Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/1587E6CCEE7111EEAAFBB25C775412E6.roa
File: 1587E6CCEE7111EEAAFBB25C775412E6.roa (raw, json)
Hash identifier: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=
Subject key identifier: F3:CC:BA:8B:35:A1:9F:CF:48:82:A3:5C:80:70:A3:08:FF:AF:05:39
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 018D
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/1587E6CCEE7111EEAAFBB25C775412E6.roa
Signing time: Sat 30 Mar 2024 08:39:56 +0000
ROA not before: Sat 30 Mar 2024 08:39:52 +0000
ROA not after: Wed 30 Mar 2033 08:39:52 +0000
asID: 30986
IP address blocks: 154.160.128.0/17 maxlen: 20
154.161.0.0/16 maxlen: 24
154.161.0.0/17 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Mar 30 08:39:52 2024 GMT
Not After : Mar 30 08:39:52 2033 GMT
Subject: CN=6607cfdb-0e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:d6:96:8a:e3:80:0a:0d:da:2b:5d:e7:1f:
65:77:9c:40:a6:68:ff:4b:d5:47:0d:85:80:b0:bf:
a5:0e:e1:6d:1e:be:06:ea:b7:ff:06:6e:f8:b1:05:
ac:8a:f9:c2:50:a0:87:67:1f:d6:fa:50:ad:03:66:
29:21:86:01:77:2f:1d:58:21:14:2d:ca:9a:d6:1c:
bf:58:e5:fb:e5:5c:56:da:a6:77:23:5e:e0:38:39:
1f:55:eb:88:c8:d2:9f:b9:3a:81:26:3a:a6:23:07:
c8:00:07:73:f6:34:3a:55:ef:a3:84:4c:48:cb:8b:
75:a2:f8:75:67:19:67:a7:db:cb:45:4f:51:e6:2c:
62:b4:b4:03:c7:cd:84:c3:74:25:0d:f4:07:39:0e:
5c:31:03:3a:cd:e5:72:d7:56:15:67:80:e1:90:8d:
66:57:1c:00:6e:9e:0a:d0:55:d8:df:c7:c2:ac:16:
bf:c6:c5:3c:37:ae:64:78:92:8f:6a:a9:01:59:82:
d6:ad:3b:9d:85:3c:e1:c3:ab:fa:8e:48:41:ae:ad:
ed:bd:a4:50:28:40:c3:eb:98:6b:8a:44:f2:9e:d4:
bb:1d:d4:07:98:79:fc:f0:c4:de:27:1d:f3:f7:dd:
0c:61:d9:ad:f9:d7:c1:33:72:29:67:5e:f7:6e:95:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CC:BA:8B:35:A1:9F:CF:48:82:A3:5C:80:70:A3:08:FF:AF:05:39
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/1587E6CCEE7111EEAAFBB25C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.160.128.0-154.161.255.255
Signature Algorithm: sha256WithRSAEncryption
1d:0b:6c:d1:f3:1d:6a:cd:3c:99:e4:1d:f2:8c:95:92:6a:86:
bc:73:11:f4:46:ef:46:a4:30:68:79:54:cf:8f:40:55:26:b5:
c4:e7:24:93:31:51:1a:06:42:64:c3:a5:12:bf:31:32:3d:50:
d3:95:70:2d:3f:34:96:87:13:3d:08:62:be:89:6b:03:b9:54:
41:2b:c7:76:9e:dd:1e:c4:c8:45:84:3c:52:71:4c:74:42:25:
5b:ad:70:7b:00:cc:76:00:2c:19:19:8f:75:54:0f:0b:60:a8:
f7:6b:4d:3c:0c:ea:31:7d:a0:d6:de:17:4d:9b:bb:ed:d0:e0:
a9:f3:b1:99:db:7b:f7:1b:7c:4a:fc:c6:7a:be:2c:ee:24:04:
fe:de:22:e2:e9:24:6d:0d:a0:bd:f8:9a:e2:5e:2c:c2:00:d2:
15:55:69:a1:1d:20:24:4b:bb:47:b5:2c:95:ff:76:81:6b:bf:
48:e5:58:28:40:c8:57:c5:6e:32:20:34:0f:e9:a5:5f:3c:02:
e5:df:4a:08:d6:50:55:2f:75:64:fc:c8:09:bc:56:81:fa:02:
d6:b2:55:3c:7b:ca:82:c6:e3:8a:bf:c7:c4:4e:81:a6:51:0e:
6f:8b:d8:22:d0:a4:89:30:7b:bb:43:75:34:f3:8a:93:37:a7:
0b:13:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:29 2024 by rpki-client on console-fra.rpki-client.org