Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/128184228B6311EEBB21F42C4AD9E6FC.roa
File: 128184228B6311EEBB21F42C4AD9E6FC.roa (raw, json)
Hash identifier: MmnMOqsBIJXNAdiaUand9G5rv6T0GguBUO9tTdSdyIE=
Subject key identifier: 4B:85:EA:CD:A1:8B:C9:1F:D8:B9:10:04:0F:5F:20:A5:99:58:9A:DD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 133A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/128184228B6311EEBB21F42C4AD9E6FC.roa
Signing time: Sat 25 Nov 2023 07:20:12 +0000
ROA not before: Sat 25 Nov 2023 07:20:09 +0000
ROA not after: Tue 25 Nov 2025 07:20:09 +0000
asID: 174
IP address blocks: 154.16.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4922 (0x133a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 07:20:09 2023 GMT
Not After : Nov 25 07:20:09 2025 GMT
Subject: CN=6561a02c-13a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:2d:ff:d4:92:cb:d9:62:04:a1:75:1b:19:
0e:f2:05:f6:07:b7:92:05:3c:d7:17:7e:34:f9:a7:
ff:17:94:79:a2:16:b9:3b:ac:1f:4d:3d:cd:73:42:
e4:46:2c:07:83:a0:ef:cf:de:2c:15:39:74:88:cf:
3e:29:cf:2a:d3:0c:8d:30:8a:45:48:ba:8a:36:6b:
c8:46:f6:7d:52:f1:22:c6:d1:eb:f9:63:14:4f:7a:
90:22:ee:67:df:53:b4:1c:97:c1:cc:fa:bb:b8:ab:
83:22:c7:e6:ae:c1:e3:1f:01:75:fb:5f:4c:ac:a8:
12:17:4c:f1:02:38:ba:ca:f8:34:48:78:38:81:03:
d2:ca:e3:db:96:07:ba:db:3f:7f:91:07:08:54:b6:
99:9e:13:ec:38:23:ed:dc:d1:1e:ad:8c:21:d9:a7:
4f:d8:af:fd:26:7a:07:32:f8:aa:d2:14:a8:d6:92:
7a:79:f5:3a:e2:2a:91:4d:42:97:4b:d7:5e:64:02:
6f:fa:36:ad:ee:5b:38:bc:5a:69:de:37:42:c8:38:
d3:23:68:af:4e:63:cf:27:cd:99:d9:6c:07:eb:9f:
04:15:dc:11:18:d9:d9:ec:97:1b:09:2e:d1:76:f8:
8a:fa:c8:e8:12:f4:c3:4a:df:c3:17:70:fa:fa:7d:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:EA:CD:A1:8B:C9:1F:D8:B9:10:04:0F:5F:20:A5:99:58:9A:DD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/128184228B6311EEBB21F42C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.204.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4e:f9:f7:44:6e:5d:a4:2f:9e:3d:d4:31:aa:94:6f:35:99:
5f:6a:ed:6a:1a:00:ae:fb:c5:26:8a:03:3c:9d:69:84:44:41:
cd:51:f9:a1:32:53:3b:e6:2d:1a:2d:d7:cd:5e:3b:36:f3:13:
86:72:ca:98:19:ef:a4:a9:e3:0a:11:d7:ba:99:68:0a:43:fc:
bf:0f:d9:53:0c:f7:24:e0:a1:30:71:18:4c:e0:a7:0a:94:20:
48:c5:e7:5a:46:4b:f2:7e:27:d4:7e:8d:0f:85:7a:5b:aa:45:
ee:9b:f0:8b:a5:53:89:e8:3b:1e:5e:16:23:8d:5d:68:6c:3a:
f8:1b:bd:53:f9:79:6d:7d:f9:bf:d8:22:4b:7c:30:bc:36:57:
38:ea:5c:8d:97:15:23:e8:bc:b8:83:64:07:0d:44:25:54:83:
3f:9b:52:cb:b9:32:6f:5c:6f:8e:23:54:a6:4a:d2:54:61:af:
a3:ae:9c:db:c2:ea:fc:d8:1c:c8:22:89:06:6e:54:0d:3a:0d:
ff:79:09:33:3a:07:74:5e:1c:00:fe:89:fd:a9:f7:17:92:52:
c5:0a:1e:b6:ec:1c:34:4a:a3:85:cf:30:27:40:61:d4:10:2f:
3b:c7:a1:31:60:13:66:33:8f:76:d7:86:0f:ca:3b:2a:21:5b:
50:15:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:22 2024 by rpki-client on console-fra.rpki-client.org