Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/4F0B564AF51511EEB208C151775412E6.roa
File: 4F0B564AF51511EEB208C151775412E6.roa (raw, json)
Hash identifier: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=
Subject key identifier: 26:24:20:5A:8F:56:30:F2:25:6A:38:56:5F:DE:27:42:2B:86:FE:EF
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 0199
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/4F0B564AF51511EEB208C151775412E6.roa
Signing time: Sun 07 Apr 2024 19:30:36 +0000
ROA not before: Sun 07 Apr 2024 19:30:31 +0000
ROA not after: Fri 07 Apr 2034 19:30:31 +0000
asID: 30986
IP address blocks: 154.162.0.0/16 maxlen: 22
154.163.0.0/16 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Apr 7 19:30:31 2024 GMT
Not After : Apr 7 19:30:31 2034 GMT
Subject: CN=6612f45c-aa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:0c:1b:c4:68:e6:6d:61:a1:7f:4c:7c:33:
0a:f2:c2:26:c7:2a:e2:75:69:c9:1e:11:94:f7:98:
d9:b3:7f:d6:7f:02:c9:58:d2:2b:e9:d4:a6:b6:c5:
b3:39:76:4d:f4:01:35:c0:12:68:6e:50:7c:d4:56:
4d:9e:b5:c0:86:8f:ee:85:99:6c:5e:c8:8f:56:59:
09:ca:60:c3:3d:54:3c:b3:71:77:df:22:da:c7:6d:
fb:13:f0:09:69:36:2d:30:fa:a8:f0:4e:98:7a:30:
29:bf:31:bb:5f:2f:ba:18:de:52:2a:c5:16:1f:c6:
74:8c:ce:d7:2d:29:83:da:31:73:76:21:17:2a:f4:
19:83:29:45:ed:a9:59:9b:a9:5a:11:a6:27:52:b2:
5e:75:b3:de:fb:57:ac:f4:18:e3:7d:8b:40:51:a5:
7b:28:c6:5a:c6:17:07:dc:52:1c:53:2d:6b:c7:05:
fa:18:aa:ba:6c:0e:cc:79:d8:1d:3a:15:80:dd:48:
30:ac:c2:b0:34:b0:db:eb:07:5f:50:c4:56:f4:e7:
4c:3b:0b:e4:6c:0c:6a:bd:93:02:ac:eb:e1:bc:21:
96:8c:c0:34:d9:4f:76:99:a9:ea:9b:d6:c7:9c:cd:
39:0d:8e:99:d7:f5:14:fb:dd:28:38:1b:a9:b1:83:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:20:5A:8F:56:30:F2:25:6A:38:56:5F:DE:27:42:2B:86:FE:EF
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/4F0B564AF51511EEB208C151775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.162.0.0/15
Signature Algorithm: sha256WithRSAEncryption
16:ea:49:01:34:dc:d8:3a:f1:ff:21:16:2b:2e:46:5b:3a:38:
20:a4:c4:53:22:ef:c1:cd:93:b1:0b:a0:22:b4:3d:41:ea:1e:
f4:af:a9:0b:6f:4b:41:fb:ef:47:05:31:52:8f:23:2b:e5:8f:
8f:17:d4:80:f9:fc:4f:65:48:3d:27:6b:81:b1:f5:ab:5a:40:
50:3b:0e:0f:fe:00:2b:ab:f8:16:2b:36:ae:fc:ba:80:b2:d9:
5f:b5:a1:11:8e:b8:4a:3a:53:c6:d1:4f:be:64:9f:56:41:cc:
be:0f:80:a5:89:f9:42:39:bf:e6:4f:55:5d:52:5a:7c:28:84:
99:dd:6d:84:49:88:5c:b0:57:36:bd:00:39:ff:4d:30:7a:e6:
e1:d2:ef:c9:a4:49:20:0e:d5:72:c8:e0:00:24:d4:14:08:0b:
4b:9d:0b:fd:77:11:f1:97:62:a1:90:e8:3c:32:64:dd:80:1e:
da:09:4f:33:e9:72:e5:25:bc:c7:ff:db:ab:64:6a:bc:25:4e:
63:fe:d7:e1:c4:6e:8a:8f:61:30:b7:17:44:8b:37:f4:68:a6:
88:49:a4:d9:2b:15:a2:50:0e:84:ce:64:94:c5:d5:75:45:89:
1e:ab:cf:9f:9e:fb:95:6e:a7:35:1d:39:ca:fe:72:6d:9f:ae:
41:e0:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:45 2024 by rpki-client on console-ams.rpki-client.org