Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557F269E22E911EF900317317DDC24C2.roa
File: 557F269E22E911EF900317317DDC24C2.roa (raw, json)
Hash identifier: RQauCFseMZKNV/aHSX/Rlhr3Ul33AqUPw4KXVIe1e40=
Subject key identifier: 2C:1E:4E:17:FE:BE:BD:2E:44:53:04:1D:AB:B4:3C:ED:25:9B:51:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BFE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557F269E22E911EF900317317DDC24C2.roa
Signing time: Wed 05 Jun 2024 03:11:43 +0000
ROA not before: Wed 05 Jun 2024 03:11:38 +0000
ROA not after: Tue 22 Apr 2025 03:11:38 +0000
asID: 28419
IP address blocks: 154.198.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49120 (0xbfe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 03:11:38 2024 GMT
Not After : Apr 22 03:11:38 2025 GMT
Subject: CN=665fd76f-4ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:c3:02:82:4e:34:1b:52:15:bf:1d:f3:cf:
4b:ab:2b:e8:da:3d:79:28:ce:a1:41:df:83:ca:fb:
d1:a6:84:71:53:1f:0f:71:07:6d:a7:25:fe:03:86:
2c:f5:6d:b6:ec:71:3b:26:5b:ce:5f:40:de:c6:12:
52:0c:9e:8a:d6:da:4e:61:aa:78:aa:f5:a4:21:3e:
0e:61:40:dc:81:10:49:24:56:e4:48:00:78:da:03:
34:d4:32:3f:37:05:a2:01:86:c6:99:eb:59:f5:dc:
96:ac:1b:30:fc:69:56:2c:ca:b3:60:be:a4:a8:53:
b7:4c:86:c5:5b:d9:0e:1b:14:36:2e:19:30:f3:7c:
fd:20:9a:fa:4f:80:03:9d:d1:4c:60:6b:24:cb:45:
3a:0e:b8:cc:62:4d:0c:16:62:51:ba:42:45:18:8f:
7a:2b:a9:14:73:89:0c:46:21:e6:2d:67:38:b1:98:
bf:e9:05:8d:e4:d6:99:ee:a2:c6:ac:6d:02:47:87:
4d:91:b5:0b:99:99:8a:8b:45:11:08:ee:8b:e1:6d:
7c:22:a0:ea:ee:a0:d1:99:06:39:ee:e9:3a:81:26:
4e:f1:34:41:8c:67:8e:6a:af:ae:cc:fb:9a:cf:a7:
84:e4:ab:b8:51:82:13:da:16:3d:b2:ae:21:2c:9e:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:4E:17:FE:BE:BD:2E:44:53:04:1D:AB:B4:3C:ED:25:9B:51:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557F269E22E911EF900317317DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.186.0/23
Signature Algorithm: sha256WithRSAEncryption
38:f8:4e:0f:72:7f:6e:27:7d:84:9e:a2:dc:3a:11:e7:8a:cb:
8d:57:a1:d0:9b:a8:1c:ee:a2:06:f5:f7:b2:e4:6f:ab:e7:57:
e7:c2:58:ac:a2:8c:57:74:ce:73:cf:de:2b:89:1d:31:9a:82:
2a:9d:a4:52:f4:2c:6a:94:b1:53:fb:f5:87:20:4d:2a:e8:f5:
0b:c8:c6:f7:07:83:d3:e5:a6:0b:66:9d:65:63:40:50:ec:48:
ad:0c:db:9e:38:2e:55:89:8f:64:47:94:2d:87:ef:6a:14:76:
dc:92:66:10:81:39:a0:f5:97:a6:5b:4a:f9:31:aa:5f:a4:ee:
ba:6c:80:6a:83:44:77:e0:6d:ad:30:58:54:1b:0f:ea:f2:da:
03:96:b9:79:9d:24:6e:c2:eb:c9:60:64:1e:76:0d:21:a9:17:
31:67:7e:7b:8f:73:90:7f:d8:8b:10:12:ab:d8:c1:96:b3:ae:
6b:88:34:56:f3:47:13:9e:78:59:b5:af:e9:ed:92:e4:f6:d0:
6a:85:4f:4f:34:da:35:5c:be:b0:7d:ee:cc:de:05:a2:3e:86:
1d:47:86:bc:e7:08:a4:17:b7:a5:88:89:44:37:09:9c:dd:52:
8a:85:6a:d5:17:23:7a:99:ea:ee:48:73:aa:4a:81:dc:50:57:
2a:fc:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:11 2024 by rpki-client on console-ams.rpki-client.org