Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C12E726A44611EFB1A5D284762E951A.roa
File: 2C12E726A44611EFB1A5D284762E951A.roa (raw, json)
Hash identifier: Mr9vrmPjlm8kMkCK2TaecZgeSqq3PlnSEUMPenFkZj8=
Subject key identifier: E7:5E:A2:71:F1:0D:58:7F:34:03:0D:BE:7D:08:4C:DF:33:FF:DB:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C12E726A44611EFB1A5D284762E951A.roa
Signing time: Sat 16 Nov 2024 18:11:17 +0000
ROA not before: Sat 16 Nov 2024 18:11:13 +0000
ROA not after: Mon 25 Nov 2024 18:11:13 +0000
asID: 9009
IP address blocks: 154.85.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69103 (0x10def)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 18:11:13 2024 GMT
Not After : Nov 25 18:11:13 2024 GMT
Subject: CN=6738e044-b679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:1e:3b:1c:86:78:19:cd:d5:89:5a:5b:c7:
16:8b:d3:35:85:bf:d6:d0:20:70:0d:55:90:49:29:
81:37:27:3c:8a:49:d0:94:00:af:a5:7d:6a:47:9a:
b4:63:01:6d:01:b3:32:f0:70:bf:15:17:a4:40:17:
22:56:8c:ec:eb:13:ef:a8:b9:ac:e4:02:16:c9:89:
01:c3:45:3a:5b:37:38:89:83:cb:80:77:22:b3:ad:
ca:c9:08:a9:ef:cb:0e:4d:22:2a:47:20:9b:c8:fc:
ce:d8:bc:7c:d5:9c:51:17:5a:8a:62:d4:0e:c0:86:
07:69:d7:2a:5a:19:df:c0:ea:6d:54:ae:93:e7:cf:
c2:87:6b:b7:81:b1:c9:8c:a7:58:40:95:26:51:75:
00:b1:04:77:80:72:89:80:dd:5b:0e:b0:66:9e:79:
a5:57:ad:36:2d:d2:25:d1:f2:4f:77:dc:1b:ac:4f:
0c:0b:d1:f0:bd:9a:f5:8d:36:44:ed:49:c6:95:c0:
b3:f4:1c:52:d7:4d:28:dc:a6:83:65:fa:3d:13:ae:
4a:3c:e0:0d:e8:b1:67:e2:ed:26:f3:12:e1:0f:6f:
f6:3d:be:3b:27:e6:21:e1:93:80:8b:cd:6c:69:19:
13:0e:8f:3d:9f:ec:36:b1:10:91:70:59:37:cf:a5:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5E:A2:71:F1:0D:58:7F:34:03:0D:BE:7D:08:4C:DF:33:FF:DB:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C12E726A44611EFB1A5D284762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b1:b4:91:a6:b8:d2:5b:64:48:c2:7b:df:02:4d:12:59:a1:
7e:46:98:90:6d:f3:11:2d:3b:56:d6:fd:d7:12:39:89:87:2d:
5a:1d:dd:65:7f:7e:7a:78:d4:95:60:fb:2f:72:b0:06:35:2c:
ee:77:f6:c0:61:78:da:c9:10:a6:58:d7:bd:7c:93:8f:42:90:
c7:22:cc:8b:df:a9:62:c1:39:a7:b3:90:99:15:df:ce:99:d7:
8f:23:ec:73:82:15:62:86:97:cd:bc:fb:db:82:c0:0a:e9:59:
91:79:54:cc:1a:d1:d7:cf:ba:27:eb:89:a2:7b:8b:2a:c9:14:
2d:1e:69:2f:0d:58:f6:58:48:dd:ed:b9:ab:fb:16:39:94:32:
17:b7:c8:20:ff:20:4a:ac:ad:84:45:85:a0:b7:e9:2a:ab:70:
79:43:da:dd:3b:92:e1:41:d3:33:ef:99:69:8d:67:84:cf:93:
b7:f7:2e:b1:de:f5:e0:aa:76:cd:3c:89:a1:7f:42:fd:1e:8e:
1e:83:c0:87:b2:5a:06:4a:89:1e:f6:00:37:b0:4d:b6:75:9a:
8a:ce:51:f8:44:01:fc:7b:40:a5:82:2a:7e:f1:d3:b1:13:fd:
2c:d0:99:89:59:0a:9c:a3:9c:76:38:25:80:6d:e0:b3:25:ff:
98:db:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:34 2024 by rpki-client on console-ams.rpki-client.org