Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2813FC20DC1411ECB09588BEF1222468.roa
File: 2813FC20DC1411ECB09588BEF1222468.roa (raw, json)
Hash identifier: MweNRhx9IVDkmp4eUSSk714CMV2zR6PeovzcIoYKUXg=
Subject key identifier: B6:37:83:2D:E5:CE:53:B3:50:24:94:46:E3:89:59:DE:30:BB:8C:9A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 086B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2813FC20DC1411ECB09588BEF1222468.roa
Signing time: Wed 25 May 2022 10:19:27 +0000
ROA not before: Wed 25 May 2022 10:19:23 +0000
ROA not after: Sat 25 May 2024 10:19:23 +0000
asID: 20278
IP address blocks: 154.16.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 25 10:19:23 2022 GMT
Not After : May 25 10:19:23 2024 GMT
Subject: CN=628e02af-c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:e2:f8:d7:aa:01:c7:48:6b:66:d0:1a:9c:
65:45:fd:d9:ca:1e:41:22:c8:eb:1f:14:a7:b7:72:
4c:a8:a7:a6:88:c9:db:ae:9a:68:eb:a4:19:cc:dc:
e0:1f:3a:72:27:0c:7c:bf:ee:f2:46:fe:d8:ea:4b:
95:b8:02:fc:03:81:da:77:d8:e7:fb:4d:83:08:9d:
5a:9e:57:48:0e:6e:e7:56:5a:ca:90:3d:97:5b:d1:
66:48:c5:cf:26:56:a4:0b:8c:8f:1d:b3:0e:cb:aa:
12:d7:20:a1:4c:10:b0:79:8c:41:2a:ad:ff:64:8d:
cb:19:70:6c:38:0b:e4:e5:0d:50:81:5d:bf:91:ad:
37:aa:fa:22:f3:d6:9c:34:b0:e0:3a:9f:71:9b:0c:
8b:c5:d6:f0:7c:4a:28:c6:3a:f2:5d:3a:99:f1:56:
f6:41:06:c2:17:4e:6f:f6:6a:45:67:e5:bf:67:09:
77:c1:97:28:30:4a:25:08:0c:0c:b8:94:55:20:d7:
e0:54:e9:39:f0:6b:e4:f0:6a:51:23:1c:3d:9b:85:
71:f0:6c:f2:c7:89:d1:06:ba:b9:38:e7:72:d8:f8:
25:e2:e2:ab:cc:3b:25:3a:84:db:48:a8:82:50:3d:
d9:fa:1f:8c:46:43:34:4c:4a:9e:48:cb:00:2e:d1:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:83:2D:E5:CE:53:B3:50:24:94:46:E3:89:59:DE:30:BB:8C:9A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2813FC20DC1411ECB09588BEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.205.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:fa:59:98:21:94:48:39:92:2b:d0:ad:2f:0c:a1:77:b4:06:
c0:9a:c7:04:d1:e1:d2:5b:40:57:a8:63:b0:be:69:d0:95:1c:
ae:43:7d:03:81:b7:bb:ee:e1:a6:d8:fe:84:d7:2b:31:7e:bc:
19:e6:a9:ec:59:9e:e8:c9:65:c9:8e:ad:38:f3:27:94:fc:e3:
a8:61:d8:c5:c9:b2:7b:47:6b:8a:4e:f6:fa:b2:19:2f:d1:a2:
78:f8:c5:3c:43:4b:b8:ad:08:8c:d1:17:d3:cb:31:69:f5:1b:
09:f0:58:71:0f:97:57:4c:2e:80:b5:aa:cc:7d:6b:a5:f8:60:
40:96:35:0e:76:40:1b:d1:9f:ad:46:87:8e:00:97:e5:b8:7f:
7b:7f:d6:38:61:c9:50:8a:a7:29:6d:4e:f8:3a:a1:4e:dd:d4:
02:f7:b1:39:a3:1f:73:e3:66:78:78:3e:56:11:26:39:f0:73:
89:de:27:8c:de:8c:8b:c9:17:49:97:86:ab:af:9e:06:39:2a:
11:13:74:17:5d:b2:b8:a4:bd:74:c1:66:c7:13:d7:3b:29:7b:
49:40:c6:b4:f6:14:77:aa:b6:68:fe:65:3d:ff:b4:f2:20:6c:
8e:a5:3f:25:9a:be:df:76:4b:dd:19:d3:e6:2a:26:35:6e:b6:
72:b3:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:44:18 2024 by rpki-client on console-ams.rpki-client.org