Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0DD29DBA8B8811EEB86A44204AD9E6FC.roa
File: 0DD29DBA8B8811EEB86A44204AD9E6FC.roa (raw, json)
Hash identifier: Gec6kYkEtBuYmpTkt31LahM3/Itf/zBEv6pc/uNQ9hI=
Subject key identifier: DC:5D:0B:32:4A:D7:26:CD:1D:A5:81:1E:ED:E1:3C:9A:1A:55:61:E0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 137F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0DD29DBA8B8811EEB86A44204AD9E6FC.roa
Signing time: Sat 25 Nov 2023 11:44:56 +0000
ROA not before: Sat 25 Nov 2023 11:44:53 +0000
ROA not after: Tue 25 Nov 2025 11:44:53 +0000
asID: 212238
IP address blocks: 154.16.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4991 (0x137f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 11:44:53 2023 GMT
Not After : Nov 25 11:44:53 2025 GMT
Subject: CN=6561de38-e883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:0f:99:e7:19:60:50:30:71:2c:a7:3b:6d:
10:0d:bb:e5:88:0b:80:c1:65:20:31:60:d5:7e:ef:
2c:24:6f:49:ca:8e:22:a7:e9:17:b6:f7:ea:da:21:
3b:ed:43:84:5f:a1:f4:7f:4c:6a:a8:71:f9:2d:6a:
ad:8d:17:e7:72:69:59:d8:31:43:17:c7:2d:8a:5d:
c0:d2:a4:f0:10:58:63:4e:32:da:9e:51:56:63:eb:
88:28:2e:d7:a7:42:4e:61:d2:7a:ae:34:09:1a:4d:
79:fa:8a:4a:41:2f:c7:76:d3:66:29:27:f1:54:00:
2d:a7:9b:8c:72:bb:0e:6d:b7:ed:55:7a:aa:24:81:
9e:25:76:ee:79:1e:75:25:90:83:c9:7b:a0:14:0b:
e0:d8:49:30:c0:79:f7:4d:d6:23:8f:16:e0:94:c0:
4c:9a:b5:d1:c3:1a:59:9e:af:47:73:96:67:ec:50:
fe:ff:b0:86:e9:8c:7f:10:78:c1:aa:68:ab:98:40:
16:78:18:31:a8:d3:a0:b9:8b:af:b7:15:5d:57:12:
39:de:83:66:92:97:83:f5:b6:5b:f4:37:d9:73:2a:
37:cd:f2:88:cb:93:56:b7:74:b7:eb:6b:a9:b4:6f:
21:ae:7e:d5:0a:2c:e7:fd:a4:61:1e:bc:56:02:da:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:0B:32:4A:D7:26:CD:1D:A5:81:1E:ED:E1:3C:9A:1A:55:61:E0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0DD29DBA8B8811EEB86A44204AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.103.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6a:ec:42:fa:26:8c:89:7e:3a:a3:9c:22:1c:e4:3a:34:9b:
71:25:15:89:0e:af:f3:1d:49:bd:44:ba:7f:d7:09:2e:50:7a:
9f:b6:52:67:9e:c4:b1:13:67:93:a8:6e:9e:0e:e3:17:99:41:
f1:67:a4:c3:27:bd:8d:d3:15:e6:d6:6f:fa:b2:7c:9b:5c:e1:
a6:35:e4:25:36:e7:30:0e:0f:f4:68:35:ea:50:ba:5d:94:d8:
d2:ad:04:2d:18:0c:fe:5a:09:c2:f1:88:b7:bf:26:26:9e:01:
db:ff:06:a6:62:0f:28:bd:32:a4:34:4f:5e:ec:34:fd:bc:d3:
05:77:f5:d4:91:16:8a:12:94:d2:ea:3d:ca:fc:cb:04:c5:5a:
14:a0:3f:e4:1c:3d:42:a3:85:bb:49:27:ad:3e:b9:25:ec:0c:
c7:39:bb:30:8f:96:8c:f9:c0:c4:68:0b:ef:e7:5d:fa:23:ed:
cc:62:07:6a:c8:4d:30:0c:48:7c:d6:19:61:7b:7f:38:ad:f0:
c3:fa:a3:3a:f7:9d:1b:e6:36:af:9d:bf:6f:aa:fd:ec:e3:e6:
9a:6b:ba:4b:73:a2:56:d8:db:16:93:97:fa:a8:51:38:2d:3e:
1d:2f:3e:67:e9:4e:b7:11:c0:ed:56:d1:f1:35:fb:2f:95:10:
e2:30:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:22 2024 by rpki-client on console-fra.rpki-client.org