Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/856088C4FD7F11EEB6AD9EFC007001B1.roa
File: 856088C4FD7F11EEB6AD9EFC007001B1.roa (raw, json)
Hash identifier: MbRHFV/690u3hltJBOWazU/ngD5M2VscY6Ey2PR7U0E=
Subject key identifier: 73:BB:F3:57:73:73:DD:23:5D:6A:57:12:5C:D1:C7:C8:94:63:E2:31
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 15E4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/856088C4FD7F11EEB6AD9EFC007001B1.roa
Signing time: Thu 18 Apr 2024 12:31:04 +0000
ROA not before: Thu 18 Apr 2024 12:30:59 +0000
ROA not after: Sat 18 Apr 2026 12:30:59 +0000
asID: 397373
IP address blocks: 154.16.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5604 (0x15e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 18 12:30:59 2024 GMT
Not After : Apr 18 12:30:59 2026 GMT
Subject: CN=66211288-8308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:f6:d6:bd:68:bf:d4:1c:73:dd:6e:92:b0:
92:e1:d4:4b:af:03:36:62:db:74:3d:16:7f:dd:41:
e6:43:1d:35:f2:f1:bd:f6:fa:b4:a2:25:1e:75:4d:
4c:72:7f:5c:ac:8a:f9:e2:25:33:16:78:b9:20:a5:
b1:03:47:8a:9a:c2:02:45:54:52:cb:bd:0e:2d:b9:
2f:6c:9a:19:8d:35:cd:6d:5b:1c:b2:6a:02:77:db:
73:bf:49:be:65:54:20:30:ed:3b:a5:09:08:4f:fe:
df:db:c5:54:85:30:d1:2e:df:f1:6c:54:13:6c:fa:
16:0c:c1:52:7b:8c:79:9e:ce:07:64:a1:bd:59:9c:
8a:8c:f1:16:4f:4a:af:04:f4:44:7e:0b:7b:58:78:
05:1f:e5:4a:9d:3a:99:70:e0:0d:1b:9b:26:a0:ff:
07:27:85:8a:54:93:eb:db:7b:26:95:44:23:47:cb:
ce:fe:51:17:a4:02:5b:f1:01:2d:ba:37:24:84:f7:
fe:2b:6c:7d:bf:ae:55:a3:aa:51:73:b0:d2:0a:d0:
a2:c3:b5:b4:a5:9b:38:2f:d9:12:ce:83:47:81:72:
39:d3:cd:bf:ca:30:cc:f8:5b:1f:0c:5d:da:78:82:
ab:9f:2e:8d:1e:37:c2:65:01:75:db:3c:81:37:95:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BB:F3:57:73:73:DD:23:5D:6A:57:12:5C:D1:C7:C8:94:63:E2:31
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/856088C4FD7F11EEB6AD9EFC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.216.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c8:5f:dc:a8:34:c2:9d:47:46:3b:76:a7:f9:91:fa:a4:28:
3e:48:83:fa:64:bb:20:3c:61:24:d8:50:49:55:eb:87:c1:f5:
8f:58:9a:3c:29:01:b9:08:72:fd:3d:13:ae:42:c4:9c:ad:f5:
7a:3b:21:97:d9:8b:a8:df:a6:18:f2:5c:ed:dd:bb:de:a4:7d:
06:ff:e2:ae:2e:90:ac:ae:3d:0e:19:f6:e5:92:c0:34:74:bf:
4c:96:b9:35:d7:da:3d:6f:b4:93:2e:53:f5:d5:c7:32:26:50:
3d:af:9d:81:43:b7:90:ca:7f:d4:3b:91:ed:48:11:1c:8f:0c:
66:31:0f:40:f9:d9:8e:4d:7b:91:49:cb:4b:2a:49:a3:8e:8b:
24:ba:a0:8b:17:50:99:1b:a7:fa:48:38:d8:ed:6b:ff:5f:0d:
b9:d2:57:f3:7c:63:06:87:27:93:30:13:8e:8c:cf:43:3f:e3:
9a:2b:ec:ff:5e:48:7b:11:bc:37:37:cc:35:70:45:88:53:a1:
ef:8c:e6:21:4e:33:97:6d:5a:c7:25:b4:fa:62:d6:d3:b1:c9:
55:4c:c6:cd:f8:d7:20:78:00:0f:08:e6:48:51:b9:1a:04:7b:
ae:82:7f:d0:3e:41:b2:26:f0:d0:31:0d:9b:44:9b:73:ca:6d:
55:34:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:13:42 2024 by rpki-client on console-fra.rpki-client.org