Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF198E32E73011EE8DF71F9B775412E6.roa
File: FF198E32E73011EE8DF71F9B775412E6.roa (raw, json)
Hash identifier: bq3gtSlm2ePrLAn7H/Gaj4HajgcJjAxyNAZL17usw9k=
Subject key identifier: 67:DF:06:B3:01:0A:B5:E6:74:DC:A3:DA:38:54:3E:10:60:A6:AE:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A336
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF198E32E73011EE8DF71F9B775412E6.roa
Signing time: Thu 21 Mar 2024 03:13:32 +0000
ROA not before: Thu 21 Mar 2024 03:13:29 +0000
ROA not after: Tue 23 Apr 2024 03:13:29 +0000
asID: 44559
IP address blocks: 154.207.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41782 (0xa336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:13:29 2024 GMT
Not After : Apr 23 03:13:29 2024 GMT
Subject: CN=65fba5dc-e80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:dc:49:d8:6a:dd:96:df:c5:9b:77:3c:a7:
60:49:73:7f:99:60:fb:14:53:52:e4:87:10:04:f5:
b2:df:3d:dc:75:ff:aa:59:9e:20:77:5a:e6:d2:61:
37:4b:44:76:ac:19:f8:49:8d:75:f6:04:d4:fc:87:
74:c4:9b:ae:93:08:fa:51:18:2c:43:6c:93:4b:cd:
e8:92:5d:b8:7d:ca:e8:4f:6d:cb:8c:4f:cd:b3:81:
f3:7b:48:9b:4b:68:5c:de:6f:1a:c6:65:f1:e1:fd:
d5:6f:50:1d:9c:3d:9a:fa:1f:64:53:e8:f3:5c:a1:
81:e4:90:65:f4:95:10:31:7d:1d:eb:45:07:15:36:
ed:64:cd:a5:7e:cf:b7:18:52:97:86:5f:87:86:f1:
1f:82:38:f8:8e:24:76:4f:11:27:14:14:5a:4e:9a:
27:26:f3:52:1d:88:5e:d1:92:e3:4c:f6:33:bc:3a:
35:25:39:f0:7d:48:b0:16:aa:aa:f2:12:9f:4b:70:
06:b7:96:81:64:30:62:16:ce:3f:6a:f3:de:ff:19:
3e:a2:29:04:e1:aa:3e:40:45:b5:77:39:93:18:21:
4f:35:73:05:39:e0:8a:fe:8d:17:bd:99:85:24:a2:
84:f8:42:09:0d:e6:c2:c7:ab:b9:a2:16:40:a8:91:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:06:B3:01:0A:B5:E6:74:DC:A3:DA:38:54:3E:10:60:A6:AE:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF198E32E73011EE8DF71F9B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.30.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:36:30:f0:cf:f8:88:d9:6b:6c:a0:0b:db:b7:8e:84:f2:1b:
c2:60:9c:78:f9:85:7d:9f:55:8b:75:74:e9:01:89:04:b1:81:
f0:b9:19:26:c5:12:b2:29:a5:47:d2:48:41:88:44:5f:af:b6:
c9:fa:8b:5f:a3:c0:48:1f:1b:b8:29:b9:3c:d2:df:29:a6:d7:
51:4f:8a:98:83:f4:83:14:52:4b:1d:8f:51:a9:4d:83:c7:ae:
fd:dd:b5:77:33:be:87:96:96:c2:0a:a1:2f:81:d9:4a:ff:df:
3d:87:51:d6:00:d5:03:4b:76:1f:a6:fb:03:8c:54:52:58:77:
d7:ea:5e:2d:05:72:cc:a6:ff:64:26:6a:5d:78:de:72:9c:74:
a3:b6:8a:39:a9:9c:45:6e:36:fe:ef:90:13:3c:87:64:9b:6e:
06:d5:6a:96:c2:3d:11:37:f2:47:9c:7f:da:bc:1e:3b:c4:53:
49:f8:c1:9d:37:71:a9:29:c3:87:11:e5:55:6b:17:c8:d3:6e:
4a:3f:9f:41:1b:c4:25:c5:dc:db:04:08:e5:ec:38:90:07:a8:
3b:ef:88:ba:c2:6c:47:5b:25:18:f3:3a:79:1a:1a:9a:a0:a2:
d9:9e:ad:94:b8:fd:b3:4e:e7:67:7e:48:0d:f6:bd:dc:a6:65:
27:cc:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:26 2024 by rpki-client on console-fra.rpki-client.org