6:57:6c:26:3d:6a:25:6f:a9:d9:4f:33:af:bb:f6:
a8:3a:1e:36:e7:38:d4:1a:20:4e:41:81:67:df:d0:
a6:97:ad:d5:cf:e2:a4:f0:67:08:06:11:29:0c:24:
57:0f:ad:e9:e5:8c:a7:1c:19:75:cd:de:27:3b:b5:
00:66:79:94:2b:77:71:ba:bc:6c:b9:07:6a:f9:04:
d5:82:a6:0d:5f:a1:8d:27:08:c7:c5:4d:5d:b5:bc:
93:5c:2f:ed:d8:1c:d8:14:3c:fb:ea:57:33:5b:95:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:12:97:42:87:1F:ED:0E:14:8C:72:1D:E8:9A:35:26:3D:5D:AF:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1905FE28D3911EFAC39BDA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.30.0/23
Signature Algorithm: sha256WithRSAEncryption
91:a7:8f:b5:f6:9f:2f:05:f3:e9:68:ba:37:f1:b6:3c:f7:63:
d2:fe:31:db:f4:6a:32:b6:7b:39:cd:8f:37:4e:8a:f0:95:39:
3b:10:d0:37:f2:c5:18:dd:cf:f4:10:fa:02:6a:01:37:87:7f:
44:2a:10:37:47:55:a3:1b:25:a5:6d:33:12:dd:7a:4c:a0:8b:
db:f4:8d:6f:b8:28:65:f5:f6:4f:2c:8e:5f:5e:d9:0d:b3:ff:
9a:d4:0a:c4:c3:da:b3:f4:fd:2f:45:4b:e1:6d:6b:50:f5:af:
d3:cc:dc:ff:b0:12:cc:ea:a5:2a:f2:bb:30:5c:bf:49:b2:7f:
5e:6b:81:23:07:8a:e8:f3:b1:44:40:4b:c9:26:e4:08:0a:15:
ce:a1:68:72:3b:44:7a:1b:ac:2d:68:29:f1:bf:b7:ee:d2:5e:
4b:04:8e:01:28:3f:d4:df:a5:81:c7:af:be:da:f3:0a:f6:d3:
98:93:e3:99:df:02:f2:de:e8:c8:90:f3:8e:84:61:de:f2:43:
c7:41:1c:da:37:51:c1:ab:34:c0:02:ae:2d:43:60:d2:93:a4:
9d:98:c1:42:46:66:6e:82:c9:f0:60:81:f4:18:51:b7:59:9f:
55:06:74:98:73:67:ed:2a:c7:8a:94:ac:39:5c:8f:ab:39:f7:
6a:0c:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:21 2024 by rpki-client on console-fra.rpki-client.org