Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/17CC3DE28AAA11ED88E693BCF1222468.roa
File: 17CC3DE28AAA11ED88E693BCF1222468.roa (raw, json)
Hash identifier: nUg+u5ibyiQXAaKpqWD9tUc1jULVGKztPT3hWdoUsog=
Subject key identifier: 70:C5:EC:1F:EE:C6:37:04:9F:81:A2:75:07:2B:B0:64:33:84:C4:52
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B36
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/17CC3DE28AAA11ED88E693BCF1222468.roa
Signing time: Mon 02 Jan 2023 14:31:07 +0000
ROA not before: Mon 02 Jan 2023 14:31:03 +0000
ROA not after: Thu 02 Jan 2025 14:31:03 +0000
asID: 400039
IP address blocks: 154.16.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 2 14:31:03 2023 GMT
Not After : Jan 2 14:31:03 2025 GMT
Subject: CN=63b2eaab-0a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:28:16:20:d6:a4:ad:b9:a4:3f:42:1f:64:
95:05:64:7d:80:31:e3:ea:f8:de:76:08:dd:ff:e0:
f0:74:15:81:bb:e0:08:5d:a3:3c:4f:d3:7c:ad:2a:
e8:8b:be:21:75:5b:32:bd:68:11:f2:a3:aa:3d:84:
23:15:ee:10:0c:c4:da:5b:92:0c:66:86:b0:8d:40:
08:14:4e:9c:c6:30:b2:44:40:a9:6a:cc:c1:af:47:
3c:c6:00:e5:fb:ae:d1:50:98:fd:c2:da:d3:32:97:
34:ed:43:09:4c:eb:b9:c0:a3:92:c5:e9:40:b6:c8:
a5:df:75:18:9a:d0:cc:3e:cd:d5:bd:c7:21:91:b2:
70:dd:90:ec:ce:96:1b:ab:0a:22:ba:e5:41:af:43:
4b:35:76:e7:6d:f3:8f:1e:9f:4f:c6:3b:b6:18:ca:
ce:d2:35:c4:77:cd:15:94:6f:20:56:00:a2:ac:ce:
85:32:54:fb:09:6a:20:3d:ef:da:97:a4:62:61:1c:
fe:c1:9a:73:62:f6:5a:fb:96:d3:c1:06:51:30:e6:
8c:7f:b1:82:cb:9c:55:68:b5:4e:ee:ec:87:46:3a:
c9:6e:96:83:42:8e:27:1c:36:b4:a3:8d:b2:60:88:
9f:03:3d:74:30:ee:74:be:2e:9d:d4:c5:f1:1c:6e:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:EC:1F:EE:C6:37:04:9F:81:A2:75:07:2B:B0:64:33:84:C4:52
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/17CC3DE28AAA11ED88E693BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.37.0/24
Signature Algorithm: sha256WithRSAEncryption
09:07:a1:fc:49:4e:e3:68:e8:cb:e3:b0:ef:53:cc:8e:9d:e2:
b6:bd:36:6a:ef:71:84:3d:8e:ee:ab:6f:e7:4b:e8:37:67:d6:
c4:04:2e:6c:3a:64:a9:a8:64:a7:f1:2c:7e:bf:24:91:7a:35:
23:ec:4a:2e:c2:5c:eb:3d:ac:9d:df:e3:d7:8f:a4:33:c4:e7:
38:2b:5f:0b:18:fc:1f:a0:df:cc:db:d5:3e:b7:4a:2b:0b:b3:
44:ba:85:17:fc:7d:45:32:97:1d:3f:1c:64:c3:79:04:13:c2:
aa:7b:77:61:76:9c:23:c3:b0:47:74:3a:54:65:1c:6c:20:cf:
8e:51:29:8e:e7:ae:d0:93:4f:ce:7c:51:49:86:d4:35:55:a9:
09:1d:0d:3e:c1:5f:c7:37:c0:40:e4:fc:6a:79:9f:0c:39:84:
a6:0d:a9:fc:9d:a4:99:29:f8:7e:7e:19:70:84:b4:3a:b4:a9:
3d:de:d4:6e:50:8b:f6:d8:ca:50:2d:b3:69:17:27:0e:25:6e:
89:a3:3d:1f:06:29:79:e3:5a:a6:c2:71:9c:7d:57:28:ff:8d:
10:db:38:88:cf:56:e7:8f:3c:37:38:99:4c:cc:da:e3:de:a1:
29:53:30:33:c8:99:41:75:2f:35:d3:80:ec:a6:81:ec:92:44:
30:ad:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:25:28 2024 by rpki-client on console-fra.rpki-client.org