Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A02788952E11EF87F48945762E951A.roa
File: F5A02788952E11EF87F48945762E951A.roa (raw, json)
Hash identifier: pjnCjlif9tejJKs8SdTXoMmwNH1mfwWSygPR0mnmFQI=
Subject key identifier: 0F:81:5C:EF:0E:BE:7D:02:EC:42:02:55:19:DD:68:11:32:E2:3E:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A02788952E11EF87F48945762E951A.roa
Signing time: Mon 28 Oct 2024 13:17:19 +0000
ROA not before: Mon 28 Oct 2024 13:17:16 +0000
ROA not after: Sun 01 Dec 2024 13:17:16 +0000
asID: 48031
IP address blocks: 154.222.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66263 (0x102d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:17:16 2024 GMT
Not After : Dec 1 13:17:16 2024 GMT
Subject: CN=671f8edf-db7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:4e:93:6c:1a:36:7d:98:a6:30:fd:62:12:
32:26:29:7f:73:01:1d:3d:c5:26:0b:e6:05:f4:e9:
ae:ae:97:b8:96:e6:d2:49:e4:c4:9b:6c:7a:0d:5f:
c3:82:59:70:ef:2b:eb:fe:9e:89:18:86:e3:cf:0a:
02:ae:e1:d5:4b:1c:7b:ec:ba:55:3f:0b:15:af:24:
52:1c:4e:06:61:f4:62:30:27:c2:85:c2:32:10:4c:
f3:f2:32:6f:e3:56:f4:d6:69:93:0d:91:a8:90:96:
ea:b3:69:00:c9:13:d9:09:b1:93:a7:ed:31:24:d5:
51:7e:b3:5a:52:88:10:4e:78:fe:1a:69:36:6d:96:
d5:c3:3a:c2:44:cb:c2:83:c6:d3:e7:08:ea:f2:6a:
9e:a8:72:a5:a9:4a:db:04:ae:19:9e:d9:26:de:ec:
6e:a2:5c:41:7a:bc:03:e1:f8:0a:19:bb:bd:5f:26:
76:80:9e:6a:e7:1b:6b:d0:19:3d:52:0c:c4:08:90:
79:04:e0:51:69:c8:f3:58:93:25:b5:b7:14:61:7f:
30:71:bf:9b:48:a6:04:fc:07:93:a5:b3:fe:02:df:
86:eb:16:07:4e:41:1a:e2:b6:4f:bc:a0:3c:5d:41:
59:c4:df:d3:1a:53:10:f8:03:5f:5b:b0:85:68:26:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:81:5C:EF:0E:BE:7D:02:EC:42:02:55:19:DD:68:11:32:E2:3E:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A02788952E11EF87F48945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.220.0/23
Signature Algorithm: sha256WithRSAEncryption
80:a5:d6:f9:29:41:75:21:6f:16:33:a6:73:87:16:00:a4:38:
00:c4:55:81:6a:bd:51:d2:67:2f:38:98:2f:f3:d2:a6:33:b8:
85:34:54:d0:fc:dd:97:63:8a:e4:cb:a6:a6:ad:5e:50:0a:22:
3b:ec:40:b9:4c:a1:4c:13:af:8c:cc:30:37:95:35:c4:34:6c:
8f:fb:fa:e5:3c:87:e6:6a:89:45:40:73:49:05:70:a8:15:6a:
0c:6c:32:bb:03:43:bb:b6:3a:bf:10:46:52:4e:2e:73:5a:4d:
aa:25:b1:3a:b0:ce:5d:aa:56:bd:6a:e5:96:34:91:99:5f:61:
d8:63:e8:68:f4:de:5b:e7:ed:55:76:1a:f2:18:47:79:3d:74:
39:e0:dc:2e:9c:60:f8:4d:64:6c:aa:ec:89:cd:39:46:16:7b:
b4:27:31:bf:5a:c9:b3:2f:5f:e8:ef:58:86:3c:62:cd:cd:ff:
33:e1:ab:81:22:73:f9:ac:b7:47:15:3d:8c:93:74:a3:90:06:
8d:91:5e:8c:0c:8f:25:e3:ae:58:0a:b2:26:55:8d:53:ef:66:
98:c5:23:cf:cb:9b:d0:b1:3b:64:5e:c9:63:e1:0c:30:e4:d6:
b1:6b:bd:87:16:86:7d:bd:aa:40:09:35:2c:eb:4f:b9:a3:94:
69:30:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:35 2024 by rpki-client on console-ams.rpki-client.org