Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B26FFA88C1D11ED9D5E36BCF1222468.roa
File: 1B26FFA88C1D11ED9D5E36BCF1222468.roa (raw, json)
Hash identifier: fTLf9Cc97TfJhDIc4v1xYLgEGbB0NsFApDvOefPUCtg=
Subject key identifier: 8E:01:36:95:8F:03:35:92:1F:E1:68:9A:EA:AF:56:C5:25:FD:41:32
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B49
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B26FFA88C1D11ED9D5E36BCF1222468.roa
Signing time: Wed 04 Jan 2023 10:46:56 +0000
ROA not before: Wed 04 Jan 2023 10:46:52 +0000
ROA not after: Sat 04 Jan 2025 10:46:52 +0000
asID: 32181
IP address blocks: 154.16.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2889 (0xb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 4 10:46:52 2023 GMT
Not After : Jan 4 10:46:52 2025 GMT
Subject: CN=63b55920-736d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:54:e6:3c:75:a2:58:a2:db:7e:7e:26:1c:
79:fc:9c:83:d5:83:e2:1b:72:da:1a:bf:69:4a:b2:
1a:8c:7c:57:12:8f:33:8f:ab:3b:4b:84:3f:c2:d6:
d3:c6:7c:a0:b6:76:10:e8:41:09:23:ce:bd:b3:78:
5b:b1:fd:1c:b1:8f:6e:37:fe:78:50:f3:92:ba:6d:
42:bd:7d:3c:7f:7d:61:6f:1b:1b:33:86:98:33:02:
aa:8b:a6:a1:c8:aa:44:92:a4:4f:fd:06:3d:12:28:
ea:b7:9f:cd:d9:39:25:a5:a8:7c:84:91:ee:12:56:
78:cf:31:b9:ee:db:2a:6c:c0:98:6b:d7:d1:6d:ff:
45:b2:7c:c0:32:86:e1:19:f6:7e:01:b1:64:9a:24:
81:73:33:55:55:24:7f:51:9c:94:f0:ee:a8:7d:87:
df:24:73:a8:ff:7c:96:0c:2f:cb:d6:2c:9d:b1:8e:
b0:85:ca:69:a1:46:8d:cc:60:53:0f:bf:8b:e4:a0:
d9:7e:41:0b:55:77:63:28:2f:33:c2:03:6b:b6:f0:
d9:6d:08:d4:e6:37:f0:10:84:ce:52:36:3d:b2:ae:
60:66:19:8f:49:06:a7:84:de:35:7c:66:78:e6:3c:
e4:e4:ef:0c:9c:f8:5b:78:14:3d:8d:1c:29:85:d3:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:36:95:8F:03:35:92:1F:E1:68:9A:EA:AF:56:C5:25:FD:41:32
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B26FFA88C1D11ED9D5E36BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.148.0/24
Signature Algorithm: sha256WithRSAEncryption
58:df:72:9b:57:61:26:82:26:07:98:b3:03:34:5d:69:02:c7:
32:b5:29:77:7f:7d:7d:17:1b:dd:d4:a4:28:8a:d9:bb:9c:17:
44:37:e9:13:16:ef:15:a3:d8:87:2b:f4:af:f1:36:e4:d9:2a:
93:7c:85:cd:1a:41:ce:62:22:5e:80:a8:f1:a3:3a:30:16:a7:
60:19:1b:c6:ac:ad:0a:69:a0:da:56:c5:b9:1a:a3:3e:78:41:
77:db:d3:fa:02:e6:9b:3c:b2:0d:5e:51:51:3a:e0:50:c6:5b:
78:a8:eb:6d:22:68:80:19:9e:4e:28:b4:a3:4f:3f:35:15:47:
93:0b:19:61:98:8d:ce:b6:f6:06:99:d5:e0:05:0d:d6:2e:04:
a7:d3:b7:d9:fb:89:44:71:46:87:a8:a0:85:af:0a:e5:4c:38:
48:0e:b9:b2:40:1c:ee:29:2b:45:96:f8:46:b5:1d:0f:f2:d2:
a1:33:ba:3d:71:df:2f:e0:bf:45:ed:46:dd:d2:69:2d:af:7b:
11:98:ab:7a:99:51:ff:bd:6b:0f:fa:5f:c6:d7:d6:f8:c9:e9:
c0:3c:3d:92:28:46:10:d3:df:25:77:01:9c:c8:4f:5c:e6:f0:
4e:09:5f:b5:0b:76:77:81:12:88:08:1e:8c:71:ac:f4:be:92:
74:2f:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:33 2024 by rpki-client on console-fra.rpki-client.org