Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA3AEEC0F9A511EDAF5C313E4AD9E6FC.roa
File: AA3AEEC0F9A511EDAF5C313E4AD9E6FC.roa (raw, json)
Hash identifier: 2t5FLtkCpJuGMe9idXN1vcag/Hxr5s1pam4otHb1Xww=
Subject key identifier: 75:45:2B:06:A3:DA:51:39:CD:D1:EC:DB:3C:74:BD:10:12:96:E2:F8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DD3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA3AEEC0F9A511EDAF5C313E4AD9E6FC.roa
Signing time: Tue 23 May 2023 20:09:04 +0000
ROA not before: Tue 23 May 2023 20:09:00 +0000
ROA not after: Sat 24 May 2025 20:09:00 +0000
asID: 46337
IP address blocks: 154.16.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3539 (0xdd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 23 20:09:00 2023 GMT
Not After : May 24 20:09:00 2025 GMT
Subject: CN=646d1d60-39ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:fa:24:14:69:8c:2f:3c:18:c6:f7:fe:4c:
a5:dd:a7:36:9d:ef:e3:99:44:5c:96:3b:62:7f:e3:
45:e8:eb:b5:79:50:a5:bb:8a:36:5b:36:d1:e7:e8:
57:99:f0:4a:85:87:e5:92:22:85:71:4f:f3:a0:0b:
62:98:bc:29:83:44:08:4e:d1:5a:e5:ec:bc:11:09:
6b:54:83:4f:02:2e:a4:28:ca:31:4b:0f:d9:87:66:
8f:d9:4f:de:32:a1:4a:3b:1d:7f:c5:9d:26:c4:55:
9d:c7:72:dc:f1:a4:ab:02:5c:70:62:31:ee:ca:c6:
85:20:78:16:c1:5a:af:28:42:0f:46:37:c8:56:51:
37:00:07:7b:aa:93:39:ac:26:46:50:27:58:76:3e:
a3:73:b1:87:c1:96:39:c4:dd:f0:dc:b5:44:18:e8:
3b:82:f7:da:b9:31:bc:e6:be:71:d3:7d:90:92:f5:
8f:af:96:e1:eb:20:1c:45:a9:12:a4:4d:99:39:99:
30:eb:de:46:f0:cf:44:9a:90:e7:b7:15:45:66:92:
6a:81:20:f8:db:8d:38:3a:b8:b8:75:f4:38:b5:64:
34:c9:f8:7b:bd:47:80:d4:32:79:0c:18:20:e9:1c:
08:07:ec:95:3a:ab:41:54:a6:74:42:a7:b6:fb:e0:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:45:2B:06:A3:DA:51:39:CD:D1:EC:DB:3C:74:BD:10:12:96:E2:F8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA3AEEC0F9A511EDAF5C313E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.115.0/24
Signature Algorithm: sha256WithRSAEncryption
41:06:81:87:e0:b7:6d:2b:af:90:64:12:a1:92:45:ff:f5:9c:
1e:f6:22:aa:3e:cd:a8:fa:53:25:ec:94:1f:4b:96:14:0e:91:
e2:92:fd:b2:bb:19:27:80:d5:fb:0a:71:27:31:f3:34:ae:ea:
e3:cc:9f:e1:d2:78:b0:42:63:4d:d4:cf:f2:34:37:5e:22:c3:
94:25:a9:a6:08:a3:9c:cf:15:c2:cd:9f:f3:f2:ac:d7:e4:ec:
ca:89:4c:d2:96:d8:95:e7:7f:d4:54:d2:1a:ed:16:f2:5f:09:
62:51:87:6b:e5:3d:8f:ac:43:85:e7:38:fc:d4:93:d9:06:e5:
bd:44:63:e9:aa:50:8e:80:7f:18:3b:c5:79:42:29:c2:a4:0b:
88:93:c5:4c:83:2f:73:a2:62:ef:e9:b3:f3:2b:a5:b4:dd:6c:
7b:08:1e:8d:09:e6:b1:76:c2:5d:ee:45:35:50:8f:80:a3:51:
91:db:0b:7e:35:08:e4:f6:ee:18:8f:e2:fb:f0:2a:5e:13:d6:
65:32:f5:b1:9e:17:98:4b:fe:06:b3:f9:f4:65:b5:63:45:3b:
df:9c:6f:c0:4e:15:11:3c:d6:c7:d2:d0:cb:82:e7:73:00:dd:
5e:6f:29:43:ee:07:da:49:91:78:b9:54:bc:39:b5:18:44:d4:
14:69:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:50:06 2024 by rpki-client on console-ams.rpki-client.org