Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77BB3EDA032911EFA5ACB026017001B1.roa
File: 77BB3EDA032911EFA5ACB026017001B1.roa (raw, json)
Hash identifier: K+9HGrJROamf6vFZGriMfRDxzoqsuNsLHfcxPPO1YHA=
Subject key identifier: 43:51:0D:7D:F6:7B:C1:0F:F6:2E:A7:E3:77:2B:05:EC:24:F0:BF:76
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1615
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77BB3EDA032911EFA5ACB026017001B1.roa
Signing time: Thu 25 Apr 2024 17:30:11 +0000
ROA not before: Thu 25 Apr 2024 17:30:07 +0000
ROA not after: Sat 25 Apr 2026 17:30:07 +0000
asID: 22168
IP address blocks: 154.16.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5653 (0x1615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 25 17:30:07 2024 GMT
Not After : Apr 25 17:30:07 2026 GMT
Subject: CN=662a9323-2939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:8c:f7:e0:5f:8c:c1:e9:69:8f:08:a9:ca:
7c:77:6a:f1:5a:36:8f:2d:e4:9d:ad:48:5d:50:39:
b6:74:30:e7:6e:ff:b4:95:48:a9:7a:e4:74:d7:00:
e0:c9:0b:4a:5f:65:f1:5c:40:59:f9:87:e0:23:30:
28:39:81:78:9e:e5:0b:36:54:8c:3a:67:07:37:80:
56:83:14:f0:1a:a0:a5:cf:8c:91:52:4a:86:eb:a5:
80:02:8f:ec:85:88:da:0f:17:3b:2e:a3:bd:a3:ef:
c0:eb:b1:c3:dc:63:97:b0:a1:cc:1c:d4:4e:c4:f2:
32:57:f9:85:e0:d1:71:99:71:a7:f3:e1:59:1a:d6:
32:5f:55:69:4c:7e:51:d2:a1:77:57:0c:32:0f:2b:
19:4f:de:21:25:1a:73:9e:e1:25:ed:0e:e7:c2:00:
6d:8d:15:4a:96:7f:9d:fd:2e:b8:cf:06:64:29:1a:
ef:ec:82:37:81:96:5c:2c:45:89:a5:ec:d2:24:63:
0f:73:19:2a:91:d1:8d:0a:e0:a5:58:5f:20:63:50:
65:15:85:24:c6:0a:43:4d:64:30:ce:92:83:16:e2:
0c:e1:ac:1a:69:7f:03:71:ed:6e:76:d4:db:f6:82:
7d:a3:8f:7b:4d:06:a5:34:cc:8a:5f:6e:aa:c2:53:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:0D:7D:F6:7B:C1:0F:F6:2E:A7:E3:77:2B:05:EC:24:F0:BF:76
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77BB3EDA032911EFA5ACB026017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:df:a8:45:df:31:b8:b0:59:fa:d3:70:c8:f5:0c:5b:96:a6:
ab:b1:96:fc:c6:38:b0:ab:33:81:d6:2d:c7:dd:ac:97:ba:4f:
ef:47:fd:2b:cb:9d:0c:e3:39:6d:05:81:7c:98:7c:55:69:fd:
42:81:cf:18:cd:35:0b:17:3d:6b:86:71:d3:95:62:01:96:ed:
d1:b4:fc:93:c4:b2:43:89:ba:95:b6:03:17:fe:e3:35:e5:4d:
63:a6:ca:d5:3e:8c:96:3e:35:72:06:eb:bf:17:28:9f:a9:23:
5e:9e:18:71:b4:24:f3:0a:2e:8a:14:a9:47:7c:93:ae:8c:12:
81:35:5e:11:d2:31:bd:e1:ce:f4:b5:05:f1:c0:89:eb:61:f1:
ae:68:96:38:c0:cc:82:b9:b5:8e:78:6b:d3:a3:c4:cb:9d:0a:
e8:25:78:e8:84:1d:05:c8:10:e5:ce:64:eb:c1:d9:9d:6b:6b:
10:98:83:c3:8b:ef:11:1d:49:59:08:23:2e:31:15:72:d9:40:
0e:ef:eb:26:e9:14:5e:e7:31:f2:20:24:59:a5:43:17:42:cf:
3a:1e:03:5f:a2:31:f9:7c:94:d0:5f:dc:53:07:44:fc:e9:f8:
79:05:77:e2:6d:7b:33:2f:51:f9:b2:33:1a:7a:ed:e8:8b:ef:
02:ab:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:46:36 2024 by rpki-client on console-fra.rpki-client.org