Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1CD76FEAFCEC11EEB14C9842017001B1.roa
File: 1CD76FEAFCEC11EEB14C9842017001B1.roa (raw, json)
Hash identifier: wYTqUdTTPuQCbLnnD4Xx6erFrKMnhAbERcuNgWs2YIE=
Subject key identifier: E8:31:CA:B8:30:63:95:F3:23:F2:91:97:91:81:6F:17:26:5C:14:F0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 15E1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1CD76FEAFCEC11EEB14C9842017001B1.roa
Signing time: Wed 17 Apr 2024 18:55:52 +0000
ROA not before: Wed 17 Apr 2024 18:55:48 +0000
ROA not after: Sat 18 Apr 2026 18:55:48 +0000
asID: 140208
IP address blocks: 154.16.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5601 (0x15e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 17 18:55:48 2024 GMT
Not After : Apr 18 18:55:48 2026 GMT
Subject: CN=66201b38-476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:24:ce:a9:d8:5e:79:dc:0e:72:58:30:ca:
f1:52:3a:60:72:6e:c8:0a:ab:4b:2c:39:66:8e:3f:
ee:7e:bf:79:a5:f1:25:0c:bb:75:13:36:f1:bb:99:
87:22:81:68:c9:58:1c:af:dd:c6:29:1c:26:2c:4e:
c2:4e:7d:af:c8:83:de:e4:4e:4c:a1:08:19:e0:2c:
ee:e4:d0:3a:91:4d:c1:9c:cb:bb:17:62:3a:33:70:
46:0c:5b:0d:fd:13:b6:24:46:c3:a1:88:f7:47:64:
e5:09:74:19:3b:75:67:1a:44:67:c5:50:2f:6a:54:
ea:0a:bd:bd:75:53:1e:2c:5c:9b:6f:a6:b7:70:2d:
7c:3d:c9:79:37:8e:dc:19:53:ee:7f:f0:c3:75:7f:
89:db:e7:81:bc:a0:5f:c4:c7:28:49:36:8d:0a:31:
ec:30:9c:45:5a:29:5c:05:a3:97:bc:25:ff:d1:c2:
2a:78:6e:63:0e:fa:bd:c3:13:e7:d6:e8:82:b4:1d:
d9:5d:9e:93:ea:8b:40:16:3e:c7:ba:a3:81:e0:40:
c0:35:c4:4c:98:7c:e7:59:65:05:93:09:c1:a4:fa:
3b:e5:22:66:3b:16:4e:0f:dc:aa:7c:f5:e0:85:30:
e8:fc:59:93:60:7c:31:1e:de:8d:03:bd:d6:13:f5:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:CA:B8:30:63:95:F3:23:F2:91:97:91:81:6F:17:26:5C:14:F0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1CD76FEAFCEC11EEB14C9842017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.141.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1b:fc:41:0f:4b:2a:71:b2:9d:c6:20:4e:5a:56:a2:ce:bf:
aa:b7:a9:5a:7d:f7:2a:7b:98:e6:99:03:2c:75:19:f6:75:26:
ac:ba:21:82:63:be:bc:27:26:73:e5:1c:73:09:1e:c2:4f:a3:
29:c5:15:13:f6:8a:5f:2f:84:a5:17:b1:6f:b0:29:28:01:7c:
8f:c9:4c:07:2f:ec:71:6f:93:07:c6:5a:fc:d7:7c:26:cf:ff:
bf:e7:e1:f0:21:b2:ba:2e:1c:35:d9:0d:4c:ea:68:3d:1a:fc:
dc:64:9c:fc:7c:9d:bd:0e:22:11:c8:7b:3d:6b:6f:8b:ed:9b:
3b:9a:76:a8:ed:5f:82:ce:a2:e3:43:97:64:8e:81:33:2c:cb:
31:ef:8e:e3:86:02:f8:e6:b3:7b:54:b7:db:41:74:f4:3d:f3:
9e:0c:d2:90:70:fd:a7:ec:a8:98:31:e9:26:45:de:56:7a:54:
f9:11:f1:a2:9d:18:84:00:c3:24:b7:34:41:3c:b4:0a:0c:0d:
03:03:c0:bd:46:75:97:51:e4:67:7f:c9:1a:a5:f9:6f:35:1a:
7c:79:5e:1f:e3:0e:71:d1:a7:48:39:98:c3:a8:d6:7a:74:89:
b4:f9:36:ed:9c:61:4c:da:61:a9:7c:76:ac:c3:80:e7:53:bc:
12:03:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:17 2024 by rpki-client on console-fra.rpki-client.org