Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E881DCC953011EFA964674F762E951A.roa
File: 5E881DCC953011EFA964674F762E951A.roa (raw, json)
Hash identifier: hCsC3urOiIzUNk0l5NugLBZ1IBAsSgluiUJuDnasuno=
Subject key identifier: 87:3F:BB:76:23:E2:2F:F9:5F:5A:82:92:E0:E6:E1:08:D8:2D:02:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E881DCC953011EFA964674F762E951A.roa
Signing time: Mon 28 Oct 2024 13:27:25 +0000
ROA not before: Mon 28 Oct 2024 13:27:21 +0000
ROA not after: Mon 02 Dec 2024 13:27:21 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66281 (0x102e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:27:21 2024 GMT
Not After : Dec 2 13:27:21 2024 GMT
Subject: CN=671f913d-9e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:2a:02:2b:eb:4a:62:78:5f:44:bc:d9:11:
63:1b:b0:97:f0:96:1b:f5:f2:93:46:74:b5:0f:60:
fb:7e:72:32:2c:1d:ba:74:fb:38:4a:b8:28:8a:9e:
a9:25:20:12:01:22:c0:55:63:25:95:a8:da:f7:f9:
b9:c2:2c:f8:e2:8e:9c:26:15:0e:c7:59:f8:20:cf:
a0:49:f9:a8:13:34:41:07:ba:e3:d5:e3:02:48:15:
f2:ed:1f:b3:57:76:70:6e:3a:0b:6d:b4:43:45:9c:
05:7e:5e:7a:b9:09:bd:f8:74:91:d8:69:56:d7:1d:
9f:f8:42:3a:dd:4d:60:04:68:63:f0:6f:a8:a6:ca:
db:c1:5c:43:ac:3d:fc:09:c2:85:9c:a0:7e:34:20:
61:b8:2f:c4:a9:05:f4:34:51:81:9b:ab:48:e5:85:
65:1c:cd:26:bc:90:4e:68:49:02:58:4d:89:4b:fc:
42:8d:38:19:79:df:40:d7:83:86:c0:a2:06:d0:40:
b1:a7:57:1d:de:55:b3:d6:59:78:de:44:13:35:c6:
a0:fe:7a:40:1e:e9:cb:c3:da:99:5d:31:39:54:90:
d8:63:82:9a:f6:c0:e2:6f:9e:d7:bd:08:ea:cc:19:
29:aa:00:b4:0e:19:6a:3d:37:f8:59:ab:3c:42:8c:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3F:BB:76:23:E2:2F:F9:5F:5A:82:92:E0:E6:E1:08:D8:2D:02:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E881DCC953011EFA964674F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
48:db:2f:b7:dd:a2:0f:a4:2f:88:5b:94:94:0a:80:a3:c6:fb:
67:d6:b8:34:56:b4:c2:16:eb:12:4e:2b:3f:b6:e2:e0:25:3c:
7c:57:8e:87:cc:23:b6:bf:ef:a3:16:4a:8d:d7:0f:1b:e6:ae:
37:5e:b9:04:6d:92:09:78:30:3c:e8:65:d7:ab:a0:cb:a6:8b:
86:c3:2b:40:2b:e7:fa:f1:ca:27:c7:5b:bf:d1:ef:9f:9d:7f:
ca:76:ff:91:62:6c:3b:d7:58:57:ba:43:ca:56:23:f8:73:11:
8a:ee:d5:d2:bb:24:91:cf:8d:8d:32:46:55:81:5c:10:38:3e:
b4:2c:f0:c5:d7:63:c6:ec:71:78:74:15:4a:2c:bb:33:74:76:
68:2b:a8:0f:86:2a:66:a4:4e:86:a2:e2:17:05:a0:1b:52:32:
7c:89:34:e9:38:b9:8a:c5:67:ad:1c:ec:9e:7d:0a:36:d7:58:
04:9b:2d:ab:8e:fb:4a:65:a2:53:76:a9:29:1e:c9:23:b6:4a:
e2:f2:56:07:a0:28:a7:6c:63:9c:f3:d9:0f:05:da:33:68:f9:
90:5e:a5:85:97:d2:d2:34:d2:cf:5d:42:15:38:9f:be:66:bd:
80:c1:67:dc:b5:78:71:49:b8:1d:6a:02:9b:23:5b:73:01:4f:
de:8a:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org