Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/39683BE2FFF511EE83DCF305017001B1.roa
File: 39683BE2FFF511EE83DCF305017001B1.roa (raw, json)
Hash identifier: SQMbuT0SEB1DtK2KCdqD+zdLx6XVdr0JyPuln2hzA/M=
Subject key identifier: F5:52:C6:67:38:3D:89:35:94:81:55:6D:9D:E7:7F:89:EF:92:08:D5
Certificate issuer: /CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Certificate serial: 0C
Authority key identifier: A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/39683BE2FFF511EE83DCF305017001B1.roa
Signing time: Sun 21 Apr 2024 15:38:39 +0000
ROA not before: Sun 21 Apr 2024 15:38:36 +0000
ROA not after: Wed 23 Apr 2025 15:38:36 +0000
asID: 37628
IP address blocks: 154.65.12.0/22 maxlen: 22
154.65.12.0/24 maxlen: 24
154.65.13.0/24 maxlen: 24
154.65.14.0/24 maxlen: 24
154.65.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Validity
Not Before: Apr 21 15:38:36 2024 GMT
Not After : Apr 23 15:38:36 2025 GMT
Subject: CN=662532ff-d7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:36:9c:17:24:87:0c:d4:ca:01:b3:b2:40:
83:e2:9f:04:68:46:e5:20:95:af:23:2c:6c:94:99:
06:5a:5a:4e:15:34:cd:a4:ab:63:c6:3c:6e:54:e5:
60:b4:7f:e1:da:95:c2:ad:ef:83:dd:c4:ef:51:ec:
8e:d1:bc:a1:0d:82:d7:bb:f1:0f:ad:cb:56:ac:d5:
e7:65:0a:3d:e6:1a:e5:74:34:c2:76:7a:79:b2:cd:
ec:9c:9c:18:7c:db:c8:f3:03:f9:48:f1:f1:6f:72:
07:d0:e9:cf:1b:62:6d:e7:d5:d9:af:80:85:9b:28:
2c:40:62:be:9a:ad:28:38:d7:00:c0:09:03:5c:bc:
99:1f:11:83:fc:3f:68:fa:82:ef:d4:48:f8:c9:59:
55:6c:3f:14:cc:02:3d:fb:6d:c4:95:38:3b:df:41:
36:8b:91:66:1e:f2:90:81:fa:8c:7f:8c:0d:61:6e:
82:fe:72:8c:70:af:6d:5e:8f:56:d6:50:29:ac:a8:
51:8a:43:39:e1:21:b1:3c:4b:b0:84:b4:76:42:23:
bb:15:78:ca:2c:1a:71:c6:3e:1b:5c:29:b5:49:e6:
a8:05:87:b2:a5:e4:05:92:40:cd:d9:8f:4c:91:32:
2a:13:16:16:59:08:9c:86:81:c7:af:8d:bf:ea:41:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:52:C6:67:38:3D:89:35:94:81:55:6D:9D:E7:7F:89:EF:92:08:D5
X509v3 Authority Key Identifier:
keyid:A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/39683BE2FFF511EE83DCF305017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.12.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b1:6c:1e:d9:99:2d:99:77:e2:ea:54:2b:79:ac:e9:36:e0:
0b:b9:28:4c:5f:22:b0:29:3e:b3:e2:25:0f:1d:0c:30:8f:84:
17:35:69:1f:f5:52:8d:67:37:82:6c:b2:6e:f0:a2:af:5c:80:
45:cc:a0:59:26:5e:85:3c:56:45:bf:65:98:75:96:26:79:a9:
fb:24:9e:90:56:40:f7:5f:34:00:cd:62:69:12:df:18:fe:ee:
dd:96:37:d8:f3:d5:22:ca:36:07:85:de:8a:1f:2a:5c:5e:fe:
b3:a2:d6:0e:b4:0d:5e:91:43:32:d9:f5:14:71:5c:83:3d:6d:
63:3a:c5:6e:d3:6f:ca:6e:d7:57:43:5d:01:d8:2a:4c:fe:39:
7b:4b:fe:91:05:2b:b2:d6:d5:98:0f:a0:b0:04:06:1c:13:09:
fa:fe:fa:e9:91:53:3a:a6:e6:cb:0f:1a:83:5c:62:fc:cd:29:
d7:bd:1f:3c:2c:cc:87:6d:a3:f1:4b:ee:79:e2:34:3d:45:09:
b2:5a:3b:56:33:2f:c6:83:90:5c:b5:00:a2:db:83:6e:45:5b:
a2:b3:08:8f:1d:15:58:0e:ce:b3:7a:f1:d8:4f:a5:20:68:9c:
34:0e:10:6a:13:8c:31:81:ea:83:4f:34:1a:e4:3a:84:fe:51:
69:ba:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org