Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C6FF6EAA9D311EFA270786F762E951A.roa
File: 2C6FF6EAA9D311EFA270786F762E951A.roa (raw, json)
Hash identifier: 9ibSOFxJuaLj+duGI5Es6IaEoNn/7cH+1gaMYOvRXV4=
Subject key identifier: 1F:60:F2:0F:75:BB:12:2D:D8:23:91:A2:3F:ED:E4:BD:5B:E9:44:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01122E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C6FF6EAA9D311EFA270786F762E951A.roa
Signing time: Sat 23 Nov 2024 19:43:12 +0000
ROA not before: Sat 23 Nov 2024 19:43:08 +0000
ROA not after: Tue 03 Dec 2024 19:43:08 +0000
asID: 9465
IP address blocks: 154.212.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70190 (0x1122e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:43:08 2024 GMT
Not After : Dec 3 19:43:08 2024 GMT
Subject: CN=67423050-ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:23:16:a4:f5:0a:d0:f6:ed:cd:88:fd:69:
a9:f9:30:bd:2c:e2:04:b5:ff:cc:89:2b:cc:d7:af:
be:34:c0:ac:5a:d4:22:39:a9:20:1a:61:7c:7f:da:
c6:19:fb:54:3a:5b:19:33:16:7f:96:2b:e2:c5:af:
29:14:de:a5:6d:9e:4e:2f:80:13:d2:10:01:41:4d:
6e:d0:96:da:c9:e1:49:7d:ea:60:c1:aa:b8:e8:a6:
f6:01:23:2c:e5:7b:74:8e:4a:31:54:4f:8b:71:66:
a9:1d:19:f7:3d:57:f5:d4:c6:7a:f6:df:76:24:1e:
03:53:65:85:c4:9c:14:a8:2c:da:b7:95:43:c5:e5:
31:4a:3c:fb:07:29:99:00:b8:e5:c0:e9:1f:75:65:
c3:ee:8b:33:1e:7e:f2:20:c6:e4:0a:74:04:80:bb:
11:cc:cc:f9:0f:fa:5b:f6:87:8a:9b:a0:63:30:cc:
8d:6e:9f:e1:18:5d:74:fd:31:0b:6b:e6:04:fc:d3:
21:67:41:51:6f:3e:9b:fa:76:4d:a8:96:42:d4:99:
12:9f:dd:2c:2a:8a:7f:f4:d8:a9:06:4c:bb:16:e5:
50:49:0f:a9:e0:98:8b:93:45:67:91:9c:32:46:ad:
7f:9d:3b:fb:49:00:9a:35:9e:cb:66:3b:ff:0c:4a:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:60:F2:0F:75:BB:12:2D:D8:23:91:A2:3F:ED:E4:BD:5B:E9:44:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C6FF6EAA9D311EFA270786F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:fe:97:91:79:f1:46:6c:f8:fa:96:fb:00:39:a7:07:7a:d5:
ae:39:33:a1:74:06:70:75:d5:65:35:08:e1:ba:cc:ef:9d:01:
6b:a5:30:92:1f:04:99:00:ed:8b:1b:70:f4:94:c2:8e:fb:f4:
a9:79:9b:99:7f:f7:06:b3:ac:7c:55:a6:a6:8d:54:85:ab:46:
fd:1c:26:63:33:14:82:a3:cd:41:e9:f3:ec:2c:34:a2:4b:99:
e8:d2:df:7a:49:74:14:c4:5f:6a:9c:0b:b4:20:88:3f:9a:28:
7f:e5:6f:4c:4e:53:87:7f:80:a5:54:2a:87:24:22:c2:9e:e2:
0b:e5:56:ea:fc:73:c0:42:e6:f8:fa:43:af:0c:d2:34:32:c4:
ea:2d:57:43:bf:cd:d4:b1:4d:0f:26:0a:a5:34:7c:e2:fc:54:
90:36:cf:4b:f2:b2:0e:87:b8:d6:c3:54:d4:c4:61:27:ca:e8:
c4:c6:78:32:bf:24:ab:e4:cc:55:8b:3a:ff:d8:8e:5d:6e:4e:
2c:05:53:15:df:84:57:b0:83:e4:1c:2e:a3:05:58:14:66:e8:
20:b7:b4:b0:19:e1:51:a8:45:c8:28:5b:ea:3a:4d:f6:1c:c5:
f1:1c:1f:f2:b6:16:5d:4c:64:9c:ce:f9:4c:18:c7:59:cb:5d:
73:c4:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:02 2024 by rpki-client on console-ams.rpki-client.org