Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A09FAECCCCCD11EEBE99329E775412E6.roa
File: A09FAECCCCCD11EEBE99329E775412E6.roa (raw, json)
Hash identifier: PIt97yvMMrpDARSV6rK+WPcUif7Z+bvoROpt12yMvrI=
Subject key identifier: 95:3D:42:F7:E3:41:F4:31:85:8A:A9:24:65:9E:50:FC:A3:D9:B2:59
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14C1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A09FAECCCCCD11EEBE99329E775412E6.roa
Signing time: Fri 16 Feb 2024 13:16:43 +0000
ROA not before: Fri 16 Feb 2024 13:16:39 +0000
ROA not after: Mon 16 Feb 2026 13:16:39 +0000
asID: 210576
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5313 (0x14c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 16 13:16:39 2024 GMT
Not After : Feb 16 13:16:39 2026 GMT
Subject: CN=65cf603b-2c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:de:7c:64:b5:46:f0:ac:4e:af:5b:7a:8e:
bf:f6:37:cb:cf:f1:9d:1e:9b:36:64:27:98:f7:43:
c9:ac:97:e6:06:bf:1a:46:f9:92:fd:b5:2e:a8:15:
42:ea:02:bb:fa:3d:02:43:92:36:7e:3a:fc:75:56:
c1:fd:f1:11:5a:19:7f:ec:8a:e3:a6:8c:8c:ac:e4:
a1:8b:4a:08:ea:82:14:3f:76:8b:35:09:68:2c:06:
4d:e2:a1:95:84:22:3f:e7:1a:3e:4c:9e:2e:92:36:
27:e6:cb:a3:62:78:c2:7d:00:c8:8a:1f:d3:1a:bb:
a6:3e:8a:95:d0:76:8e:f6:80:b4:09:d3:a6:89:0c:
90:3c:16:14:58:dd:7c:8f:03:7a:5c:42:1e:59:e6:
96:fc:d9:fc:70:01:67:9b:a8:2f:25:3d:96:9b:86:
7c:d2:76:fa:49:5e:f0:d8:54:96:9c:32:f0:c2:07:
54:55:1d:1a:a2:bd:00:bd:1d:c6:de:72:f5:cd:1a:
5e:1e:65:74:a4:08:d8:76:50:17:c4:1b:89:15:66:
74:2a:7c:dd:b4:3b:9e:2e:1c:87:98:50:78:bb:f1:
4d:74:fe:7c:74:17:f2:f7:52:d2:82:fd:7a:cb:bb:
e4:3a:b7:66:a9:4b:b3:cb:16:7a:75:23:dd:67:a3:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3D:42:F7:E3:41:F4:31:85:8A:A9:24:65:9E:50:FC:A3:D9:B2:59
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A09FAECCCCCD11EEBE99329E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ed:1a:94:6d:75:f1:02:13:93:68:61:55:92:5b:bf:39:5d:
eb:00:f6:6b:27:f0:02:9e:e9:ec:c8:88:ed:2a:a3:ed:e1:f6:
c3:84:ae:0c:8b:22:cf:89:d9:2f:5a:12:36:80:eb:0c:9d:52:
e6:1f:91:58:fd:e0:a3:17:ed:1c:2b:1c:4e:1b:78:61:02:cc:
5a:56:9a:da:94:06:99:02:33:5b:7d:1c:3b:26:53:9d:c6:e0:
10:7a:35:18:09:1e:bf:13:ad:bd:94:07:f8:ad:ca:06:d5:ee:
b9:42:92:d4:b9:17:26:13:d8:ae:b1:39:ab:17:e2:df:b4:ff:
0a:d4:a9:51:10:6a:05:c8:73:d5:11:94:80:82:1b:35:26:4f:
b0:45:ee:8c:67:3a:da:1e:fb:96:12:5a:e8:2b:cd:f6:df:bc:
ba:ee:8e:05:89:56:ed:4a:68:02:49:ba:86:c6:bb:7c:24:45:
52:a1:94:5c:67:46:e2:bc:04:50:02:42:8e:08:47:c3:3b:90:
ab:17:71:4e:e8:8f:85:24:da:0f:a1:94:38:8a:3f:c4:49:7e:
7d:36:e9:07:cd:48:80:6c:40:b7:41:5d:93:ec:ea:3e:de:59:
a7:b0:2d:1a:e8:24:13:19:0e:e8:1c:bd:91:a5:78:65:fb:c7:
48:e9:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:46:36 2024 by rpki-client on console-fra.rpki-client.org