Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE05EFB4F00811EEBC51E551775412E6.roa
File: FE05EFB4F00811EEBC51E551775412E6.roa (raw, json)
Hash identifier: l3fX8Z21OeSxOiFYgQLYP/ejJzBX72dRNN9eL/YaTUs=
Subject key identifier: 57:A5:FD:20:72:31:DF:2D:D2:7A:47:55:9D:58:5F:AD:06:09:92:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A82A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE05EFB4F00811EEBC51E551775412E6.roa
Signing time: Mon 01 Apr 2024 09:19:51 +0000
ROA not before: Mon 01 Apr 2024 09:19:47 +0000
ROA not after: Sat 11 May 2024 09:19:47 +0000
asID: 138915
IP address blocks: 154.205.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43050 (0xa82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:19:47 2024 GMT
Not After : May 11 09:19:47 2024 GMT
Subject: CN=660a7c37-23f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:e0:40:c7:db:c6:6d:ca:d4:06:0b:24:ea:
4b:d4:7b:9e:9f:f8:b6:a0:18:c6:4e:35:37:51:31:
ec:f3:c0:a5:b4:90:dd:a9:2d:d6:30:e9:12:98:72:
0a:53:16:0e:7b:e9:db:38:0c:a0:44:d8:17:62:39:
b7:74:5b:30:c2:95:03:d3:c2:35:28:67:4d:8b:53:
8f:52:f8:8a:4f:18:de:a0:ab:b0:e2:c6:f8:c4:11:
b0:74:d4:eb:7a:73:ba:28:d2:e5:33:66:5a:8e:f1:
6a:45:da:e6:ab:e5:1e:01:98:f6:3d:d8:03:bd:58:
b8:3c:09:24:e0:cd:1b:6e:cb:7e:dd:fd:2d:b0:10:
89:fb:b8:8e:95:f3:17:bb:60:d7:ba:8b:58:9a:21:
c4:c0:82:f1:73:6b:ba:25:c3:2d:0d:c4:9b:64:ad:
de:2a:4b:eb:ce:2b:50:ea:4d:61:a5:02:17:51:17:
cf:c6:59:30:39:da:6e:b3:cd:36:57:19:fc:6c:96:
59:2f:5c:5c:c6:3d:8d:60:85:ad:e1:a5:57:34:b4:
01:fd:e7:9c:19:45:fd:be:3c:a2:c9:f5:66:4b:b5:
5e:cd:91:b8:7d:d7:03:3a:42:d1:ea:bf:1c:e7:62:
95:d9:47:45:d2:db:0c:68:99:25:61:57:8f:c8:7e:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:FD:20:72:31:DF:2D:D2:7A:47:55:9D:58:5F:AD:06:09:92:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE05EFB4F00811EEBC51E551775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.148.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1b:91:19:50:e9:b9:4e:f2:44:4b:83:f4:3a:ea:06:5a:69:
a1:7f:04:15:87:3e:54:25:ac:3f:4a:3c:21:b5:5c:b0:81:76:
1f:b4:b5:91:ae:87:37:93:d8:7c:f7:ef:a2:ae:9a:7f:44:8f:
aa:95:74:e1:7d:a5:82:48:07:3c:1d:65:3e:28:ac:bd:2b:29:
fe:c7:f0:8b:8f:fa:8f:ec:9e:a7:d8:df:74:d4:74:38:be:eb:
ca:82:fb:93:b1:27:c6:05:9d:f5:29:be:fb:8c:50:f9:f3:09:
51:f4:22:e6:f6:93:32:ab:bb:ff:9c:1e:a4:20:59:96:75:d8:
e2:d1:9a:0e:ff:5a:de:87:44:62:16:9e:43:a7:b8:01:0d:bf:
48:a7:e9:c5:0d:1a:c0:8f:21:d0:f9:99:16:67:56:db:2d:9d:
e6:d1:21:3c:b6:a9:2e:a5:a6:bd:bd:e7:1d:d2:bf:10:98:a5:
e0:d7:75:6b:e3:7f:bc:17:67:0f:e5:91:64:16:c2:48:c4:bf:
b7:30:83:64:a6:2a:25:57:5e:89:08:37:ee:8a:5e:b8:31:ff:
00:5a:99:0b:53:93:16:6d:a4:b0:63:e2:8b:9d:9e:32:ff:90:
ff:30:e3:f7:ec:5e:68:93:dc:79:21:c1:ab:cb:d4:cb:1b:92:
c0:f5:d5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org