Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EAA5CCAAD5811EFA3F3FDA3762E951A.roa
File: 1EAA5CCAAD5811EFA3F3FDA3762E951A.roa (raw, json)
Hash identifier: fl8wuWS7jgiITYecVCAdZDlnMwWMr+nxyrTlCjcTzBk=
Subject key identifier: 14:EA:8D:FD:E5:54:02:A8:CC:51:21:73:41:B3:D1:D3:44:BC:47:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EAA5CCAAD5811EFA3F3FDA3762E951A.roa
Signing time: Thu 28 Nov 2024 07:12:25 +0000
ROA not before: Thu 28 Nov 2024 07:12:22 +0000
ROA not after: Tue 11 Feb 2025 07:12:22 +0000
asID: 9009
IP address blocks: 154.85.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70875 (0x114db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:12:22 2024 GMT
Not After : Feb 11 07:12:22 2025 GMT
Subject: CN=674817d9-047a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:08:ee:df:eb:2a:43:f8:29:bf:e7:3b:6e:
29:c6:ef:74:ca:09:91:33:ad:9d:f0:ed:b2:65:f0:
b6:5c:1d:f7:48:b9:9e:d6:2b:0b:29:bd:34:7e:5f:
6f:93:63:a8:14:18:b4:4c:7e:9a:19:d2:87:61:e4:
df:f7:db:5d:ca:02:eb:ae:43:cb:f9:5c:c5:f2:b2:
cc:ec:0c:21:a7:72:00:f2:01:e3:7c:a6:25:70:91:
39:e5:c2:9e:03:23:0f:42:64:37:51:26:97:7c:18:
e8:92:0a:68:31:5a:4d:9b:5a:07:8d:21:bf:cf:42:
7a:e4:69:56:98:f5:58:2f:94:13:90:1a:7c:bc:9a:
4f:e8:aa:c2:e0:1a:34:43:11:1d:e5:b3:60:c3:24:
51:01:2f:f4:76:1f:58:72:23:f9:63:cc:60:1c:3f:
60:b7:76:76:bc:63:88:c3:b4:b9:1b:30:bd:89:ef:
06:4e:0e:ee:5f:4e:90:f2:73:0a:27:ae:7c:f6:5c:
db:4a:fc:13:72:26:09:77:17:ed:8c:1a:63:18:68:
99:f2:90:12:3f:23:bf:c0:3e:1b:47:1d:7c:2d:1b:
6f:cf:fc:bb:fe:e9:00:5a:ea:3c:a3:1b:c7:6e:29:
f8:ba:18:e6:b0:e5:0e:45:19:10:70:e2:2a:e4:bf:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:8D:FD:E5:54:02:A8:CC:51:21:73:41:B3:D1:D3:44:BC:47:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EAA5CCAAD5811EFA3F3FDA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b9:a6:11:0d:42:e0:51:22:0c:ac:35:3f:26:c7:c4:51:27:
81:8e:2f:28:17:d0:84:2d:78:48:56:61:08:58:b1:91:dc:49:
a6:f3:6b:0c:ef:96:c5:c7:9f:1e:9c:44:27:a0:09:ac:c4:0b:
2c:67:93:b1:e0:40:e9:7c:84:cb:3f:e0:56:9c:82:e8:1f:81:
93:3f:2d:01:b4:f6:ba:66:4f:3f:b4:c1:cf:28:61:86:8b:f3:
69:d7:7d:b2:5f:96:33:41:67:5c:98:6f:bd:54:77:3e:a4:23:
f3:74:2a:97:8a:c8:a0:7e:04:2d:c1:4d:37:f3:49:41:35:41:
79:ca:4f:aa:2c:74:82:71:bb:d5:9e:6c:49:92:f9:51:40:0b:
72:5d:18:72:f2:50:f8:4c:39:58:eb:f4:de:2e:bc:f1:37:7f:
7a:e1:0d:75:51:76:43:71:5d:aa:1c:f5:21:77:6d:96:3c:6f:
7b:b2:47:1c:80:bc:54:5a:37:ae:44:c6:be:23:40:d3:66:64:
e8:e5:64:fd:a0:92:9a:e6:a0:f3:a9:d4:3e:98:78:f0:6e:88:
ef:f0:19:01:03:bd:01:ad:fa:d1:b6:e1:56:37:c2:18:85:0c:
1e:6b:13:73:de:2b:76:55:e9:ef:6d:df:14:68:6f:76:55:82:
c4:03:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 14:46:04 2024 by rpki-client on console-fra.rpki-client.org