Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/569324AEB8FA11ED8298777CF1222468.roa
File: 569324AEB8FA11ED8298777CF1222468.roa (raw, json)
Hash identifier: HXr/m9yPoPYvE0bHZGvw+52zjG1TfwNix9N/CZzn+58=
Subject key identifier: D9:CA:33:C5:B7:56:1C:B9:3B:9D:48:A5:EE:32:6C:4F:4E:99:94:16
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CC9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/569324AEB8FA11ED8298777CF1222468.roa
Signing time: Thu 02 Mar 2023 13:01:25 +0000
ROA not before: Thu 02 Mar 2023 13:01:20 +0000
ROA not after: Sat 01 Mar 2025 13:01:20 +0000
asID: 61317
IP address blocks: 154.16.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 13:01:20 2023 GMT
Not After : Mar 1 13:01:20 2025 GMT
Subject: CN=64009e25-8a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:ee:41:ce:68:42:12:9f:cb:b1:c1:f3:b4:
d8:fd:ff:7a:41:b4:b0:b0:45:1f:85:ec:9b:19:a2:
63:6d:5a:cf:08:c6:83:f1:ff:0f:1d:18:4a:8c:b2:
83:7c:a4:e2:bc:ac:ab:9a:c2:b6:d7:a9:2b:f7:cd:
e0:59:0a:be:6c:f9:5b:e8:1d:01:62:c2:8f:1c:c9:
8c:33:ec:2b:be:fa:13:86:98:6c:b1:26:cc:2c:00:
16:65:5e:fd:71:d2:7e:5a:1f:59:06:8a:c9:3f:89:
6e:ac:5d:a6:84:9c:9e:b9:86:66:e0:32:fa:96:e4:
2c:c0:d8:90:d5:5f:d5:aa:de:3f:b8:f0:9b:dc:0b:
6e:d5:1e:5f:71:d4:ee:c6:12:f0:37:aa:a0:7c:f9:
34:45:74:19:f7:dc:b2:8d:8b:88:2e:b5:fd:ab:37:
01:03:78:79:81:49:2a:3b:57:97:90:c4:33:6e:9a:
2d:d3:07:4a:85:a5:8a:21:f0:f4:74:5e:e5:60:f4:
16:6a:05:d6:9f:fe:5d:a8:42:38:4b:c4:50:c5:50:
8f:b5:01:50:aa:a0:75:b6:33:d6:03:11:28:43:7d:
17:98:b3:f9:c1:77:44:f2:6a:49:5d:32:0d:5f:67:
10:cd:f6:cb:a9:fc:cb:ee:ea:30:b1:bb:e6:52:a7:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CA:33:C5:B7:56:1C:B9:3B:9D:48:A5:EE:32:6C:4F:4E:99:94:16
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/569324AEB8FA11ED8298777CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.251.0/24
Signature Algorithm: sha256WithRSAEncryption
06:30:03:e2:8f:c7:7b:9e:2a:10:bc:a3:78:e7:51:62:9f:ea:
36:7e:56:a3:bd:1e:6b:fd:e0:e8:58:03:fd:eb:39:88:4a:f7:
d4:89:9d:ae:73:3b:50:b3:28:d9:27:88:51:fc:ec:fa:c0:84:
4e:c7:6a:d8:9f:53:1d:1c:68:8d:57:46:5e:97:2a:ff:ad:82:
c8:b7:9a:e9:af:27:07:3a:49:35:5a:1a:fe:f0:16:e1:cf:a8:
8e:91:33:7b:02:fe:e4:ab:06:e2:42:68:15:f0:95:9d:0c:92:
0a:9b:ba:39:d3:b1:85:04:23:81:4a:25:38:dc:b9:0e:78:7f:
21:34:e2:7d:70:32:06:3f:d6:a8:a1:7e:5f:37:8c:8f:25:99:
2a:96:15:69:e9:62:cb:4c:ee:9d:39:47:83:28:d6:4c:2d:dc:
b6:db:6d:1d:f4:6c:89:63:3e:6d:70:3b:05:23:74:04:7d:65:
d2:a8:00:d1:8e:76:27:86:73:2f:52:ee:eb:f3:a5:89:a0:2a:
75:81:de:41:44:39:53:c1:d8:66:e5:a0:17:c0:bc:82:2f:00:
25:1a:1b:b5:ef:b1:29:86:11:0d:0c:81:5a:98:8a:1e:f9:0a:
c4:8b:6f:44:ac:ff:d6:80:01:71:e1:d0:40:f4:5b:5f:b1:9c:
53:e8:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:52:48 2024 by rpki-client on console-ams.rpki-client.org