Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E72FE12D85A11ECB0B48D81F1222468.roa
File: 2E72FE12D85A11ECB0B48D81F1222468.roa (raw, json)
Hash identifier: yI7K/+ydEICFCyDDeEg33jrDeu2KPeZwJGDos4JxwFU=
Subject key identifier: C4:95:C1:99:30:9F:DB:D4:52:6A:B7:E4:40:EC:EC:74:11:9D:00:B4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0861
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E72FE12D85A11ECB0B48D81F1222468.roa
Signing time: Fri 20 May 2022 16:30:38 +0000
ROA not before: Fri 20 May 2022 16:30:34 +0000
ROA not after: Mon 20 May 2024 16:30:34 +0000
asID: 212238
IP address blocks: 154.16.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 20 16:30:34 2022 GMT
Not After : May 20 16:30:34 2024 GMT
Subject: CN=6287c22e-05f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:cc:4d:07:dc:d1:23:52:ef:2a:d2:db:ac:
30:f1:00:74:3b:02:03:2e:de:f3:bf:3d:6d:22:b0:
be:07:44:c9:02:f9:28:1e:ee:db:00:a6:60:a1:23:
c6:71:f8:e8:8e:82:06:a4:69:4e:92:e6:ff:7c:06:
00:0b:d5:00:5f:38:06:9e:66:eb:2f:3c:f4:8f:c3:
09:b8:9f:c1:c6:18:45:c4:eb:45:f0:10:65:c0:2d:
40:19:38:65:a9:10:2a:2a:04:e3:5d:c2:8b:5d:fe:
76:69:57:b2:9f:a4:0b:49:3b:0b:52:94:6e:c0:70:
9b:94:9c:41:00:83:d1:41:cc:bd:80:73:70:b3:22:
77:a6:b4:6b:84:71:ac:2d:85:4e:e1:4b:a2:d8:cc:
01:64:b3:de:7e:c7:7c:2b:af:62:fb:ee:36:d0:23:
05:74:19:be:1e:b5:c4:84:28:f3:ff:70:00:74:a6:
a9:59:5e:f3:c0:e1:35:d9:c5:a5:33:7a:c6:d2:88:
f0:53:bd:b1:93:6c:af:2e:4b:7b:19:41:33:86:14:
17:66:d8:61:a1:a5:30:80:0e:55:da:f2:5d:de:62:
74:96:7f:27:17:81:f7:74:4d:72:4f:1f:a8:31:dc:
0e:4d:b8:7e:c6:4b:21:a5:eb:c0:f8:8f:5d:ba:77:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:95:C1:99:30:9F:DB:D4:52:6A:B7:E4:40:EC:EC:74:11:9D:00:B4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E72FE12D85A11ECB0B48D81F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4c:a9:4d:7e:4d:ad:1f:a1:75:78:d2:91:b5:f8:b9:b2:02:
96:8c:fb:f5:99:d1:62:ea:00:f9:27:69:44:0e:30:de:3d:fd:
6b:e0:0e:7c:f4:49:63:94:0b:8e:06:89:43:c3:cd:e0:8b:01:
61:02:d0:44:89:60:70:ee:c9:b6:34:a9:ed:71:ed:59:5d:25:
a7:b5:db:16:87:75:75:d6:64:65:b1:53:b6:65:f0:69:03:be:
53:0d:e7:c8:7b:2b:e8:ae:2f:25:26:71:cc:94:bc:14:7b:80:
28:26:13:76:ef:31:93:e5:f4:06:13:74:0a:27:db:a1:ca:fd:
06:8e:26:26:ba:e2:69:1b:8a:6a:80:11:66:f1:b4:7e:0a:f9:
29:e0:2d:15:cf:66:22:00:e8:f5:7a:b5:8e:b9:cb:61:83:5c:
12:15:b9:7a:d2:f0:4d:65:19:f5:a5:9d:ab:24:5e:52:c8:99:
78:86:12:42:de:b3:5d:9f:21:51:af:96:15:e5:be:55:dc:5c:
2a:91:1d:50:19:51:fd:7d:6c:14:22:44:88:22:a8:eb:f1:90:
ba:7c:c2:f2:a0:d6:85:14:a6:8f:7e:67:ad:5a:60:89:74:5b:
07:4e:f5:8a:04:1f:d0:9a:43:b2:ac:5f:34:c9:93:04:ae:bd:
c2:78:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:08:59 2024 by rpki-client on console-ams.rpki-client.org