Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C138236C74CA11EF9F2849B5762E951A.roa
File: C138236C74CA11EF9F2849B5762E951A.roa (raw, json)
Hash identifier: DKeMUftZ9KzdwNridIhD35auMeeAuIvo+zUBp7JnEBA=
Subject key identifier: BC:D4:7E:72:6C:21:77:AC:C5:82:36:86:D2:46:4C:DC:C2:AC:FE:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C138236C74CA11EF9F2849B5762E951A.roa
Signing time: Tue 17 Sep 2024 07:59:25 +0000
ROA not before: Tue 17 Sep 2024 07:59:21 +0000
ROA not after: Sat 30 Nov 2024 07:59:21 +0000
asID: 142403
IP address blocks: 154.221.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61398 (0xefd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 07:59:21 2024 GMT
Not After : Nov 30 07:59:21 2024 GMT
Subject: CN=66e936dc-26ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:22:3d:ea:14:31:30:71:7e:ee:28:e0:47:
a5:74:cf:ef:ff:ac:78:e0:ac:2e:82:63:55:32:d7:
d1:70:8e:43:90:f5:96:6c:b6:a4:6c:7c:24:8a:18:
fa:ca:4f:1b:95:42:30:bd:86:6b:b7:ea:1d:d4:d4:
99:79:1f:b7:52:39:3b:13:85:26:ff:f9:39:bd:9c:
69:7d:3e:99:25:00:00:f6:16:b4:21:9b:50:df:16:
f9:dd:1e:0a:51:c7:e7:ed:64:63:8f:61:23:aa:38:
dd:bb:39:86:3a:06:be:a8:0a:0a:d0:c0:b5:9b:d2:
2a:76:8e:b6:43:89:6c:92:51:93:9b:8c:45:2c:12:
7b:88:7d:2e:16:8f:92:e4:d7:36:3b:91:e3:70:c7:
29:6b:d2:65:e0:6d:4c:5a:d1:68:df:8a:3d:fb:74:
6a:d2:12:a7:ee:6c:95:9e:f0:fc:95:50:c0:79:44:
08:30:e8:69:ce:d2:36:e1:30:9d:d8:4f:a3:41:57:
01:07:b2:99:72:91:c9:68:2b:40:cb:e2:02:b9:4b:
6c:37:1e:72:d3:31:57:72:4d:77:8b:91:99:12:ea:
14:9f:b4:64:96:1d:39:f3:81:78:a3:ff:50:be:b5:
a5:62:f6:b7:01:4e:70:41:ac:ca:25:0d:53:ac:b8:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:7E:72:6C:21:77:AC:C5:82:36:86:D2:46:4C:DC:C2:AC:FE:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C138236C74CA11EF9F2849B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.30.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f6:03:a0:e4:95:e0:02:ae:9e:e4:72:12:9d:f4:76:e9:a9:
66:a1:95:df:de:a0:db:d4:f4:1b:46:3a:32:cf:49:d0:db:eb:
3d:e3:a2:94:11:34:f6:1f:13:c3:60:3a:a8:1d:4d:44:5d:a5:
f0:80:ed:95:2a:97:37:6e:b5:02:7d:6a:6f:e4:ca:f6:de:69:
f8:83:8c:8c:15:07:5f:81:8e:ec:b6:80:83:df:99:9c:76:26:
97:3c:fb:1e:d4:a2:2a:a6:bb:20:57:73:ef:e5:53:5b:12:e7:
e3:a8:1d:e1:25:2e:e8:cd:d5:f9:1e:63:45:01:5a:25:d2:4d:
1f:c5:fe:8a:f8:19:39:51:2d:44:a2:d5:92:4d:11:4e:64:71:
f5:3d:5a:f8:bc:c3:78:16:06:3f:e4:c0:24:63:a4:14:c8:1b:
01:89:c3:59:83:9f:b9:30:40:e5:7e:72:8e:4b:cc:47:8f:e8:
f9:c3:92:c8:ef:cc:90:8f:f8:18:49:9d:38:d4:cd:62:ec:25:
80:66:19:ef:1b:b6:8a:ce:1c:71:1c:7a:b9:e5:45:43:a8:b3:
05:7c:4a:ae:82:79:0c:8f:eb:7c:46:2a:21:c8:bd:c9:e5:f8:
52:b2:fc:b5:cf:6e:7e:45:75:2d:31:66:4e:f8:4d:32:96:c2:
83:d8:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:26 2024 by rpki-client on console-ams.rpki-client.org