Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1A298DE8903811EFA29EE587762E951A.roa
File: 1A298DE8903811EFA29EE587762E951A.roa (raw, json)
Hash identifier: AZkbnnmm4+UoWhj5wpxsXW2QXHSG/M4HIu+ioPDtO7s=
Subject key identifier: 73:BE:2F:A8:56:4C:B6:0B:73:AF:D0:5A:3C:69:E2:99:69:21:73:75
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1881
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1A298DE8903811EFA29EE587762E951A.roa
Signing time: Tue 22 Oct 2024 05:40:11 +0000
ROA not before: Tue 22 Oct 2024 05:40:07 +0000
ROA not after: Thu 22 Oct 2026 05:40:07 +0000
asID: 212238
IP address blocks: 154.16.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6273 (0x1881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 05:40:07 2024 GMT
Not After : Oct 22 05:40:07 2026 GMT
Subject: CN=67173aba-26fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:80:23:4f:7b:55:aa:f8:ce:03:d9:d7:95:
c5:bf:09:75:8a:64:eb:55:ea:f9:77:08:ad:2b:fb:
80:55:45:9c:e4:62:87:97:39:c8:8b:3e:b8:e4:9d:
e0:4f:78:de:9e:5c:2b:52:fd:b3:1a:ca:41:a7:14:
dc:4a:ec:95:a6:da:aa:fa:a6:99:40:7b:7b:45:0e:
d4:55:b4:59:7f:0f:00:d2:0c:4f:1a:c9:cd:14:21:
6c:ba:2b:67:e1:ab:38:6f:f6:41:eb:82:ea:1c:0d:
3d:42:f6:bb:0a:c4:34:15:1b:1d:4f:10:d6:3f:51:
ea:b2:c7:4d:f2:1b:92:a3:48:9c:86:65:60:b1:aa:
d9:ef:08:fd:8a:02:4d:4d:24:4c:b1:79:9d:44:e1:
d8:1b:08:2a:24:b4:0d:ed:a9:8f:19:e5:3c:d2:5a:
ce:37:45:32:b6:7f:99:1e:83:de:b1:70:fd:3b:2c:
77:fd:f9:1a:84:05:a4:b8:ad:15:be:f8:07:a3:90:
7d:99:fa:f7:73:55:a1:87:b8:80:6e:bb:a8:ae:40:
da:ae:14:4b:70:55:a0:a2:fc:ac:41:d1:de:73:4c:
0e:5e:5a:24:b9:ed:8f:05:b6:e3:a3:f3:9a:97:4a:
49:8c:02:c1:57:e5:4b:0f:98:e4:68:5d:54:79:e3:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:2F:A8:56:4C:B6:0B:73:AF:D0:5A:3C:69:E2:99:69:21:73:75
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1A298DE8903811EFA29EE587762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6e:a5:6d:e8:17:df:7f:54:54:ff:8b:cc:62:34:6a:42:6c:
97:2b:44:f7:59:25:9d:ce:24:b0:89:b8:7a:3b:e8:b7:8b:f0:
da:37:66:3c:f4:5e:36:4b:83:9b:3f:6e:8e:d5:fc:ee:7a:98:
14:de:2c:fa:e8:db:30:81:85:e5:bb:d1:2f:d3:cf:56:8e:a4:
ad:df:16:16:73:8d:cc:55:60:d9:c6:20:0b:9e:59:3e:b8:e2:
ff:49:73:bc:8f:4c:13:01:1b:33:4d:81:77:d9:1d:ab:42:68:
18:ae:75:25:f0:96:85:92:1b:4f:76:27:4d:ec:61:03:0c:87:
d2:94:49:a7:89:9a:99:70:4c:b8:a7:70:53:b6:e0:b9:a2:4c:
56:9f:a4:4a:9a:04:38:8a:b1:0b:93:d6:b0:87:5a:d6:5b:11:
cc:00:73:43:1e:e3:13:e3:88:7f:61:ab:5a:05:aa:78:e9:fa:
0c:03:10:60:bf:43:6c:af:f1:a5:8a:0d:89:00:35:da:56:38:
5c:ce:be:43:21:17:54:9e:4d:2e:21:17:6c:4c:cd:42:54:60:
e1:a2:13:c5:aa:b5:f9:a7:c2:1b:9f:d0:a9:62:6f:7b:c6:9e:
32:ed:78:36:c5:3d:58:c7:a2:f5:07:b9:05:e1:87:87:17:18:
59:43:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:45 2024 by rpki-client on console-ams.rpki-client.org