Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B626B24986311EFA4F7877B762E951A.roa
File: 2B626B24986311EFA4F7877B762E951A.roa (raw, json)
Hash identifier: JFikU+b+kQo9AJ71Pg2gwJb8DVmlR5dTq2JocrPrhFc=
Subject key identifier: 1D:61:9F:61:25:34:CC:45:A5:2F:12:F1:D5:C8:FA:6E:40:82:53:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01050B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B626B24986311EFA4F7877B762E951A.roa
Signing time: Fri 01 Nov 2024 15:08:37 +0000
ROA not before: Fri 01 Nov 2024 15:08:33 +0000
ROA not after: Tue 03 Dec 2024 15:08:33 +0000
asID: 203020
IP address blocks: 154.207.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66827 (0x1050b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:08:33 2024 GMT
Not After : Dec 3 15:08:33 2024 GMT
Subject: CN=6724eef5-2cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:c8:0f:2d:73:3a:b0:93:ac:fd:c9:fc:61:
60:0a:e5:ee:fa:e6:23:20:81:0b:08:4a:de:36:7a:
20:29:64:a7:07:e5:fa:c1:8e:41:f4:f9:94:4a:be:
6f:05:b2:57:4e:f5:5e:99:44:1d:b1:7c:56:e6:a8:
08:d2:11:6c:29:6c:6b:e2:36:fe:72:bf:83:03:2a:
c2:e9:48:b5:b5:5d:97:82:23:c4:6b:34:d4:a8:ab:
09:ab:81:bf:94:52:34:12:1f:35:93:37:fe:91:45:
24:14:97:62:f8:6c:57:78:8d:fa:41:16:ff:8e:62:
91:71:08:8f:93:f5:72:7b:5e:5e:fd:08:cf:49:8a:
03:f9:6f:e0:9a:12:fc:ae:e3:bb:78:2d:38:f6:59:
35:4a:35:f1:ce:dd:d0:85:10:9f:38:50:fc:90:bb:
b1:e8:46:37:19:38:80:5c:05:1b:a2:b2:33:00:b8:
05:03:03:31:0f:c4:4f:f8:ce:50:b6:e2:4f:cb:ed:
57:d1:03:f5:e3:18:d7:bc:34:83:ec:5a:bf:7c:c9:
10:d0:47:7a:37:0d:19:17:5e:7a:20:68:84:76:a9:
37:0b:ef:58:6f:f0:f9:c7:22:47:1c:88:59:67:fd:
0c:a9:e0:5e:99:a0:c3:00:f9:aa:f6:3f:c5:58:24:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:9F:61:25:34:CC:45:A5:2F:12:F1:D5:C8:FA:6E:40:82:53:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B626B24986311EFA4F7877B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.124.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e1:21:6b:1d:57:be:0a:dc:a6:9d:c7:55:df:27:6a:e9:5d:
d5:e8:9c:72:7c:bd:36:71:aa:00:1c:7e:1e:04:62:5f:be:26:
86:c2:4c:5d:4c:06:7d:7e:ea:db:32:4a:07:76:14:55:05:9c:
ca:bf:93:d9:23:aa:ee:cf:d0:88:d1:ef:30:f7:c4:36:75:13:
d8:b5:e0:c1:b0:ef:99:20:5b:db:78:6f:00:99:f1:ff:05:f5:
6b:56:0c:84:a3:81:6b:cc:c5:59:09:ac:bd:ce:f5:5c:0d:bf:
00:63:62:8f:a3:34:f4:6d:3f:ee:a3:8a:52:f0:94:c1:87:55:
51:59:30:ee:25:a6:f3:ab:f0:30:46:bd:a5:8f:3c:6d:36:f0:
08:90:09:c1:ca:52:d7:eb:e0:90:d8:b5:60:54:06:fb:e4:23:
a3:2e:5d:86:5e:85:2c:ea:ad:29:ec:11:0e:ac:79:b9:24:c7:
3a:6a:af:32:bd:8a:dc:70:c8:68:71:1a:ab:35:10:38:d2:ac:
45:c9:be:0e:9d:6e:f3:e8:0c:00:75:7c:08:a9:67:95:0e:5f:
74:8c:2b:95:73:df:01:f7:9e:22:d4:bc:fe:ee:b2:82:b6:06:
22:ff:9c:73:4b:8c:79:d3:4f:92:e6:e4:50:1f:05:52:19:45:
e5:c4:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org