Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25250EFA110F11EFB4B0C76E017001B1.roa
File: 25250EFA110F11EFB4B0C76E017001B1.roa (raw, json)
Hash identifier: oZsRzba76LQNYxv2uBoKXgFoSDz2knVw6TVkvd2J7zk=
Subject key identifier: 9C:18:5A:B8:FA:C4:60:AD:C3:08:36:99:74:B6:4C:C1:42:5C:DE:61
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 164B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25250EFA110F11EFB4B0C76E017001B1.roa
Signing time: Mon 13 May 2024 09:57:02 +0000
ROA not before: Mon 13 May 2024 09:56:58 +0000
ROA not after: Wed 13 May 2026 09:56:58 +0000
asID: 3320
IP address blocks: 154.16.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5707 (0x164b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 13 09:56:58 2024 GMT
Not After : May 13 09:56:58 2026 GMT
Subject: CN=6641e3ee-04fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:2d:a0:99:9e:b8:f6:e2:b0:65:58:69:68:
71:69:3d:7c:af:5c:b6:62:b1:06:cb:dc:a3:6d:43:
c5:65:01:2a:5c:8e:0c:e8:68:68:f8:a8:55:b0:fe:
91:ec:b3:88:43:f5:10:e0:b3:98:23:dd:41:c7:a6:
a6:a5:24:07:79:7b:6f:ee:2c:f0:2e:38:c4:b6:60:
79:00:d5:59:4d:e8:3b:1b:47:11:3d:c8:db:e1:b9:
f7:6a:f8:ce:3c:25:43:2c:27:61:4a:34:19:20:9c:
e3:70:61:ec:7e:9c:5b:d1:26:8a:5e:71:6c:2e:be:
6b:40:df:f5:5f:89:9f:30:b4:a9:02:da:2c:40:47:
db:a2:69:26:f8:7d:ab:6d:3f:40:d5:96:09:b9:de:
d0:f3:a9:ed:70:96:3e:d0:37:b3:65:73:b5:bb:34:
eb:3a:f6:c4:ce:74:a9:fb:80:33:70:bb:5b:75:2d:
31:38:b7:03:0d:23:35:ea:a2:cc:df:d9:c5:88:08:
72:53:ac:c0:82:2e:93:d8:c8:ce:5d:0c:61:07:06:
23:75:53:65:bb:07:e8:1a:f3:08:a9:09:b1:8e:2e:
4a:55:53:6d:73:78:61:54:47:a1:62:b7:25:b5:6b:
16:8a:22:61:58:b5:3c:3c:56:a4:e6:cb:8c:3e:be:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:5A:B8:FA:C4:60:AD:C3:08:36:99:74:B6:4C:C1:42:5C:DE:61
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25250EFA110F11EFB4B0C76E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ed:51:f9:1f:0e:d1:e4:a9:14:f8:42:c3:32:5d:ee:fd:bb:
c9:ff:0d:69:7f:f2:7f:8d:ce:5d:00:1d:0b:37:0e:69:66:03:
a9:06:85:06:3f:74:59:b3:bb:7f:44:1f:b1:42:37:9f:d2:c3:
57:e5:f0:01:2f:2f:36:29:1f:93:81:60:2d:1e:a1:0a:f8:16:
3c:6a:f6:0c:a2:cf:c8:8b:f9:a5:40:ee:54:9e:32:b8:ce:81:
95:c8:7a:2b:dd:47:ef:38:cf:b6:16:e6:4a:8d:d5:c6:fe:8e:
a2:87:b5:53:31:d2:ff:4a:56:f0:8b:66:33:bd:1a:6a:65:0f:
b7:7d:ca:d3:2c:88:8b:ee:36:34:24:b8:cc:0c:9e:43:33:52:
0f:26:27:49:73:a7:d4:c5:ee:36:ae:35:8d:ed:9a:a6:5c:54:
1c:3e:76:3b:b4:af:b0:a7:1f:57:8b:a3:12:47:57:df:d4:9a:
ab:3c:71:28:d9:68:44:9d:49:75:2c:55:1d:62:a2:6d:4d:c9:
31:db:85:86:9e:c6:a5:ec:b6:30:2f:fc:71:4a:41:95:c0:b8:
6b:4d:77:8c:d0:b2:13:d0:a0:7d:b2:d6:9c:9e:d9:b1:d2:7c:
d2:fb:59:88:c7:fd:e2:fd:fb:67:e4:8d:b4:84:5b:c1:13:cb:
f6:6b:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:54 2024 by rpki-client on console-fra.rpki-client.org