Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/214E12305F3711EDBB26E4CDF1222468.roa
File: 214E12305F3711EDBB26E4CDF1222468.roa (raw, json)
Hash identifier: nKSyalEzKwsmhqhT+/ObY/LXanMtXQggUsLi+s8f5IM=
Subject key identifier: 25:48:8C:80:30:FF:34:AC:D4:41:85:BE:40:2E:4A:53:B0:DF:EA:E8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AA2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/214E12305F3711EDBB26E4CDF1222468.roa
Signing time: Tue 08 Nov 2022 07:29:51 +0000
ROA not before: Tue 08 Nov 2022 07:29:46 +0000
ROA not after: Fri 08 Nov 2024 07:29:46 +0000
asID: 212238
IP address blocks: 154.16.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Apr 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2722 (0xaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 8 07:29:46 2022 GMT
Not After : Nov 8 07:29:46 2024 GMT
Subject: CN=636a056e-e46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e5:39:27:99:bc:b6:22:a2:ee:f6:f3:ba:a9:
92:0a:2a:79:47:8b:c3:2a:28:13:ab:00:86:a6:56:
85:b2:c9:2f:26:44:20:0a:5d:43:92:a8:bf:4f:90:
5d:01:d6:91:a9:36:1f:ce:ba:bb:70:46:ac:7b:1d:
06:18:a5:26:a7:14:a0:3a:69:ff:4a:b8:3d:6e:3c:
4b:fe:b8:2e:17:30:f3:ba:3a:94:91:36:6e:62:51:
62:cb:eb:ff:93:a1:9c:52:e1:56:7e:9c:68:4f:cc:
bb:b8:54:95:28:f3:ad:b9:c6:67:15:4f:61:f5:58:
a3:2d:df:c3:90:f6:50:cf:32:03:13:f6:9c:68:ac:
71:c0:be:db:98:e5:26:47:4f:69:36:c2:c0:9b:ad:
d3:e6:05:e2:34:a0:34:34:8c:8d:08:8a:c6:77:1d:
de:d1:43:a9:2a:75:48:a8:48:4c:e6:f6:89:05:a9:
3f:86:e0:ae:02:56:09:dc:19:99:91:37:f4:f3:60:
17:e6:41:d4:67:a7:a4:30:85:59:68:16:b8:9c:df:
77:f8:81:0f:91:62:8b:6a:48:06:73:14:58:26:24:
1f:5a:40:20:1d:c6:fe:74:10:96:bb:3a:07:82:00:
6a:83:02:d7:7a:a8:d8:76:bd:ed:f5:5c:0d:a4:66:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:48:8C:80:30:FF:34:AC:D4:41:85:BE:40:2E:4A:53:B0:DF:EA:E8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/214E12305F3711EDBB26E4CDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.221.0/24
Signature Algorithm: sha256WithRSAEncryption
50:86:9d:43:98:c3:a7:71:8d:95:9b:6c:96:f2:05:ba:15:8a:
af:94:18:ff:46:a3:7b:20:2d:7f:88:e7:19:60:d6:36:9f:85:
dc:84:b8:64:e1:50:ab:30:95:ca:fd:68:9f:f9:86:0b:4e:dd:
42:af:6c:6a:41:f9:02:f5:86:c1:8a:f0:79:2c:ad:80:b2:b4:
ae:db:9c:38:f8:5c:62:e2:11:ac:d2:91:36:a6:f7:09:f9:b0:
e2:6a:f3:b1:84:c2:8f:19:5c:57:49:35:a6:4a:dd:ee:60:03:
b9:31:bf:42:21:2c:24:f3:d0:37:6e:91:0e:68:a7:22:88:c2:
06:84:0e:cf:1b:51:bd:4c:cf:04:44:5e:90:04:56:38:4c:70:
6e:b6:0a:ea:1d:c4:8b:c3:d4:ec:a1:56:eb:54:b8:ca:81:b5:
f4:0f:d7:ba:10:e7:d1:32:77:9d:f0:df:f1:b9:e5:94:d2:35:
47:eb:cd:fc:fa:76:e1:c8:29:b7:3e:08:9d:b2:cd:82:4e:39:
d5:93:53:ad:03:0c:e7:d3:73:e4:b8:30:cf:45:99:5d:01:f0:
46:fb:51:23:e9:26:c7:02:93:25:3b:c2:df:86:34:f6:54:2f:
eb:cb:3c:38:d8:10:10:81:69:07:07:00:81:4e:e5:31:2a:2f:
c0:bb:84:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 02:19:27 2024 by rpki-client on console-ams.rpki-client.org