Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/A5F505EE310A11E89814DE46F8AEA228.roa
File: A5F505EE310A11E89814DE46F8AEA228.roa (raw, json)
Hash identifier: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=
Subject key identifier: 28:B7:96:D7:5B:8A:E5:29:9D:F0:19:DE:EC:19:48:F4:AD:0F:6C:BE
Certificate issuer: /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial: 0181
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/A5F505EE310A11E89814DE46F8AEA228.roa
Signing time: Mon 26 Mar 2018 15:30:44 +0000
ROA not before: Mon 26 Mar 2018 15:30:38 +0000
ROA not after: Wed 22 Mar 2028 15:30:38 +0000
asID: 36924
IP address blocks: 102.142.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Validity
Not Before: Mar 26 15:30:38 2018 GMT
Not After : Mar 22 15:30:38 2028 GMT
Subject: CN=5ab91224-c60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3b:32:f9:88:0a:d8:d0:5f:ea:6d:99:fc:d6:
cd:d3:19:f1:2f:de:20:aa:17:8e:0a:fd:86:1f:e5:
86:48:f1:d6:fe:6d:90:09:87:49:6a:82:1f:b5:ba:
1c:b4:f3:94:85:e1:1a:ca:ba:b9:8b:27:af:15:56:
86:b8:5a:bc:9c:6a:e2:d7:7f:a3:1d:ce:8b:5a:9c:
95:8d:cf:ca:1c:6f:7c:91:c7:ba:eb:11:0b:85:7f:
10:33:b0:c0:9d:75:53:a4:6c:0b:6c:c1:ac:68:0e:
2c:64:6e:3c:40:1b:c9:26:dc:cf:28:b0:7d:e2:f6:
51:fa:ad:b1:c2:af:95:99:b7:f6:82:a4:1d:0f:82:
ef:ce:bd:7d:24:f5:d5:d3:a1:29:d2:c0:92:dc:cc:
1f:68:94:33:fc:f3:41:8b:f7:a0:6f:83:6d:ec:4e:
72:4c:31:2b:c6:23:67:fa:92:5c:85:40:f5:12:29:
87:da:5a:de:3d:39:a8:22:0d:70:56:6b:f6:e4:4a:
e5:c6:af:93:88:b2:62:77:db:ac:70:50:c2:59:44:
f4:47:e5:c9:7c:c8:32:4c:47:58:88:3a:d6:42:96:
b0:99:44:e9:1a:52:35:fe:b7:47:c4:fd:88:58:e6:
08:01:e0:e1:87:93:7e:ea:67:72:3a:a0:f7:04:8e:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:96:D7:5B:8A:E5:29:9D:F0:19:DE:EC:19:48:F4:AD:0F:6C:BE
X509v3 Authority Key Identifier:
keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/A5F505EE310A11E89814DE46F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.142.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:8f:2e:07:45:4e:c7:b9:82:2d:e4:e3:77:87:9b:f4:08:fa:
29:19:c6:52:e4:80:fb:c5:31:48:f9:87:83:bb:9a:fb:25:e9:
25:99:19:71:b8:4b:c9:3d:a9:fb:01:7b:ab:b5:1f:eb:c1:25:
75:31:06:9a:2e:35:1c:f6:08:05:0a:79:ca:42:db:00:79:a8:
07:f8:ec:72:11:b1:e2:11:58:4d:6c:27:11:6e:14:e5:28:bc:
1f:78:73:03:3e:b9:59:d5:f6:1b:7b:8d:19:00:a9:46:76:b3:
98:e5:2d:16:8f:8b:14:20:77:83:b8:52:f4:26:43:9e:de:fe:
22:d1:80:a1:ee:16:4b:f8:af:e3:65:46:47:9e:04:ec:5d:5a:
b7:fc:81:43:d2:2a:bb:6c:9e:eb:71:70:21:4b:bf:d8:12:3c:
7f:fa:7d:05:17:c3:09:b7:0a:86:cd:b6:ba:30:28:98:7e:02:
49:d9:48:e7:83:ba:89:ad:e6:20:f2:f9:39:fc:14:54:bc:69:
74:29:fc:f3:2f:0b:f8:70:99:86:4d:fd:af:ef:4d:72:c8:b1:
d9:2d:56:fe:9b:9c:d4:1f:61:e9:4a:c3:d2:08:90:88:a6:29:
62:c4:d6:88:96:ed:9a:4a:f7:56:e4:19:83:a7:81:a6:27:25:
68:17:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:43 2024 by rpki-client on console-ams.rpki-client.org