Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E8F0526A19B11EFBCF26C42762E951A.roa
File: 9E8F0526A19B11EFBCF26C42762E951A.roa (raw, json)
Hash identifier: 2y02nX3edjRay7ZBS6Gp/9/hlh532VuNteQoZBSjLU8=
Subject key identifier: EE:6F:B7:07:65:3A:37:1F:52:43:43:B9:C4:78:1F:88:78:66:73:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E8F0526A19B11EFBCF26C42762E951A.roa
Signing time: Wed 13 Nov 2024 08:45:22 +0000
ROA not before: Wed 13 Nov 2024 08:45:19 +0000
ROA not after: Sat 23 Nov 2024 08:45:19 +0000
asID: 132325
IP address blocks: 154.212.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68801 (0x10cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 08:45:19 2024 GMT
Not After : Nov 23 08:45:19 2024 GMT
Subject: CN=67346722-8392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:e2:c0:87:17:fb:5d:d9:14:97:5e:d6:67:
fe:b7:58:20:24:68:63:3c:2f:5d:03:c7:cb:5d:75:
d3:9d:fb:c0:f9:44:da:19:75:42:06:9d:f9:5b:77:
ae:82:06:c2:8e:10:d0:63:aa:e3:da:5f:64:4f:b4:
f4:6e:75:36:84:f5:61:55:31:48:5a:f1:d3:6b:17:
56:d3:f4:73:4b:96:d0:7d:69:b0:62:f8:24:b6:d1:
df:cd:b8:e1:81:4a:7f:ae:83:e4:63:4d:6a:7e:d0:
a6:26:27:b7:d6:c3:ad:00:06:85:b9:23:64:26:8a:
e5:dc:8a:46:b0:36:a2:d6:a1:29:9c:80:15:6c:6d:
99:f2:9e:38:90:78:66:0c:a4:8a:cd:a7:71:72:a6:
fa:a3:b3:25:12:bd:ff:0b:10:63:ca:99:db:2a:46:
8e:e7:fc:69:bb:37:aa:d6:30:4a:94:e1:fc:34:c7:
62:45:e8:ad:93:c8:ea:60:8c:60:f1:81:71:74:6b:
34:46:17:49:90:e1:f7:9d:37:87:a8:2d:af:da:a3:
55:fa:c9:5a:8f:8e:f3:0a:95:4e:62:08:ee:b9:f6:
d5:77:5c:80:a3:e5:75:2a:0a:88:57:11:2c:80:66:
2e:6a:8c:d4:4e:d4:50:a0:d3:af:e9:0e:19:e9:96:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:B7:07:65:3A:37:1F:52:43:43:B9:C4:78:1F:88:78:66:73:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E8F0526A19B11EFBCF26C42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.148.0/24
Signature Algorithm: sha256WithRSAEncryption
61:82:45:50:5c:7c:54:36:20:7f:41:64:dd:ef:3c:14:a0:96:
fe:dd:e4:c8:3a:02:d5:97:1d:6e:30:7b:db:47:f9:01:eb:72:
4e:c2:5d:6b:9b:53:e5:2c:19:5c:05:26:55:27:82:23:fd:42:
f9:d2:13:02:ac:0a:31:41:f9:8a:cb:f1:23:e5:83:62:bb:98:
fc:c2:0a:21:21:e4:11:28:28:39:ff:7f:b4:d0:31:ea:85:15:
30:9c:88:db:11:15:ca:50:97:f5:50:91:ca:fb:59:ed:b3:57:
b0:50:b6:95:41:05:b9:bb:94:95:2e:ce:6b:e1:57:a4:31:02:
73:84:d0:56:42:85:95:52:82:8a:b7:a5:e7:a0:b1:a2:9d:95:
22:04:20:ee:21:f3:b1:b0:d7:26:f8:1c:c3:4a:04:2b:78:da:
f0:0e:f5:a0:12:bd:5b:6e:54:78:ea:cc:d7:ba:be:2f:08:7e:
84:ba:10:1f:dc:4f:56:8e:ba:39:da:24:5b:d3:ad:cf:3f:99:
cd:1f:75:13:15:3b:77:ce:5c:47:60:d7:83:06:14:50:be:2f:
8f:2b:87:b2:d8:11:28:f2:e9:63:b8:c7:49:5e:c0:19:db:27:
36:21:7b:a5:99:d4:f4:60:55:02:34:7a:b9:04:68:b6:7f:6d:
a3:5f:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:20 2024 by rpki-client on console-fra.rpki-client.org