Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/161927CC4FCE11EFAD112F98762E951A.roa
File: 161927CC4FCE11EFAD112F98762E951A.roa (raw, json)
Hash identifier: lbeNiKq4yGa9XrCceFdSvPJuYzZRk8F0H5M0od+xXB4=
Subject key identifier: 10:6E:21:F0:70:D4:12:04:36:2E:EA:99:A3:5B:9B:68:3F:7E:98:1D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 176E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/161927CC4FCE11EFAD112F98762E951A.roa
Signing time: Thu 01 Aug 2024 06:20:02 +0000
ROA not before: Thu 01 Aug 2024 06:19:58 +0000
ROA not after: Sat 01 Aug 2026 06:19:58 +0000
asID: 834
IP address blocks: 154.16.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5998 (0x176e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 1 06:19:58 2024 GMT
Not After : Aug 1 06:19:58 2026 GMT
Subject: CN=66ab2912-fc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:f4:b0:de:eb:1c:fd:b0:91:62:55:70:93:
d4:ad:ff:98:52:17:68:77:b4:55:81:ec:89:7e:ae:
4d:90:e8:e0:c3:b7:a2:75:66:59:2d:af:eb:2a:0c:
e8:a8:fa:dd:64:ea:03:f7:d1:b6:db:98:e4:79:5e:
a0:dc:7f:7c:f2:35:2f:39:ef:90:65:d3:0c:b0:57:
fe:e6:35:6e:eb:62:b3:d1:3e:a0:5e:6a:3e:03:5b:
ef:8b:19:da:6b:77:bc:2e:85:1d:26:2e:e8:ee:1b:
80:77:c5:46:92:63:47:64:77:3f:84:d2:94:ba:e2:
cf:fe:36:6b:2b:80:d6:b0:7c:82:13:c8:01:c8:2a:
f0:6a:7e:c5:0a:5b:16:61:75:83:98:63:10:7b:1e:
35:02:3e:16:5e:1a:db:f5:2a:d3:7e:ac:ed:dd:cd:
49:d5:af:5f:38:e8:7a:84:fe:16:03:2b:76:2e:57:
8d:31:44:50:09:08:37:5f:39:ec:af:ef:a6:a1:c7:
a2:4e:19:7f:e0:c7:37:49:cf:69:63:59:d5:f5:bd:
33:ca:ce:99:13:d8:a6:2a:88:c3:da:e1:1f:0b:79:
ff:00:ce:05:88:ba:3f:c8:d1:4b:ba:03:c6:38:21:
6f:7c:98:80:f8:c3:17:ae:17:1a:7f:7a:37:36:aa:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:21:F0:70:D4:12:04:36:2E:EA:99:A3:5B:9B:68:3F:7E:98:1D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/161927CC4FCE11EFAD112F98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.96.0/24
Signature Algorithm: sha256WithRSAEncryption
49:56:e2:c7:a6:50:20:d8:5f:99:e9:86:b1:c1:46:1f:6e:12:
2b:3a:9f:eb:b7:73:25:a4:3d:88:94:f3:ed:78:81:64:30:21:
bf:ec:17:27:c3:d3:8c:8e:07:73:2d:63:fa:78:4c:1e:b4:ae:
6d:5b:df:27:c7:7b:a0:96:f5:0f:51:fc:f9:c5:b2:b7:eb:71:
cc:4b:7c:05:5e:8f:ca:ab:f1:9c:51:95:ef:9f:1f:c9:93:01:
1e:00:54:53:f1:39:71:b5:e3:76:22:ae:45:c2:55:73:72:b4:
c1:72:79:08:4e:67:f6:3e:b8:88:11:5d:86:40:66:a2:5a:8f:
f2:76:5c:13:33:87:6c:4f:87:02:6a:e6:55:92:db:4e:c4:60:
6f:4b:4f:1e:3c:dd:68:82:d5:f9:c1:ac:f9:16:c7:cf:aa:cc:
93:9b:3d:84:d8:e8:34:b6:e8:74:59:9a:87:42:56:69:22:4e:
c0:cd:b6:67:21:a9:23:b0:31:5d:f0:58:30:79:ef:26:c6:8b:
aa:08:e4:03:82:d7:a8:a1:dd:81:9b:8f:4b:67:82:d9:ca:2b:
de:f8:09:2e:ed:96:ed:69:fc:5f:88:98:8a:97:48:09:49:58:
85:b7:60:6f:bc:69:27:c6:d5:2a:64:03:6f:92:f0:26:3f:28:
7d:d8:8e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:23 2024 by rpki-client on console-ams.rpki-client.org