Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09FAE3301C1C11EFBC118A557DDC24C2.roa
File: 09FAE3301C1C11EFBC118A557DDC24C2.roa (raw, json)
Hash identifier: pmjXTEoU57J6XHQeJXIvmNIwKpSBCOE9YqAAUZSVI38=
Subject key identifier: 1E:AC:47:63:8C:B8:95:12:2A:6A:B1:62:F6:FA:9E:3E:E9:10:CE:BA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 16A2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09FAE3301C1C11EFBC118A557DDC24C2.roa
Signing time: Mon 27 May 2024 11:27:02 +0000
ROA not before: Mon 27 May 2024 11:26:59 +0000
ROA not after: Wed 27 May 2026 11:26:59 +0000
asID: 9009
IP address blocks: 154.16.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Oct 2024 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5794 (0x16a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 27 11:26:59 2024 GMT
Not After : May 27 11:26:59 2026 GMT
Subject: CN=66546e06-4f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:d4:ba:90:23:b8:1b:be:41:83:70:12:74:
34:6d:d0:6e:5d:24:f1:04:f4:04:03:cd:48:be:e7:
e7:5f:ce:7d:6d:1c:58:fa:51:e3:2c:7c:78:bd:65:
3d:7c:b5:17:85:2b:cd:4c:62:df:b5:1b:16:1f:42:
fe:a3:ec:38:cc:5d:be:e0:a4:1d:0a:e3:15:ab:18:
d0:7c:c2:10:a5:bd:3f:c9:1e:a3:5e:3c:b4:07:c9:
b9:0b:4c:c9:2d:e7:e5:e8:2f:af:b6:f9:5a:9e:51:
23:4b:a8:78:fa:f9:90:c5:7e:e7:54:2d:80:19:ba:
fe:02:f3:c5:63:e6:a6:91:5d:26:18:11:6b:d4:4a:
33:76:96:3a:42:f7:b3:4f:95:a2:95:d6:62:5d:c6:
d6:63:1c:78:c1:f9:24:24:08:4f:7a:16:dd:25:7a:
a4:44:9b:20:dc:86:75:b4:a1:f3:07:b8:8a:78:f9:
38:69:c1:a1:00:66:34:e1:22:86:67:e2:c2:6f:fe:
7b:9e:05:e9:38:77:7a:8f:96:4b:d9:e6:14:ce:ee:
ea:a9:b2:35:7b:ae:4b:c4:09:67:01:65:6b:75:7f:
de:d7:88:0c:2a:ef:1b:f0:6a:fd:b6:49:3d:4b:f7:
1a:6b:af:be:da:ec:17:72:d7:41:7a:a3:35:73:be:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AC:47:63:8C:B8:95:12:2A:6A:B1:62:F6:FA:9E:3E:E9:10:CE:BA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09FAE3301C1C11EFBC118A557DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.249.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5c:d6:d3:49:47:a0:9e:a5:40:ea:10:69:28:8b:ef:6a:55:
8a:a0:83:58:c7:59:a0:d3:2f:35:3c:bb:94:38:12:0a:bb:d4:
38:8f:4b:6e:2a:db:60:c1:3f:d9:c2:da:72:6b:82:d4:7d:d1:
b5:70:2a:e2:c8:91:d2:9e:ac:34:8d:aa:2e:a7:3e:76:c7:9b:
6b:f6:fe:55:e7:6d:72:b3:b0:3c:15:dd:b8:d6:1d:bf:99:e1:
4c:33:61:8a:9a:fa:f4:e7:23:0d:3b:15:04:bd:33:78:8e:ba:
9c:cc:a1:48:e1:57:da:e3:ee:b4:81:e0:a5:fa:1e:eb:27:64:
8a:45:a0:d7:59:3d:48:ba:f5:f5:35:7c:5c:8e:d6:86:77:8e:
67:b9:4f:ca:f9:7d:30:00:d6:66:75:37:c4:47:96:ee:dd:14:
70:97:cf:ff:82:63:25:97:de:a1:cd:8a:02:9e:10:40:eb:95:
89:7d:29:e1:54:f0:6a:94:bd:51:7a:f5:90:21:a6:6c:c8:2c:
1c:4e:b1:e4:49:ff:62:56:c1:36:ec:65:7b:1d:32:44:a1:b0:
df:e3:eb:30:b1:e7:ac:56:e7:8c:ac:ae:7c:29:74:f6:fe:cd:
e9:8b:70:23:01:67:8a:a0:31:d1:f9:75:3b:ec:3d:55:90:28:
07:40:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 09:25:34 2024 by rpki-client on console-fra.rpki-client.org