Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C1F7960A4CE11EF913AF164762E951A.roa
File: 0C1F7960A4CE11EF913AF164762E951A.roa (raw, json)
Hash identifier: XMwF0gdPcXKCcsUAKRLNsISAguR6MxlIXmRCxT4AmIE=
Subject key identifier: 0F:22:3E:35:1A:06:41:E6:C3:AD:C7:B7:52:B7:67:20:95:9A:17:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C1F7960A4CE11EF913AF164762E951A.roa
Signing time: Sun 17 Nov 2024 10:23:54 +0000
ROA not before: Sun 17 Nov 2024 10:23:51 +0000
ROA not after: Mon 25 Nov 2024 10:23:51 +0000
asID: 9009
IP address blocks: 154.85.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69278 (0x10e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:23:51 2024 GMT
Not After : Nov 25 10:23:51 2024 GMT
Subject: CN=6739c43a-8321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:81:56:03:1d:0a:de:2a:d6:1b:82:83:84:
9e:9a:64:09:d9:d5:78:3c:96:f2:df:b8:08:1e:16:
be:eb:ed:49:bd:15:c0:f3:8b:b5:8a:52:c4:b5:4b:
7e:3f:ad:13:a5:2c:d2:84:4f:9e:48:2c:ce:e5:3d:
92:e5:b5:89:79:0f:d7:16:fe:21:5f:69:e6:b7:aa:
e6:cd:fc:5e:51:f7:be:c6:c6:6d:af:bc:36:da:54:
2a:f1:c4:c4:ef:0b:6e:a2:e2:2e:1a:c2:3c:3a:a1:
a8:fe:a8:67:28:b5:2b:8e:6a:2f:82:4a:8c:a9:f5:
55:a7:78:49:3b:6c:8d:23:73:da:0a:b5:b8:98:7d:
4e:8b:d2:07:86:5c:60:ee:14:6a:4a:c7:06:59:d1:
3d:22:1b:13:b9:58:ce:38:24:31:b9:9f:7b:51:c3:
4d:46:c1:bb:88:79:46:06:32:84:21:e2:9d:79:2d:
84:63:e0:99:8d:0a:6a:d1:7d:ac:93:22:76:10:cf:
ce:ec:95:c6:26:c5:fc:96:91:5b:62:96:83:34:f9:
e0:9a:cb:14:48:b6:c9:c2:78:a6:5b:f1:b2:3b:ab:
bc:cb:c7:1d:38:7d:ae:e1:69:c4:50:86:6c:83:90:
e8:a0:7b:21:f6:bc:f1:35:43:4f:2b:ee:2a:6f:b6:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:22:3E:35:1A:06:41:E6:C3:AD:C7:B7:52:B7:67:20:95:9A:17:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C1F7960A4CE11EF913AF164762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.126.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:20:6b:f9:dd:1a:52:d6:be:97:61:89:84:bf:ec:ab:18:4c:
c3:98:8e:01:35:0c:90:36:31:2b:ac:43:50:3d:cf:48:ee:eb:
21:a2:ae:26:5a:0e:45:33:9a:a1:cd:be:a1:75:0d:f2:f5:7f:
44:72:77:fe:1d:2b:b3:7b:27:58:a0:71:8e:ad:65:6b:b2:fd:
d7:e1:7a:3f:b5:94:4f:ca:e6:d5:62:bb:b6:29:9e:bf:01:08:
f7:a4:ed:45:19:4f:06:d4:ed:7e:4e:45:74:a0:a7:df:6d:5a:
66:e4:45:1f:45:5a:f8:d3:16:ff:b3:1c:b2:d9:22:da:43:a4:
bc:28:5a:ae:5f:48:e3:af:75:b9:96:e7:c9:e4:00:0b:80:d3:
88:a7:c2:51:f9:ad:67:55:5f:c2:ca:33:12:ae:fc:4c:23:e8:
ad:46:6a:12:60:cb:5d:d5:ea:ab:42:45:cf:2e:5c:ab:b8:0c:
fe:10:39:06:a8:32:27:d9:e7:3f:f0:5a:3a:aa:4c:d8:ed:56:
28:57:c6:54:22:39:1e:c7:3d:26:03:b4:c3:65:df:dd:1c:7e:
31:ac:ae:2f:e9:9d:ca:d1:ab:8b:c2:30:ac:b7:2b:12:60:92:
59:23:0d:28:25:82:7b:e5:1a:d7:fa:0f:0f:e8:9d:33:e2:90:
2a:7a:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:36 2024 by rpki-client on console-fra.rpki-client.org