Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0ABE64DCB2E311EFADF4BF97762E951A.roa
File: 0ABE64DCB2E311EFADF4BF97762E951A.roa (raw, json)
Hash identifier: omJ3c2xOxDupb0CD560ommDRM/H8SKHllzWjvffcQIQ=
Subject key identifier: CA:17:68:C8:D6:03:32:78:E0:A7:3C:5F:51:B8:9C:2F:2E:CB:20:BE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1933
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0ABE64DCB2E311EFADF4BF97762E951A.roa
Signing time: Thu 05 Dec 2024 08:29:28 +0000
ROA not before: Thu 05 Dec 2024 08:29:24 +0000
ROA not after: Sat 05 Dec 2026 08:29:24 +0000
asID: 9009
IP address blocks: 154.16.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6451 (0x1933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 5 08:29:24 2024 GMT
Not After : Dec 5 08:29:24 2026 GMT
Subject: CN=67516468-3f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:60:49:a5:cf:8b:7b:71:e1:90:7e:5f:93:
70:bc:5d:a6:67:f9:7c:6d:ee:09:0a:44:e0:a3:23:
38:28:a7:22:1c:db:f2:0e:5d:73:9e:98:18:60:e2:
f6:4f:59:b1:a0:2b:65:5d:2a:d3:d1:08:ad:c7:d6:
68:06:9e:51:2e:0c:0d:eb:93:f2:cd:cc:ac:77:36:
84:37:ac:63:16:72:2a:27:5e:42:83:64:1c:ed:b0:
d4:1c:c6:35:02:3c:47:25:f4:c9:b9:63:1f:e3:6e:
52:17:3c:21:f2:37:d7:91:7f:0b:e1:63:a1:04:f1:
3d:67:0b:c7:23:70:22:9a:ad:bf:f9:e8:16:2b:24:
66:23:9c:48:47:eb:3d:d2:89:19:27:02:9b:57:59:
0e:81:ac:83:30:94:b0:84:ea:26:2c:d8:2c:22:f5:
91:d6:b4:c2:4a:ee:0c:be:9e:fc:79:0a:8f:d9:eb:
c3:33:23:e1:cd:2f:af:e9:e4:38:0f:b8:2d:7f:99:
f5:e9:40:25:43:66:db:3d:74:02:85:19:ab:8e:38:
d9:86:1f:c7:7c:98:a8:5e:d7:62:91:79:35:11:31:
f4:7a:fc:ee:bd:8a:d7:59:3c:86:2f:76:ae:0c:63:
4d:c0:c9:3c:f3:60:e6:23:fd:64:ab:01:05:bd:3e:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:17:68:C8:D6:03:32:78:E0:A7:3C:5F:51:B8:9C:2F:2E:CB:20:BE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0ABE64DCB2E311EFADF4BF97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:69:a0:a6:85:4f:0c:a8:96:8e:2c:45:a7:bb:13:ae:68:fc:
6a:25:d2:28:21:30:6a:8f:66:8a:6e:78:05:c2:cc:20:97:00:
ed:ad:59:bd:b3:34:1c:99:5f:9b:e6:2b:c9:24:1f:36:cf:78:
f8:11:d7:1d:9d:11:c7:0a:fa:9c:b4:2d:de:64:ea:da:c4:93:
87:8c:43:15:57:30:62:5c:d1:a7:bf:2b:60:6e:f7:7f:b1:4d:
61:24:b4:6e:36:a3:1b:dc:11:90:a0:2e:1d:a2:ff:ae:c3:bb:
4f:95:ce:d4:d7:8a:3e:82:64:af:19:66:d5:b1:8b:14:27:10:
d2:5f:ff:2b:e6:66:62:24:d8:01:d7:4b:40:22:8d:2b:d3:c3:
fd:e6:ea:75:cb:66:c1:d2:89:17:56:21:f8:34:4c:3f:a5:36:
0e:0b:29:f9:83:5c:7e:50:01:62:ae:0c:bc:b0:1c:ef:8f:c2:
da:a7:10:db:33:e0:05:0c:d7:13:87:4a:af:8f:db:6e:55:6e:
c9:d0:9a:9d:9f:a2:dc:ea:f7:41:b1:59:19:6c:77:da:db:e4:
ae:9a:fc:cc:0c:37:6f:cb:89:8a:11:7f:a0:b7:89:bb:9f:16:
77:e9:92:bb:cf:43:9a:98:6d:05:75:ea:ea:76:68:9d:38:c0:
c5:6c:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 01:50:34 2024 by rpki-client on console-ams.rpki-client.org