Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/485A1164725711EFB673D763762E951A.roa
File: 485A1164725711EFB673D763762E951A.roa (raw, json)
Hash identifier: c9Y53dSDjc5NbnZrw9dzilhO5+YaLWXKNZUxBqDQA4A=
Subject key identifier: 55:2F:E1:63:49:1B:95:CA:B8:66:7D:1B:DC:95:48:C6:E1:0A:F8:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/485A1164725711EFB673D763762E951A.roa
Signing time: Sat 14 Sep 2024 05:07:47 +0000
ROA not before: Sat 14 Sep 2024 05:07:44 +0000
ROA not after: Tue 31 Dec 2024 05:07:44 +0000
asID: 17561
IP address blocks: 154.217.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60880 (0xedd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:07:44 2024 GMT
Not After : Dec 31 05:07:44 2024 GMT
Subject: CN=66e51a23-5749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:f0:e2:ce:af:a3:00:ee:d1:0a:4e:71:9f:
ba:bc:3f:10:02:73:64:c6:1e:2d:8e:46:5b:f7:f4:
95:a3:85:e6:f5:f1:78:30:e6:49:c3:f3:fc:ad:d5:
a1:fe:55:d5:29:87:21:61:ac:cd:fb:fb:7c:ad:9b:
32:72:1d:2f:14:6d:bd:27:81:ca:c1:e1:46:9f:dc:
db:3f:9c:dc:2b:93:12:86:58:d6:d9:e2:54:b2:23:
3c:64:b7:9b:0a:0a:5e:f4:85:ad:33:f2:a9:ae:18:
8e:c5:99:35:ad:92:15:64:a9:8d:e9:3e:cc:31:c7:
42:49:ed:99:ec:90:2a:a6:f6:d7:7f:24:3f:65:20:
4c:8b:d0:4a:b0:95:15:a2:3f:7e:56:5c:36:86:91:
66:c0:81:a1:74:69:8f:1d:91:b8:4e:e7:ea:bb:db:
e6:6e:c8:7c:c1:50:db:9c:7b:c8:5c:51:cb:60:c0:
5a:d8:63:0f:c0:0c:00:29:4e:18:6e:0e:c7:15:c8:
ce:b4:36:23:cf:54:9d:c8:2c:27:38:7e:54:f3:70:
69:36:33:24:ad:9d:9c:10:43:99:81:83:a0:69:a0:
ce:15:39:04:5a:fa:c1:e1:b4:38:6f:68:df:c4:d2:
7d:d3:7b:18:80:73:32:e7:22:b3:75:96:14:81:b5:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2F:E1:63:49:1B:95:CA:B8:66:7D:1B:DC:95:48:C6:E1:0A:F8:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/485A1164725711EFB673D763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.32.0/20
Signature Algorithm: sha256WithRSAEncryption
cd:44:2c:43:71:fe:db:89:9a:3b:48:2b:ac:7e:f2:68:1a:03:
40:6f:1d:6c:eb:3a:1f:6c:76:df:fc:fe:28:d8:4d:cb:7b:91:
7b:bb:01:95:86:69:9f:46:79:41:e5:6e:88:b5:89:a6:88:87:
6d:f4:94:3d:7d:99:d6:e4:ca:f1:e0:58:5f:a0:44:30:c9:3e:
19:45:6d:3a:c7:ff:6d:0f:f0:af:d6:7e:94:dc:72:a2:a7:c5:
70:71:a9:3a:26:70:0a:68:91:8d:c2:24:bf:15:9a:75:fc:5c:
ef:27:7f:fd:fd:ba:ae:fc:cb:5b:29:2f:41:fc:fd:e2:af:0c:
d0:68:e2:8a:56:c1:a7:02:d4:fc:d3:47:63:0f:14:ec:b3:c8:
4d:ab:46:43:c5:2c:9c:bd:b2:93:9b:e5:93:2d:6a:82:ce:45:
5b:61:7c:22:c1:6d:5f:da:d9:5e:7e:ad:60:ec:83:1b:e6:6b:
79:a4:f3:ee:8e:ec:7a:36:50:72:db:a7:fd:9a:6b:97:1a:17:
aa:a6:6f:7f:6c:63:18:15:d4:2c:ff:77:b3:7b:94:8b:05:28:
bd:4e:e9:1b:42:83:bb:1e:f3:44:21:b4:ea:62:6a:6a:31:32:
8f:6f:2d:d4:f9:ab:c6:e0:3c:bf:43:d8:7a:04:95:c4:c4:31:
4e:fb:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org