Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/129CDD0E143911EE97E19E534AD9E6FC.roa
File: 129CDD0E143911EE97E19E534AD9E6FC.roa (raw, json)
Hash identifier: PEs8tYbIt3yjaLOpN8S7kud3i5BJ7oh01mD7MDecoLk=
Subject key identifier: 63:37:16:9D:64:A3:8C:1B:C5:AD:2A:E2:53:6A:4B:8E:E0:E7:80:94
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 100E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/129CDD0E143911EE97E19E534AD9E6FC.roa
Signing time: Mon 26 Jun 2023 15:49:45 +0000
ROA not before: Mon 26 Jun 2023 15:49:41 +0000
ROA not after: Tue 24 Jun 2025 15:49:41 +0000
asID: 211440
IP address blocks: 154.16.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4110 (0x100e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 26 15:49:41 2023 GMT
Not After : Jun 24 15:49:41 2025 GMT
Subject: CN=6499b399-e179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:32:17:04:07:35:8e:20:84:b2:17:3b:32:
d0:51:ea:27:63:11:e6:4b:42:c6:34:ce:b5:3b:7e:
1d:3b:8e:e9:85:e3:cd:35:11:88:dc:52:45:33:a5:
b4:dc:d4:88:65:fd:ac:96:ef:28:4f:04:9e:44:c7:
c6:3c:16:60:ad:c0:91:19:9a:89:39:3d:97:c8:7d:
ed:ff:e2:47:10:f8:ff:db:ec:bb:a7:d2:58:be:81:
e1:32:ea:d0:63:92:d4:73:42:b7:e0:5a:a1:35:de:
e2:91:9e:5c:6c:5f:9a:21:67:c8:21:ee:e2:d0:5b:
84:a4:fc:c5:2a:02:5e:d7:5a:83:61:e7:85:fe:7c:
1f:85:72:3b:54:00:15:f3:2f:71:0c:11:48:94:2f:
57:38:7e:a1:f1:1f:74:a6:ba:d1:07:37:c2:f7:5d:
a1:57:f9:07:9d:5c:a9:ff:ee:9b:ef:80:52:d8:19:
7e:8f:a6:e1:7d:53:0b:2a:d0:a1:4a:7e:e5:e6:7c:
81:cf:f8:fa:85:ee:76:5f:99:e1:03:cb:5f:64:4b:
04:6d:70:77:e0:93:49:7b:2c:3f:c2:f8:c0:e8:8b:
9c:70:2f:53:72:c1:cf:5e:6e:9f:eb:b7:f6:34:aa:
3c:fc:a4:ae:fb:5b:a8:64:f3:87:14:62:b9:1a:22:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:16:9D:64:A3:8C:1B:C5:AD:2A:E2:53:6A:4B:8E:E0:E7:80:94
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/129CDD0E143911EE97E19E534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.64.0/24
Signature Algorithm: sha256WithRSAEncryption
77:44:65:6b:49:de:44:b7:7f:52:36:00:d7:fc:ab:9f:89:52:
14:aa:13:ef:7c:55:39:15:73:68:00:a7:aa:19:22:cd:13:53:
7b:6e:49:47:70:6c:69:94:27:1d:55:dd:e5:89:75:5f:d5:3f:
19:c8:c4:27:79:ac:cb:58:99:e0:b0:8f:e2:36:92:2d:73:7d:
09:fe:26:4c:91:03:6b:64:f5:73:fb:06:36:ef:c1:17:4e:37:
c1:91:1e:4b:36:db:34:1e:f1:f8:56:2e:e3:90:f7:0e:73:ab:
cf:9c:bb:75:42:d5:7e:f1:9e:28:39:9a:2b:7a:94:e0:df:8f:
5f:03:21:b2:a2:77:fd:f2:16:c3:7a:c7:b4:cf:55:e6:0c:3a:
22:e6:7e:9b:29:7b:4a:9d:21:e1:01:13:bb:de:e8:e7:ea:e1:
9c:50:02:d7:fa:fe:82:bf:7c:42:0c:28:ef:15:f0:1e:f2:5a:
fb:20:0d:f6:89:50:f5:cb:0a:d2:ff:ba:73:4a:aa:16:cd:34:
89:15:eb:4d:9f:54:98:30:96:bb:d2:2f:f2:03:2f:f5:7f:06:
09:a2:65:11:f2:0a:37:11:1a:1d:dc:ae:29:ca:d8:0a:64:40:
70:89:8d:1f:09:05:34:1c:0f:a3:bd:84:b6:3e:64:01:1c:32:
fc:2c:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:11 2024 by rpki-client on console-ams.rpki-client.org