Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/12BF6F7E0BE511EEB9B1FC134AD9E6FC.roa
File: 12BF6F7E0BE511EEB9B1FC134AD9E6FC.roa (raw, json)
Hash identifier: MkJTfBrBOzSWuJsHZrjclrv6ki4SKSbL2gRo3ZL+5k0=
Subject key identifier: 71:58:3D:40:74:02:C1:40:D8:E4:39:66:85:DB:4C:64:63:2C:6F:12
Certificate issuer: /CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Certificate serial: 23
Authority key identifier: 7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/12BF6F7E0BE511EEB9B1FC134AD9E6FC.roa
Signing time: Fri 16 Jun 2023 01:28:18 +0000
ROA not before: Fri 16 Jun 2023 01:28:13 +0000
ROA not after: Fri 16 Jun 2028 01:28:13 +0000
asID: 37358
IP address blocks: 154.127.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Validity
Not Before: Jun 16 01:28:13 2023 GMT
Not After : Jun 16 01:28:13 2028 GMT
Subject: CN=648bbab2-9380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:1d:3d:32:16:e7:a5:7c:7d:f0:55:f2:26:
34:4f:bc:34:9d:26:61:28:30:82:5d:9c:fc:6d:59:
bb:0b:c0:64:23:2f:3c:64:54:40:44:85:d0:cf:f6:
fe:64:7f:4f:e0:f8:63:21:71:06:41:62:91:31:9b:
49:60:a2:9f:7e:46:b9:af:64:4f:7e:dd:11:ee:37:
cd:7a:c7:11:f2:3e:1e:d7:02:c8:16:91:b2:07:a7:
06:62:c3:6a:74:68:25:24:d7:e3:b3:8c:51:00:06:
9c:7e:74:f8:08:7b:ca:ad:a9:34:2a:ce:eb:74:38:
35:e1:3f:fe:90:9f:c3:41:96:ea:3a:1a:50:c5:36:
eb:b9:e6:a1:ae:7f:99:24:7c:19:c8:aa:c9:e5:fe:
33:22:97:ca:c2:bc:32:0d:60:7c:7f:37:df:95:ad:
c0:20:b4:ee:59:ed:70:ee:cc:0b:ce:9f:28:b7:86:
a2:64:c4:dc:65:65:e0:7a:30:3b:59:00:e7:69:62:
a7:4f:a3:c8:62:67:d3:72:78:09:3a:7a:da:a3:6f:
b3:f3:50:21:83:a7:b1:97:87:00:e0:e6:1f:9b:30:
d9:83:47:f4:23:d2:cb:6a:b2:46:9b:42:74:62:ac:
ed:c2:60:1e:0f:e4:32:5e:6e:12:86:ae:d0:b8:5c:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:3D:40:74:02:C1:40:D8:E4:39:66:85:DB:4C:64:63:2C:6F:12
X509v3 Authority Key Identifier:
keyid:7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/12BF6F7E0BE511EEB9B1FC134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:17:1d:9d:de:3e:14:22:8c:e4:8d:bc:c2:00:1b:f7:5b:9b:
15:a2:a5:b7:d0:f8:ff:c6:39:fa:f8:b5:df:6d:0f:68:48:f7:
0d:00:bc:58:ce:3a:6d:fa:07:46:f8:fa:cb:28:5a:32:26:7b:
34:9e:20:36:8b:61:92:15:ae:a6:f5:07:76:48:8b:77:70:04:
86:5c:cc:1a:11:2f:e0:b2:e4:58:50:eb:9d:52:84:e0:fa:22:
23:9f:84:85:a0:49:d8:86:d9:20:2d:65:56:49:f6:52:c7:89:
0d:0d:ea:8b:70:e7:67:f1:aa:8d:91:59:27:23:79:39:4b:1c:
4c:f8:6a:a9:dc:1d:b9:da:aa:54:9b:4e:6b:8e:c7:79:b4:f9:
6f:16:94:ff:92:4c:0d:f8:42:73:c7:ab:ee:80:f6:d2:1d:3c:
3c:3d:f9:87:49:fa:ae:50:37:53:c1:d8:c2:73:27:62:52:74:
56:27:e0:23:d9:13:06:70:4e:a2:12:b9:f5:a4:94:c7:4d:11:
31:ad:95:55:47:f9:fb:97:44:17:a6:cf:19:f7:43:7e:ae:b3:
95:42:53:d2:af:d8:78:4f:80:5c:df:2c:ce:75:a5:d2:02:0d:
7d:bc:6b:c5:52:a2:52:c2:0c:f6:3c:ee:a7:9c:44:04:08:7b:
11:4c:8e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:01 2024 by rpki-client on console-fra.rpki-client.org