Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8FAAF7CA9CC11EFA17DE248762E951A.roa
File: F8FAAF7CA9CC11EFA17DE248762E951A.roa (raw, json)
Hash identifier: ikmytnWQfEd9L3mSM0Ka9Ys6XOhOaYUnnHCeRIqpryQ=
Subject key identifier: 3F:B3:66:66:58:5C:B4:85:93:92:C7:F7:D0:F4:54:65:7F:2B:D9:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8FAAF7CA9CC11EFA17DE248762E951A.roa
Signing time: Sat 23 Nov 2024 18:58:49 +0000
ROA not before: Sat 23 Nov 2024 18:58:45 +0000
ROA not after: Mon 02 Dec 2024 18:58:45 +0000
asID: 9009
IP address blocks: 154.85.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70136 (0x111f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 18:58:45 2024 GMT
Not After : Dec 2 18:58:45 2024 GMT
Subject: CN=674225e9-b62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:58:6f:cd:bb:70:c1:46:7f:2d:54:cd:e5:
23:40:51:10:20:5c:96:ca:2c:4c:25:fc:f9:a2:59:
80:19:1d:a5:b3:6a:a4:f9:eb:38:a6:fc:11:32:37:
6f:16:d1:0e:9b:ac:2d:a0:9b:e7:7a:f4:cb:8e:19:
f5:f2:be:6b:2c:28:69:44:41:69:1d:29:3d:22:a3:
22:4e:92:91:82:0d:24:d4:ad:2c:72:3b:a5:cc:28:
14:da:9a:40:2d:c2:19:86:df:98:9a:7b:8a:69:0b:
36:76:c0:86:ea:fd:83:84:57:44:dc:4c:03:f3:86:
10:8f:96:ae:63:ae:5f:4a:d0:0f:6f:af:04:7e:a7:
1e:26:e9:1d:ee:ce:57:92:d9:53:01:89:a1:dc:e1:
69:c7:16:ea:e5:b2:91:a0:02:36:0c:37:80:df:f8:
16:c9:df:9e:22:91:2f:9d:c9:a8:c9:33:a6:c8:6b:
68:47:de:bf:90:f2:8c:fc:35:48:fa:85:44:7e:50:
25:47:56:47:b9:ec:8f:26:49:76:db:26:d5:7d:26:
3a:03:4e:01:25:55:80:2c:08:8f:22:13:e5:c8:42:
b3:5b:47:7c:58:a8:06:58:e2:1b:6c:93:07:df:90:
4b:46:a6:93:15:55:51:87:42:02:90:be:e2:19:24:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:66:66:58:5C:B4:85:93:92:C7:F7:D0:F4:54:65:7F:2B:D9:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8FAAF7CA9CC11EFA17DE248762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.126.0/23
Signature Algorithm: sha256WithRSAEncryption
af:1c:8f:2e:dc:ae:02:44:a5:db:ee:fe:28:06:a8:24:c1:ca:
96:5c:61:21:ec:40:ee:29:bd:93:4a:40:fc:b4:b5:16:ee:e1:
c8:18:43:80:9d:96:df:b3:af:d5:61:3f:cc:89:b9:bb:3b:3e:
7a:08:09:9f:ef:0e:b0:e5:55:ee:dc:f2:4b:22:33:3d:5e:6e:
0b:8e:e8:79:3f:02:21:76:c3:84:ba:b4:2e:aa:1f:cc:06:25:
61:1b:3c:2c:fa:5a:f8:8c:02:3e:12:a6:d3:8b:0b:70:b0:15:
60:60:ec:db:b5:ad:33:a3:71:24:51:15:f8:a3:3a:6b:91:12:
93:e8:ae:48:f6:b6:eb:a6:0b:8a:2b:3e:98:08:d6:07:0e:34:
e5:fe:ce:fd:c4:25:56:92:5b:70:46:5b:14:e8:b1:c3:7d:0d:
11:2a:91:cc:37:d8:e7:c9:95:3e:21:4d:65:c5:84:7d:ed:a4:
ac:c3:f9:90:db:92:f0:74:9e:a0:5b:1c:04:59:d7:bc:b4:19:
7f:44:0c:c7:ee:85:a8:5e:90:55:54:94:36:36:3e:ec:98:17:
f1:bb:4f:3c:c8:9b:73:31:f4:f5:5e:a9:15:d1:b4:d7:5c:67:
f9:43:78:67:b2:e7:56:68:5a:30:ae:ba:5b:87:bd:1d:1e:b0:
4d:e6:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:47 2024 by rpki-client on console-ams.rpki-client.org