Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B2513F9E033F11EEB34451774AD9E6FC.roa
File: B2513F9E033F11EEB34451774AD9E6FC.roa (raw, json)
Hash identifier: IUbHHx3D3i9plGi22tcBN6muzTwdP1JbMmEhRY4IWwM=
Subject key identifier: 5E:1D:29:7E:9A:E3:45:D2:38:D6:74:83:F4:C6:D7:01:E6:0D:EA:0F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EBC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B2513F9E033F11EEB34451774AD9E6FC.roa
Signing time: Mon 05 Jun 2023 01:24:20 +0000
ROA not before: Mon 05 Jun 2023 01:24:17 +0000
ROA not after: Sat 07 Jun 2025 01:24:17 +0000
asID: 61317
IP address blocks: 154.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3772 (0xebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 5 01:24:17 2023 GMT
Not After : Jun 7 01:24:17 2025 GMT
Subject: CN=647d3944-6c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:5c:16:a4:65:ab:b2:46:15:66:ad:c0:2e:
b2:15:49:ab:b6:1c:d7:ae:77:e0:44:a3:16:73:af:
ea:42:44:f5:3f:4c:73:2d:53:99:90:7b:7f:99:1f:
95:62:07:05:4b:84:4a:1b:97:e1:97:eb:68:9f:95:
10:1d:94:ec:ff:5c:2a:a5:06:88:5b:47:b1:c1:ec:
23:e9:dc:4d:31:ee:65:01:f5:9e:f0:6a:5b:1a:ba:
ea:a6:5e:c9:d6:b2:87:9e:a3:a4:f7:85:49:2e:4b:
b6:fe:1a:c8:31:14:5d:ee:b8:40:ae:b7:26:d7:38:
c7:de:e5:11:0c:1f:24:a6:4c:98:92:73:25:43:2b:
ac:20:f3:c0:c5:b7:dc:1e:42:4e:35:10:12:d2:8b:
85:df:eb:a6:da:66:e9:fc:25:7c:fd:56:c3:7f:dc:
fb:e5:23:ce:20:da:5f:6c:71:04:99:d2:3d:9e:34:
32:c8:3a:81:65:90:69:2b:1f:a1:81:17:2c:46:92:
41:c9:79:ea:29:0a:c6:03:79:c6:1e:17:bd:a0:4d:
58:f6:d3:ea:0b:fe:09:ce:96:6e:6d:b2:95:c8:e7:
99:06:79:56:2d:49:3a:4c:1e:da:18:d8:df:71:3d:
d6:19:79:8e:05:b3:e3:dd:a1:19:0d:d6:0b:4e:e1:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:29:7E:9A:E3:45:D2:38:D6:74:83:F4:C6:D7:01:E6:0D:EA:0F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B2513F9E033F11EEB34451774AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:ec:a6:9f:72:3f:bb:84:19:91:d8:aa:f9:7c:51:13:83:16:
b4:ab:92:48:7e:1b:2c:e9:ba:40:ef:68:7c:ac:f1:d7:5a:d4:
11:84:ad:cc:d1:a6:a7:11:de:75:90:0e:d9:2c:f0:be:2e:57:
6b:51:6a:38:97:ee:f6:3b:2f:1b:7f:8b:a3:dd:f1:cb:4e:e0:
f9:f0:d5:46:87:b6:18:1c:53:73:e5:01:23:f4:1e:ef:0c:83:
cf:f0:14:f5:71:72:39:7e:69:78:c4:0a:3d:43:33:c4:77:84:
9e:1e:29:ac:6a:8c:f3:80:4b:23:bf:cc:d0:44:ae:3b:51:c8:
89:4b:1c:7f:e5:d1:81:0d:bf:ba:d7:31:e0:58:11:b7:6d:3e:
2b:5a:da:5d:38:25:87:b0:13:6c:9e:c9:2b:5d:89:38:f2:5a:
03:84:cb:df:7e:f7:4b:32:45:23:d3:f1:59:bf:ba:b3:ca:6b:
e4:48:85:5d:6c:00:2a:75:ef:31:a7:8a:a5:e3:52:b0:81:b8:
42:2a:3d:44:56:ab:3c:21:2e:f7:7f:14:96:b7:9c:60:e6:f7:
06:93:4c:37:a4:c0:3d:5b:c1:d7:c8:bf:7b:23:08:08:ba:27:
68:2a:b6:b4:0c:d8:e6:b1:1a:e3:2e:34:83:0c:34:04:a3:f2:
1d:44:c0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:52:49 2024 by rpki-client on console-ams.rpki-client.org