Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9DB572A44E11EF9AE8D4B6762E951A.roa
File: 1F9DB572A44E11EF9AE8D4B6762E951A.roa (raw, json)
Hash identifier: 0s21QwUAXxoGUFFaIJ/PMsyZ8CY3bRsiyk0QxikfUqY=
Subject key identifier: A5:5B:54:20:87:69:C1:D9:D5:27:F0:F9:CB:D3:F1:99:8D:08:88:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9DB572A44E11EF9AE8D4B6762E951A.roa
Signing time: Sat 16 Nov 2024 19:08:12 +0000
ROA not before: Sat 16 Nov 2024 19:08:06 +0000
ROA not after: Mon 25 Nov 2024 19:08:06 +0000
asID: 9009
IP address blocks: 154.85.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69127 (0x10e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 19:08:06 2024 GMT
Not After : Nov 25 19:08:06 2024 GMT
Subject: CN=6738ed9c-1382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:b9:5a:c0:c1:90:7d:db:70:82:61:fe:1f:
4c:82:f0:e2:b6:12:40:62:e6:a0:4f:a3:be:e7:af:
e4:12:eb:e8:a3:12:9a:ad:f9:76:14:76:be:5b:10:
25:e3:e4:6a:39:ad:95:a6:33:1e:58:b2:a0:fc:7c:
ad:f1:0e:3f:96:33:ee:b3:8d:64:f4:29:6f:23:4e:
33:da:2a:3f:11:7e:86:db:83:ee:27:6b:fa:07:1e:
bb:d4:8b:6b:b5:88:1e:c8:97:3e:8f:76:3e:5c:4e:
a0:9e:e6:f3:a7:c3:8c:09:fe:a2:55:67:bd:34:22:
50:d6:f6:b1:db:68:bf:84:dc:cc:ea:ea:7b:58:be:
10:b9:1b:31:77:84:59:c0:42:7b:01:09:e9:e0:eb:
71:37:3e:c3:95:76:1c:e7:1c:1d:2c:72:d6:e2:94:
3f:53:73:09:3f:76:77:3b:9a:91:d6:e1:58:36:f9:
ea:cf:21:6e:a2:97:c3:d9:b5:9c:28:a6:3d:43:15:
da:0b:95:67:09:b2:76:ea:93:e6:a0:d3:ee:33:ef:
68:32:f2:dc:2f:9c:cf:2a:74:4c:53:75:a4:3a:65:
b0:71:c2:fd:2d:e2:31:41:0e:a5:f7:45:77:35:7f:
cc:18:71:4c:cb:1a:fe:f2:82:5f:5d:2b:9f:9b:26:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:54:20:87:69:C1:D9:D5:27:F0:F9:CB:D3:F1:99:8D:08:88:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9DB572A44E11EF9AE8D4B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.126.0/23
Signature Algorithm: sha256WithRSAEncryption
83:90:c7:15:7a:8c:aa:4d:3d:b5:7d:5e:2a:90:a0:48:3a:b6:
f2:29:23:bd:98:0f:4d:05:4a:c7:e4:78:56:f2:e3:ea:00:2d:
e3:6d:9d:44:bf:99:a9:76:9e:7d:82:b1:14:5f:8c:6d:77:6a:
87:79:a0:bc:0f:71:84:69:02:74:f7:0c:88:e9:9e:df:61:62:
8a:60:02:6e:6e:9c:46:b9:6d:87:be:6d:dd:6b:16:81:ec:79:
7d:3e:e0:3b:d6:1b:c4:da:81:dc:cf:13:9d:6f:e9:bd:93:0f:
08:c3:a8:ab:56:22:94:bf:3c:71:fc:c7:be:65:26:b2:a5:5b:
c2:d3:cc:1e:d9:d7:5e:4f:60:5f:20:85:e6:ec:ea:b7:49:df:
81:1c:71:30:ae:e4:18:bc:d1:53:27:f6:02:53:63:a9:cc:7d:
45:21:c8:31:9e:c5:2c:8e:c1:cd:5f:31:83:97:db:fd:5b:42:
72:f8:58:86:46:d3:b0:1a:f1:97:ad:60:4c:61:3a:e4:6a:80:
3a:d9:93:91:40:ec:44:cc:3b:95:e0:8d:58:62:95:2f:77:30:
e0:d3:37:2a:a4:41:9f:40:72:6e:89:92:78:95:a4:1e:f3:e9:
9e:23:bc:a9:a2:af:50:2c:48:42:f8:5d:7a:6b:96:64:99:2d:
2c:b2:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:38 2024 by rpki-client on console-fra.rpki-client.org