Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59513312A8E911EF80E0EBAF762E951A.roa
File: 59513312A8E911EF80E0EBAF762E951A.roa (raw, json)
Hash identifier: yFePvI798q4gqYiO8xyrSFZtxtE+18x+4kF9eJv2Mk8=
Subject key identifier: 4D:F4:9E:F4:16:12:45:12:18:70:DB:56:B2:93:73:18:A4:DB:EA:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59513312A8E911EF80E0EBAF762E951A.roa
Signing time: Fri 22 Nov 2024 15:49:25 +0000
ROA not before: Fri 22 Nov 2024 15:49:21 +0000
ROA not after: Tue 03 Dec 2024 15:49:21 +0000
asID: 62240
IP address blocks: 154.194.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69879 (0x110f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:49:21 2024 GMT
Not After : Dec 3 15:49:21 2024 GMT
Subject: CN=6740a805-d57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:11:07:85:ef:ae:ea:5e:8f:cc:f6:7f:63:
53:d6:da:a1:84:71:c5:b0:b4:81:15:2c:4b:97:99:
a9:40:e2:f9:78:06:97:05:23:4c:0e:93:06:90:66:
29:ec:07:60:b9:d9:4d:2c:53:7b:d0:aa:cf:64:ca:
c0:ac:67:5a:dd:b9:c1:6c:43:75:b0:cc:0d:9c:61:
db:7b:a5:c9:07:be:8d:7c:b6:04:38:0b:5e:a3:37:
ad:e9:94:dc:0b:e9:c2:51:9e:0a:8e:09:a9:a6:43:
27:e4:92:7f:33:48:1b:3f:4c:98:c7:56:d2:1d:4d:
1d:a0:db:fc:ab:c2:8b:1f:44:ec:94:47:2f:65:e0:
b6:c5:0e:80:1b:a0:ed:35:cd:d7:a5:71:0d:83:01:
71:5d:f7:08:c6:09:60:a7:77:46:32:c1:98:2a:1a:
b0:db:3f:0d:68:8b:55:60:0b:3a:c0:79:12:4b:7d:
7d:fb:d4:b8:ee:e4:a8:13:f4:56:bd:72:fc:7a:8e:
a1:85:fb:85:be:1f:ea:c8:4a:2b:24:78:a7:b8:e7:
e1:db:de:98:fd:1b:62:69:db:6b:6b:36:2c:c8:a6:
5d:3a:76:bc:64:63:77:51:fc:e8:a8:0a:02:52:a8:
f8:82:e8:76:f9:58:98:f2:94:c6:6d:1f:2e:31:64:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:9E:F4:16:12:45:12:18:70:DB:56:B2:93:73:18:A4:DB:EA:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59513312A8E911EF80E0EBAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:11:13:0a:d3:97:8b:7d:9b:ad:eb:eb:47:65:0c:29:48:bf:
94:c6:0b:31:aa:18:6e:61:58:a0:3a:09:70:c2:f8:83:ee:11:
e3:fc:f9:75:92:3f:5b:56:88:26:b9:42:66:d2:85:b5:26:ad:
be:f0:e8:f2:be:c0:89:b4:38:1b:19:84:9f:53:d5:5c:97:62:
44:8c:c6:a5:f7:37:97:9c:fb:13:1f:a4:3b:41:cc:e0:27:5c:
fb:70:32:42:8e:fe:0f:47:58:5c:15:ac:f2:c4:fc:e0:16:c7:
70:8b:0b:38:53:ce:4e:d2:62:a7:0b:2f:fb:03:ae:fa:01:85:
d3:0d:2f:42:c0:cd:1a:a4:f8:b1:9a:ad:76:56:56:d0:e3:19:
42:95:da:55:ef:98:21:ac:a4:1a:45:69:1c:ee:35:2a:3e:30:
2b:af:84:33:70:71:99:9a:f1:bd:8d:f5:ab:98:ce:e9:d4:5f:
c5:10:86:e1:4f:95:1b:ee:ac:81:ae:6a:3f:ea:e5:e0:89:88:
d6:f0:89:78:75:0c:74:e5:fe:cd:f4:b7:83:a1:ab:13:37:0d:
0d:aa:9a:37:90:8a:9e:4e:31:d5:80:61:61:85:a5:4f:5c:79:
16:48:c0:55:df:d2:4c:de:e8:24:57:ef:4d:1c:b9:ba:af:c5:
7c:30:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:11 2024 by rpki-client on console-ams.rpki-client.org