Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1359666AD0B111EE8441F676775412E6.roa
File: 1359666AD0B111EE8441F676775412E6.roa (raw, json)
Hash identifier: Fu/YWBv8Vk8CbA51a2Rq0v/nsoX0tD4Evh2oFh8pLXY=
Subject key identifier: A4:39:A6:6C:15:9C:88:3D:F7:F0:96:EA:F9:3D:09:B8:33:85:F6:0A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14C8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1359666AD0B111EE8441F676775412E6.roa
Signing time: Wed 21 Feb 2024 12:02:25 +0000
ROA not before: Wed 21 Feb 2024 12:02:21 +0000
ROA not after: Sat 21 Feb 2026 12:02:21 +0000
asID: 61317
IP address blocks: 154.16.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 11:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5320 (0x14c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 21 12:02:21 2024 GMT
Not After : Feb 21 12:02:21 2026 GMT
Subject: CN=65d5e651-8e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:e2:ec:29:4a:5e:5a:79:b2:db:67:1c:ee:
9c:1a:79:b8:00:8d:c5:c7:3f:19:be:aa:d6:ab:44:
9c:7a:e0:a9:75:b7:02:97:e0:23:89:48:30:20:00:
1e:34:64:9d:6d:74:30:17:ea:89:4f:ef:31:c5:b3:
af:7d:8d:6a:66:b2:af:12:33:76:ae:a8:f2:e0:c2:
d1:cb:0f:3e:df:dc:32:ae:17:0f:4d:c3:9b:40:90:
42:94:2e:21:4c:dd:8e:05:c0:14:cf:c5:ce:2c:4c:
34:55:9e:2a:7b:2c:79:02:a1:15:47:1c:b6:f0:ae:
50:86:09:03:e8:87:ab:ae:10:0b:6f:da:ed:e5:8c:
03:84:90:5a:14:11:3b:0e:66:85:80:49:0c:ed:c4:
c1:77:4c:da:69:14:53:fe:83:40:4f:90:7e:fe:2d:
cd:40:aa:69:04:91:77:69:4e:40:93:9b:64:5e:67:
01:39:0e:03:22:01:46:6b:39:88:75:b7:81:a5:83:
37:33:8a:11:4e:78:33:66:bb:62:62:18:6b:c6:11:
43:f4:e5:4a:7e:eb:7b:59:40:d7:86:88:c0:03:66:
dd:f3:1a:10:c6:28:1c:8e:d7:0a:6c:03:07:55:8a:
b2:04:f9:fd:b5:11:5d:b7:67:8e:c4:8f:d3:65:dd:
fc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:39:A6:6C:15:9C:88:3D:F7:F0:96:EA:F9:3D:09:B8:33:85:F6:0A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1359666AD0B111EE8441F676775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.54.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5d:ec:4f:ed:d3:0c:48:d0:47:de:c8:7b:09:18:31:57:b9:
d4:2e:5f:d0:64:69:ff:dd:17:bb:95:59:8f:e8:8f:81:6c:ec:
a8:8c:ad:a8:5d:9e:4a:e5:fd:b4:d0:bb:02:f7:3a:5d:b3:41:
7b:2d:70:05:6f:dd:89:c0:cf:59:ce:ab:a6:2e:6c:3b:b8:fc:
b2:c8:0b:73:be:6c:4b:8a:46:dd:f8:4e:ff:ca:d0:a4:de:d7:
a8:89:af:00:6e:30:a4:1f:ec:18:29:df:ee:62:36:a6:2a:13:
cf:f2:c2:1b:72:29:54:97:1f:3d:5e:70:b5:35:72:0f:86:11:
4a:16:43:aa:4a:b2:f4:09:6d:d9:11:5e:65:a3:b9:95:fc:21:
f2:11:d0:bc:67:cc:1b:ed:93:1a:3c:56:50:d3:43:03:f8:b2:
4c:07:b2:37:0e:75:ed:e9:3a:57:f0:26:9d:78:39:74:0f:66:
72:bd:27:b1:39:d1:ce:02:27:72:b8:99:e7:5a:a7:e4:30:ee:
a1:e0:2b:06:13:12:b5:fe:7b:8b:7a:09:63:be:34:df:f2:59:
6e:af:9f:e6:2a:06:a0:5b:39:12:95:68:c6:80:b1:56:71:57:
6b:93:5f:49:c2:a2:19:62:e3:ee:90:88:4b:59:07:94:4d:dc:
c9:fe:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:37 2024 by rpki-client on console-ams.rpki-client.org