Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD954426CBF11EEB4E1C46B4AD9E6FC.roa
File: 5AD954426CBF11EEB4E1C46B4AD9E6FC.roa (raw, json)
Hash identifier: tvAzcxLRpmPnEIzNVE0qbDmdm5RRjNfyiD5Is2EdEcw=
Subject key identifier: 9F:4F:DD:66:ED:7C:FF:AA:F1:EF:BF:F9:83:C3:B5:DE:D1:79:C1:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 463E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD954426CBF11EEB4E1C46B4AD9E6FC.roa
Signing time: Tue 17 Oct 2023 07:32:41 +0000
ROA not before: Tue 17 Oct 2023 07:32:38 +0000
ROA not after: Thu 30 Oct 2025 07:32:38 +0000
asID: 55020
IP address blocks: 154.211.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17982 (0x463e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 07:32:38 2023 GMT
Not After : Oct 30 07:32:38 2025 GMT
Subject: CN=652e3899-793a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:01:52:c5:ee:62:90:62:6c:13:6e:32:a2:
fd:b0:d6:00:f6:43:14:d5:73:c2:82:49:c6:6e:72:
dc:ea:9d:cf:9e:54:e5:d7:fc:da:30:ca:0a:db:35:
0d:1f:9b:ee:3d:83:8f:06:70:99:b5:ac:df:f1:eb:
35:2e:26:55:83:97:ad:bb:51:04:29:16:88:db:58:
c1:21:8b:c2:d4:ba:3a:47:61:18:ba:c3:57:1e:59:
36:d9:8c:32:f2:43:60:46:7e:01:82:03:54:46:e9:
ed:3d:6e:8a:a8:11:48:2d:80:2d:7e:e7:11:de:4b:
2a:8a:f2:bd:4f:9e:d4:eb:5f:09:90:52:ac:83:18:
3a:be:1b:49:7e:8c:79:5b:b6:e9:52:9f:a2:86:30:
88:e7:78:29:5c:47:a6:ab:a8:fc:bf:c8:17:89:37:
5a:95:d0:62:c7:7f:56:0b:ee:fb:5c:f2:49:40:09:
88:33:ce:13:43:18:5e:4f:95:e6:6e:1b:ab:d6:52:
62:15:cc:9f:13:36:e3:3e:b0:42:c7:e0:4a:9f:21:
8e:ee:62:80:6c:aa:db:9f:1d:51:ee:8d:88:8b:d6:
de:1f:c8:e5:bf:ad:c9:c3:51:b1:ab:fe:3c:99:10:
c7:d3:7e:46:7f:83:ff:c9:fb:b2:84:2b:12:75:f5:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:DD:66:ED:7C:FF:AA:F1:EF:BF:F9:83:C3:B5:DE:D1:79:C1:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD954426CBF11EEB4E1C46B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:84:43:86:1a:8d:86:12:3b:6b:5e:67:3c:40:73:58:f5:09:
18:03:ea:64:0c:bb:f7:de:00:54:87:0d:31:15:71:ce:18:c5:
11:0a:89:ce:7e:8c:02:e6:8c:53:91:e0:6b:a5:22:b3:7d:e5:
a5:5c:e1:a1:9d:8c:5a:be:d5:a3:5e:d5:b0:f1:5f:0c:83:f3:
f9:a0:7e:52:bb:78:f3:0f:88:f1:75:cc:4a:5c:0f:93:e6:44:
e2:87:62:3b:bc:f0:49:a8:1b:35:ee:ec:91:f2:75:a6:c7:2b:
a4:9e:a7:fa:70:ec:fa:f5:18:4a:c7:79:7c:91:ec:a6:ef:09:
1b:aa:a1:15:f6:bd:e7:54:8e:f8:a0:98:3f:88:5f:ea:11:37:
29:ef:67:98:9d:b6:5b:20:69:bd:50:8c:ca:a9:43:79:c4:ff:
a1:51:71:b1:6a:50:f7:e0:5b:1a:4a:60:87:ac:d9:f4:7d:06:
15:bf:37:21:7b:3a:5b:8f:b7:3b:7e:9c:4f:01:ce:f2:28:25:
25:a4:20:78:80:d0:e2:8b:5f:40:1f:70:ca:62:74:72:ee:dc:
47:f8:e6:90:16:2e:c0:0c:a1:5c:15:9c:b2:66:28:a8:0a:ed:
85:63:97:26:28:58:d0:26:88:a3:3e:4f:2e:30:72:af:89:a2:
91:33:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org