Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D12F5FE4A9CA11EF857822BA762E951A.roa
File: D12F5FE4A9CA11EF857822BA762E951A.roa (raw, json)
Hash identifier: Xcjd8FypTdBqpq7YUHu0BSoB+G6urZVQ3uRA8LixLzo=
Subject key identifier: 2C:3F:0F:1D:A3:5F:5D:23:16:D8:E5:B0:B1:90:D1:A5:7B:35:F6:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D12F5FE4A9CA11EF857822BA762E951A.roa
Signing time: Sat 23 Nov 2024 18:43:23 +0000
ROA not before: Sat 23 Nov 2024 18:43:19 +0000
ROA not after: Mon 02 Dec 2024 18:43:19 +0000
asID: 7029
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70122 (0x111ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 18:43:19 2024 GMT
Not After : Dec 2 18:43:19 2024 GMT
Subject: CN=6742224b-7d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:9e:ee:10:4b:fc:f2:59:00:10:39:2b:9b:
30:1d:64:67:b7:70:86:29:9b:9e:40:21:72:5c:67:
80:6a:b5:b6:62:93:9f:28:81:73:1c:cf:d0:f1:f4:
a3:ee:a0:cc:27:8e:af:07:c6:57:2a:49:c3:7a:0f:
c5:c9:75:7c:81:52:3d:71:ed:0f:0f:17:9d:e8:c8:
78:f7:ee:b1:18:c3:1d:8e:31:60:7a:62:f9:f6:f5:
af:2c:bc:82:16:0a:6c:f8:86:7d:99:ed:ed:8f:bd:
16:95:ae:e6:d4:97:5b:2c:5d:50:4d:bb:4d:61:19:
93:f0:56:91:d2:5b:28:86:ea:4b:45:b0:2a:f5:61:
32:0e:dd:c0:1e:42:2b:a3:92:c2:f0:c1:d3:53:7f:
d2:5d:8a:68:50:43:67:0e:72:90:3c:dc:19:7b:f0:
f9:55:b9:4f:e8:f8:55:90:e1:2f:06:61:51:f0:2b:
da:5c:b8:27:39:8b:da:32:a5:a1:98:a5:8b:a8:19:
02:ae:2a:a3:23:b7:8f:60:45:50:15:6a:12:cd:3c:
08:7c:78:6e:66:9e:15:6d:e2:1f:06:28:e9:6c:b2:
ad:97:ec:b8:15:e8:35:f5:15:23:5b:45:d1:1e:75:
f1:53:02:f0:5b:f3:fd:ac:ba:50:e2:5f:29:ac:d8:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:0F:1D:A3:5F:5D:23:16:D8:E5:B0:B1:90:D1:A5:7B:35:F6:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D12F5FE4A9CA11EF857822BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
98:fd:e7:b5:99:7f:c4:94:8c:1a:ec:6f:08:3c:ba:cf:ff:93:
12:e5:19:5d:90:91:41:f6:0f:a7:11:0b:d4:0e:cf:10:34:bd:
27:03:56:45:57:6f:d4:50:4f:8e:3c:9c:46:b4:86:de:74:82:
88:52:c9:2c:77:92:d5:e4:ef:6b:f1:e1:41:a8:b4:d3:14:ae:
8b:33:9b:8c:ff:61:6c:25:b9:7c:58:eb:46:0e:e2:59:44:1b:
af:14:f5:5a:b8:39:48:fe:fb:50:93:e6:9b:f3:0d:c3:5e:90:
0e:f7:f1:50:67:49:8a:32:cb:14:d2:f9:b8:b8:03:7e:c3:c5:
58:48:71:13:99:25:84:74:55:93:79:cd:6f:b0:27:e4:81:ea:
71:ae:88:59:33:52:ac:45:d7:29:2d:b1:68:cf:24:fc:c6:25:
73:c2:0e:2a:ad:06:1d:89:39:bd:e0:2c:51:d3:a8:e6:ec:1a:
a6:88:ca:99:fb:31:81:cc:2a:29:ac:eb:ce:14:68:d3:3d:3e:
7d:92:c2:76:83:26:ad:bc:3f:42:69:d8:56:58:d6:56:eb:66:
86:08:47:b2:c5:86:db:e8:75:37:60:ac:d2:21:ab:7b:ba:19:
32:97:3d:d7:82:38:b1:62:89:10:18:9a:c0:ef:12:a7:59:b2:
b7:8e:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:47 2024 by rpki-client on console-fra.rpki-client.org