Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/3D3ABB10C5AC11EE9A333C4E775412E6.roa
File: 3D3ABB10C5AC11EE9A333C4E775412E6.roa (raw, json)
Hash identifier: mUep2+T9jy1s0v0ts+UWRulp3HOtXmgFIkGCm3gwL/Y=
Subject key identifier: 52:E7:65:0C:1D:04:1E:9F:1C:B9:0D:BC:9A:E9:3C:EF:4A:9E:1F:51
Certificate issuer: /CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Certificate serial: 0668
Authority key identifier: 3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/3D3ABB10C5AC11EE9A333C4E775412E6.roa
Signing time: Wed 07 Feb 2024 11:30:05 +0000
ROA not before: Wed 07 Feb 2024 11:30:01 +0000
ROA not after: Mon 10 Feb 2025 11:30:01 +0000
asID: 37618
IP address blocks: 154.73.0.0/22 maxlen: 22
154.73.0.0/24 maxlen: 24
154.73.1.0/24 maxlen: 24
154.73.2.0/24 maxlen: 24
154.73.3.0/24 maxlen: 24
2c0f:f6e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1640 (0x668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Validity
Not Before: Feb 7 11:30:01 2024 GMT
Not After : Feb 10 11:30:01 2025 GMT
Subject: CN=65c369bd-5330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:69:03:72:9c:3d:33:0d:68:14:d1:67:c6:
60:14:66:89:5f:97:97:8e:8a:6c:be:c1:db:54:52:
53:75:06:c2:81:cf:5c:99:96:74:2a:25:3d:bd:a8:
c5:74:ba:3e:5d:a7:fe:f1:d5:66:ed:ef:21:70:4e:
93:18:65:09:a4:bb:93:8f:fb:02:36:c0:5c:90:e3:
20:a3:2f:69:77:44:d3:f5:d3:fb:92:18:66:cd:f0:
83:cf:2b:64:73:6f:d9:6c:ba:63:db:ad:31:6a:9d:
39:c3:66:6b:e4:b3:34:e2:a2:79:cd:fc:34:00:fd:
c0:13:17:e7:bd:d4:1f:e7:8d:cd:01:fe:5a:1d:43:
99:22:25:9a:d8:e9:8d:36:0b:eb:f0:35:dc:37:46:
63:3c:a9:10:4b:0c:32:99:6b:b4:7d:52:8d:e8:13:
c7:ab:92:e8:59:a2:04:85:7d:93:da:3b:31:21:6d:
47:5e:61:ac:2a:db:bc:90:c8:1f:d8:ab:03:c5:9f:
2a:4a:94:4e:09:dd:34:7e:9e:f5:c3:29:20:be:2f:
86:89:57:22:eb:33:c8:61:90:b7:59:b8:61:40:af:
e1:06:7a:68:d2:89:91:70:5a:8c:4d:ca:1c:90:b5:
ef:ac:1d:40:ee:3b:94:8e:00:2e:d9:ee:a6:8c:5f:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:65:0C:1D:04:1E:9F:1C:B9:0D:BC:9A:E9:3C:EF:4A:9E:1F:51
X509v3 Authority Key Identifier:
keyid:3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/3D3ABB10C5AC11EE9A333C4E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.0.0/22
IPv6:
2c0f:f6e0::/32
Signature Algorithm: sha256WithRSAEncryption
32:ff:e8:07:49:e5:e6:fb:af:03:06:37:78:1c:db:f2:5f:25:
5d:0e:4d:00:27:45:3e:6b:e3:b8:1e:b5:dd:f6:bf:20:da:5a:
c9:65:24:d7:ed:70:2b:e9:bc:b6:f4:4d:8d:d9:94:b4:57:eb:
b4:7d:c6:f8:0d:30:d3:da:e8:f4:51:cf:eb:32:8b:2f:e2:84:
fd:e5:5f:83:eb:c5:1c:43:40:49:f3:56:3b:ba:fd:4b:f1:61:
aa:50:a7:9e:11:ae:1f:30:53:d5:c7:1c:43:f6:6b:64:f2:db:
e9:63:2f:27:85:7a:f3:82:14:f4:ed:8f:a5:13:5e:0d:ab:00:
8e:5d:04:2f:e5:bd:85:73:29:d4:6f:af:23:91:1a:43:a6:ff:
40:54:43:9b:cd:ab:a1:d2:05:90:27:9e:c4:22:37:89:b8:f7:
60:a4:75:71:f0:da:46:2b:59:b7:e5:94:64:e4:fe:71:f1:d9:
76:3a:2b:a7:78:e1:18:b4:d1:8a:46:bc:69:51:3a:34:8e:59:
1c:25:86:58:61:6d:3a:ba:00:23:f2:a4:5e:89:5d:a2:ca:a7:
ea:67:14:27:43:0f:9f:9c:5f:e3:96:29:3d:a7:6f:3e:1e:29:
5d:07:93:35:56:51:2c:79:98:2d:f0:a3:cd:37:38:2f:b2:09:
22:8a:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org