Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B17DC62EDCE11EE95CA1B60775412E6.roa
File: 1B17DC62EDCE11EE95CA1B60775412E6.roa (raw, json)
Hash identifier: u+LKTPHrKrnzqATceUxgV0qR3Xt23SM8CoaJeZmp/d4=
Subject key identifier: C2:45:53:72:46:D6:19:75:D1:09:9E:28:72:A0:72:F6:EA:8E:F9:96
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1581
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B17DC62EDCE11EE95CA1B60775412E6.roa
Signing time: Fri 29 Mar 2024 13:13:17 +0000
ROA not before: Fri 29 Mar 2024 13:13:14 +0000
ROA not after: Sat 28 Mar 2026 13:13:14 +0000
asID: 29802
IP address blocks: 154.16.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 May 2024 06:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5505 (0x1581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 29 13:13:14 2024 GMT
Not After : Mar 28 13:13:14 2026 GMT
Subject: CN=6606be6d-2b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:2d:a2:e8:6c:dc:ca:55:32:58:3f:24:c1:
d3:db:07:9a:ed:c2:c8:51:29:d5:b8:bb:bd:ef:58:
a2:c4:de:ee:08:55:d1:6c:43:00:70:0c:25:83:5e:
d2:71:ed:76:a7:f1:f1:06:20:2c:04:99:8b:57:0a:
bd:fe:f5:33:59:3a:c9:1c:ad:0a:40:cf:c3:56:fb:
2c:a3:b7:7d:bd:2e:9a:e6:d9:1a:67:f2:91:2a:fb:
ed:23:18:40:7a:2b:9c:85:b5:b3:fb:c2:0c:aa:d8:
ec:9c:53:14:b2:34:9b:ca:c2:5e:74:70:d7:4b:7b:
35:fa:e4:4b:3c:9c:b1:22:4e:9f:31:bd:92:e2:f9:
67:05:46:64:73:d8:73:2d:d7:27:c2:ba:4d:7a:5c:
d6:21:ee:48:21:49:43:1f:13:73:a4:9e:f2:73:25:
72:d7:21:92:67:03:31:08:b6:67:3d:3e:4b:cc:ff:
d8:84:16:94:be:48:77:80:f5:f7:ae:0c:23:ce:5c:
9a:9e:c8:49:2f:8b:02:b5:1f:15:3d:e8:ae:d9:0d:
97:8b:2d:dc:f6:ec:94:d8:79:42:9d:ed:e1:96:97:
67:9b:8d:88:b8:1e:d2:ad:3c:37:a8:3e:1a:f4:63:
fe:d3:f5:b5:44:d5:db:f5:3e:eb:55:ed:bb:df:1f:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:45:53:72:46:D6:19:75:D1:09:9E:28:72:A0:72:F6:EA:8E:F9:96
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B17DC62EDCE11EE95CA1B60775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.124.0/24
Signature Algorithm: sha256WithRSAEncryption
68:15:c8:c5:c5:e0:90:3b:8d:1b:84:76:e0:8d:23:fe:6b:fa:
5e:14:56:08:fe:cd:41:c8:e2:28:03:84:36:99:f8:6a:c9:44:
6e:e3:4e:12:37:a2:21:ad:19:a3:f6:6a:c5:a1:31:1c:5f:42:
e4:96:87:84:dd:cc:22:b6:17:24:84:50:d7:41:d7:45:46:3a:
e5:4c:2b:b7:97:fb:42:26:40:c2:a2:ea:c3:4e:1d:38:ee:10:
d0:fc:32:62:d1:05:5e:f5:3c:5e:b9:79:1d:a9:d1:76:11:6a:
67:70:26:36:ab:54:ba:ba:71:e7:ac:09:55:77:31:2b:1d:2d:
27:5b:eb:97:73:09:d6:34:f5:aa:cf:d9:c4:34:62:96:d7:65:
a6:cb:8d:32:04:7d:3b:00:58:35:b4:c7:ca:52:63:a1:26:f1:
af:03:59:7d:c0:44:f0:a8:e5:26:6e:0e:32:dd:47:8e:3e:48:
a2:14:10:3e:85:c9:c2:34:7e:49:76:9c:49:3c:3f:e6:ac:0c:
37:b0:62:f3:b3:a6:01:45:72:31:ae:3e:d9:1f:8d:79:cf:f8:
82:89:32:bc:0b:2d:b3:5a:51:b6:89:36:e7:1e:00:9a:ad:a3:
5a:58:32:3a:14:e4:b6:e3:39:34:e5:13:84:d6:e7:57:5e:74:
dc:76:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:15:19 2024 by rpki-client on console-fra.rpki-client.org