Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A79716A4C611EF936CF2B1762E951A.roa
File: 03A79716A4C611EF936CF2B1762E951A.roa (raw, json)
Hash identifier: crjJxAnF6w7+DdVraxVI4kea7nO5sZJ+rODCGboqER8=
Subject key identifier: B4:79:55:C6:B8:D3:DA:64:62:B2:A2:FF:CC:B6:3D:4E:5D:30:4C:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A79716A4C611EF936CF2B1762E951A.roa
Signing time: Sun 17 Nov 2024 09:26:24 +0000
ROA not before: Sun 17 Nov 2024 09:26:21 +0000
ROA not after: Mon 25 Nov 2024 09:26:21 +0000
asID: 9009
IP address blocks: 154.85.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69254 (0x10e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 09:26:21 2024 GMT
Not After : Nov 25 09:26:21 2024 GMT
Subject: CN=6739b6c0-871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:5e:a7:ba:a3:93:16:43:6a:98:52:bb:26:
9c:19:08:fb:43:1f:33:ea:59:29:85:b5:9c:3e:22:
dc:69:d8:44:2b:e6:0c:f9:8f:16:e4:32:0c:b4:9d:
3d:94:7e:d0:9c:97:9d:fe:e2:88:ac:03:f3:0b:2e:
32:67:fe:0b:b0:15:02:35:3e:91:00:f2:f0:6d:66:
d8:d2:77:f8:71:73:f6:be:ef:f9:ea:74:69:d4:33:
bc:f4:a5:dd:20:a8:5c:43:89:1f:51:a7:23:29:2f:
54:e1:35:ab:83:7f:ed:8f:2e:10:d4:63:b2:c6:9e:
a4:9e:a4:c3:31:f5:dc:ba:4b:cf:f4:49:e5:15:72:
93:0d:25:79:02:d2:b3:16:cb:92:fd:62:36:ef:49:
fd:bc:b3:3a:ee:35:96:62:d5:7b:7e:a7:80:44:11:
57:a4:c6:7f:e4:6b:a9:b4:66:f3:36:03:11:a5:12:
39:61:fa:ec:f5:11:08:ba:79:38:5d:0f:dc:99:78:
74:0b:7a:62:d2:75:1e:47:11:c9:6f:ab:d9:17:50:
f4:89:83:80:2e:28:52:e9:2c:d0:f1:2f:6e:82:f1:
bb:40:6b:2e:9f:93:11:7e:fb:c2:a0:55:6e:da:c0:
93:7e:96:84:18:17:4c:c1:06:af:9b:62:d3:4e:13:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:55:C6:B8:D3:DA:64:62:B2:A2:FF:CC:B6:3D:4E:5D:30:4C:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A79716A4C611EF936CF2B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1a:76:43:1c:6d:d8:a7:d0:69:46:35:56:1a:b3:25:66:16:
c6:21:03:b6:c9:45:36:c5:89:73:0c:9b:76:e9:09:1a:12:73:
6e:63:62:26:84:66:9a:60:03:c4:71:92:60:e5:76:0c:1f:22:
32:18:1a:37:8b:56:1a:7b:c9:9e:48:1e:f1:0f:d0:26:16:0a:
5d:60:4f:2e:6c:74:8b:e2:bf:f6:45:11:b7:b3:bb:92:a2:2c:
34:e1:4d:b7:01:ed:0f:14:ff:2b:f9:65:39:8c:f8:cb:f2:6e:
9e:0d:b0:c5:d5:7b:c7:3d:c6:33:97:ea:54:8a:df:32:d5:d6:
ad:9f:63:d1:3d:02:8d:f3:93:5f:87:92:e8:5e:6c:6d:07:e1:
ff:74:09:56:a8:78:0c:bf:34:c9:25:8c:2a:eb:ba:72:16:25:
75:2e:80:d2:ca:8f:62:50:4e:74:fe:cb:4a:39:62:34:fe:41:
34:d3:e9:d5:f2:e4:fa:f7:25:91:3e:f6:37:7a:c9:58:ef:d1:
ad:89:b9:66:3a:93:d2:93:4b:28:f7:5e:8e:55:3f:dd:5a:c6:
23:89:24:f8:c5:29:ad:3c:f2:f0:28:f3:9f:33:96:17:2e:69:
44:ed:0c:94:22:d1:c3:7d:a1:5a:03:5a:1a:cd:e7:c2:ba:5b:
3a:cd:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:35 2024 by rpki-client on console-fra.rpki-client.org