Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22F33C9CF1BB11EE9E2A5397775412E6.roa
File: 22F33C9CF1BB11EE9E2A5397775412E6.roa (raw, json)
Hash identifier: +PN6jsBr5R3hffDI7tcQtGjAndRJ7RkTJDdMb0Lsgwo=
Subject key identifier: B0:0B:01:63:AD:DF:1D:33:F0:34:6B:A9:F9:07:1C:EC:05:E7:42:73
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1591
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22F33C9CF1BB11EE9E2A5397775412E6.roa
Signing time: Wed 03 Apr 2024 13:07:34 +0000
ROA not before: Wed 03 Apr 2024 13:07:31 +0000
ROA not after: Fri 03 Apr 2026 13:07:31 +0000
asID: 396356
IP address blocks: 154.16.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5521 (0x1591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 3 13:07:31 2024 GMT
Not After : Apr 3 13:07:31 2026 GMT
Subject: CN=660d5496-58ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:23:dd:61:f5:f9:e0:9f:4d:83:f3:24:0d:
3f:8a:0e:4d:32:2f:75:48:65:5c:3e:2c:4a:b0:a9:
c7:8f:50:c8:f2:4a:15:01:0f:ad:e0:e2:14:5d:27:
c9:cd:f7:3b:4e:c5:0d:6f:b4:5d:02:1b:ed:db:e2:
77:c0:80:f5:5e:f8:11:10:1e:19:14:6b:55:0f:47:
0e:77:60:d8:95:91:3e:0f:f1:29:ee:a6:3c:1b:7d:
d8:c7:94:37:5e:25:73:69:5c:3e:cd:f5:fb:80:4e:
d8:fe:ff:11:c3:56:94:68:8b:8f:75:9c:59:5d:eb:
12:00:e5:c8:1c:80:a9:43:d9:fa:17:0b:98:f1:ac:
c4:dd:2f:87:92:c2:81:f4:05:01:86:95:16:5e:53:
53:2b:6b:6e:42:60:46:84:18:49:bb:27:56:84:aa:
9a:c2:e2:49:f7:82:d1:1b:10:b7:6e:3a:46:e1:68:
10:3d:1a:cf:d3:43:09:f8:e1:80:11:90:1e:c2:c4:
1d:26:4e:8b:6a:af:35:0b:87:8d:1b:1b:1a:09:08:
3b:78:ac:68:b3:00:3f:61:1b:40:df:8d:c8:a3:34:
21:84:b7:35:00:05:d0:6b:cb:11:17:10:d8:f0:a0:
f7:79:18:69:7d:e1:ca:bc:de:ac:56:37:64:d7:b5:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:01:63:AD:DF:1D:33:F0:34:6B:A9:F9:07:1C:EC:05:E7:42:73
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22F33C9CF1BB11EE9E2A5397775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ee:ff:54:79:f9:c5:08:44:1e:98:1d:30:c3:bd:02:d4:9e:
cd:f1:ca:2b:4a:d9:89:b1:a3:e6:9f:68:84:72:e1:09:a3:db:
36:04:a4:b0:7e:cb:1f:73:51:5e:3b:53:b2:47:be:25:91:dd:
65:27:11:1a:33:6a:5c:f1:84:b2:3e:60:9f:de:ab:25:eb:18:
da:55:a9:9e:2e:76:46:7f:1f:dd:e9:f7:fa:ae:51:b5:90:c4:
18:28:8c:dc:c4:71:02:25:19:0c:bd:f0:59:63:32:52:9f:db:
2c:cb:17:35:73:90:04:34:c7:4b:ec:89:da:ed:80:a9:5a:7e:
e5:4e:e2:b2:c1:dc:0d:bb:fb:cf:b0:34:b6:10:82:40:d9:97:
fa:ef:f8:64:8d:7f:8e:0f:d8:71:bd:9f:05:e8:44:9e:25:a4:
73:b1:1f:43:a2:99:d6:ee:a1:8d:9b:05:fc:58:55:56:97:97:
1e:15:bf:dd:93:1e:35:1f:20:ac:8b:a8:af:7e:41:f7:fb:a3:
93:6c:d5:11:55:5f:08:9f:c7:e7:f7:8a:00:9b:7b:a0:b7:bf:
a6:73:b2:03:a4:f6:9d:ff:93:2f:58:ab:50:a5:a2:a3:b0:60:
1c:b7:3f:d6:6d:dd:72:5b:82:71:c5:99:fc:e5:67:31:be:ab:
ac:6d:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:52:47 2024 by rpki-client on console-ams.rpki-client.org