Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/23AADB986B4D11EF87651FA7762E951A.roa
File: 23AADB986B4D11EF87651FA7762E951A.roa (raw, json)
Hash identifier: gMlMyCcnyZUhiVR9Ar8nCAqxeXB2rkWNv+Uy0+SZnUY=
Subject key identifier: FA:0F:1C:AB:73:59:54:F3:36:0D:75:5F:0D:A1:85:F0:EB:B5:39:5C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17F3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/23AADB986B4D11EF87651FA7762E951A.roa
Signing time: Thu 05 Sep 2024 06:07:33 +0000
ROA not before: Thu 05 Sep 2024 06:07:29 +0000
ROA not after: Sat 05 Sep 2026 06:07:29 +0000
asID: 834
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6131 (0x17f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 5 06:07:29 2024 GMT
Not After : Sep 5 06:07:29 2026 GMT
Subject: CN=66d94aa5-491d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:16:57:8e:7f:35:c2:3b:09:a5:d6:8b:6f:6d:
f6:40:1a:9c:13:33:d6:43:af:32:ea:1d:4e:e3:8b:
88:f9:f0:d1:83:0b:09:f7:62:fa:d5:a5:16:13:0b:
d1:fc:4c:3b:51:bc:16:89:f1:75:c1:c6:18:3d:f4:
e0:ae:57:9e:57:34:85:27:38:df:51:2e:13:19:04:
b4:52:c0:13:8a:08:0a:8b:89:e1:ab:db:69:08:2a:
90:02:28:c5:9e:85:04:5c:45:bc:e3:68:73:94:27:
d9:c7:9b:18:e3:43:9e:28:f3:37:14:f9:9a:c2:50:
0e:e9:78:7c:08:64:57:cb:f4:47:64:9a:04:fd:b9:
9e:16:eb:60:44:a4:3c:06:93:af:c2:04:8c:9d:5d:
94:32:12:e0:d1:26:9a:89:2f:14:f0:63:13:90:56:
b7:62:be:ce:95:cc:7c:15:0b:f3:2e:6d:b6:f6:ee:
84:3e:e4:67:0b:b7:48:e4:eb:07:7d:bc:1d:91:b0:
09:ed:42:6c:a0:fb:ba:de:04:f0:94:a7:99:29:4c:
73:d9:50:0d:a7:e8:8d:48:7b:d0:f5:cb:89:74:62:
aa:c8:86:83:47:05:6d:f4:d4:c5:69:88:8b:60:8b:
81:c5:3a:f9:57:30:2a:0c:be:a1:76:73:4f:a2:6f:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:1C:AB:73:59:54:F3:36:0D:75:5F:0D:A1:85:F0:EB:B5:39:5C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/23AADB986B4D11EF87651FA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:12:21:d0:99:a5:8a:fa:0a:c4:e1:78:45:7c:e7:aa:a6:dd:
7c:61:3e:62:10:0f:51:a6:47:82:dc:38:2d:39:11:59:53:77:
ab:07:20:16:c1:d9:2e:a9:e3:5f:c7:17:80:81:51:18:e7:27:
ac:b5:07:43:6a:df:ea:fa:94:98:1f:cf:0a:43:93:70:95:3d:
f3:71:ac:56:1b:d5:2c:f0:92:79:40:8d:c1:31:e8:b2:5c:84:
93:ca:89:84:8d:c4:4e:33:a6:98:d9:8a:97:34:f2:1b:9e:c0:
24:b6:ce:dd:79:79:55:94:39:8f:36:b6:76:11:d3:33:0e:96:
48:67:c4:61:af:2b:8d:18:40:41:5c:67:3f:af:49:fe:96:a0:
fc:a3:9c:72:55:43:f3:98:e6:4c:c8:5c:71:cf:ce:02:30:2c:
6a:f2:04:38:f7:e7:5d:8e:75:b9:b6:48:91:f0:f0:f6:98:6a:
da:0a:f3:24:76:41:db:80:7e:6f:c7:e0:18:90:48:85:83:4b:
4a:2a:8e:ea:bb:02:a6:1e:5c:6a:e3:41:55:27:24:33:ae:77:
41:5d:bd:4d:47:5a:50:9a:1b:e2:a1:51:8d:3b:b5:c9:33:12:
bb:80:4a:e6:7e:d7:7e:33:e5:90:7c:63:e3:ab:77:8f:c9:57:
dd:ce:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:57 2025 by rpki-client