Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2ADF007638ED11EE96FC8B734AD9E6FC.roa
File: 2ADF007638ED11EE96FC8B734AD9E6FC.roa (raw, json)
Hash identifier: AQ7Zl0uK9Dhls74TBLjHcyw5Q3fWnuw6f6Lpp0IgCMw=
Subject key identifier: E2:A2:7D:97:BC:E8:B0:77:F1:71:1F:AE:8E:5A:64:C9:7B:DC:81:DE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 113B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2ADF007638ED11EE96FC8B734AD9E6FC.roa
Signing time: Sat 12 Aug 2023 08:49:37 +0000
ROA not before: Sat 12 Aug 2023 08:49:34 +0000
ROA not after: Wed 14 Aug 2024 08:49:34 +0000
asID: 14670
IP address blocks: 154.16.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4411 (0x113b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 12 08:49:34 2023 GMT
Not After : Aug 14 08:49:34 2024 GMT
Subject: CN=64d747a1-bc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:f0:32:5f:46:30:9c:ca:b3:98:83:1c:7f:
d0:80:5c:53:fa:9e:37:47:39:f4:8d:00:a4:59:c3:
05:de:db:34:29:93:89:fd:58:b4:a5:c6:3f:87:96:
d3:71:c1:14:cd:a0:0a:17:fe:dc:8e:dd:55:90:97:
e3:8a:06:11:4a:30:83:b1:66:26:fe:57:4a:23:0b:
77:b1:b9:2b:5a:0e:a2:1c:9d:66:43:0f:59:8c:3b:
2e:64:2f:92:b9:d4:74:2d:19:e4:02:9d:7d:09:2c:
91:78:3d:f1:27:80:94:18:e7:26:b1:7e:58:d5:69:
ca:38:11:60:72:d5:91:50:2d:6a:e5:bd:8b:7f:74:
f8:38:1f:f5:49:b8:46:d0:38:92:1e:7f:f1:7e:00:
46:60:fc:35:45:cb:04:6e:50:fe:b7:55:42:b0:76:
a9:99:1b:74:57:8d:ff:0a:2d:bf:f1:a7:c7:64:c0:
f0:d7:1b:6d:96:34:cb:22:9c:20:d9:61:c2:14:0e:
5e:cf:63:e0:29:e4:48:dc:dd:05:12:57:59:f3:a0:
99:ef:8b:f6:28:fe:69:49:87:df:81:0a:43:ef:36:
39:24:e2:ab:de:7c:6c:a4:11:2b:bd:8e:93:22:9d:
20:50:06:84:aa:28:4d:c4:25:31:8e:4c:e2:be:b7:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:7D:97:BC:E8:B0:77:F1:71:1F:AE:8E:5A:64:C9:7B:DC:81:DE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2ADF007638ED11EE96FC8B734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:39:a1:44:1e:db:f0:15:e5:1d:f6:9a:62:90:f4:7e:15:37:
b5:91:2c:da:6a:40:88:59:37:61:87:7e:50:17:04:18:47:1f:
97:5f:d0:d2:8d:8d:57:b0:d8:26:a8:c6:54:3b:8e:44:92:6e:
56:fa:01:34:bd:3b:85:a8:e8:19:e5:80:b9:66:2b:0e:a7:7e:
a0:05:0e:2c:37:a7:0f:2b:22:a9:e0:41:1f:4d:b4:32:6b:df:
2e:98:36:a6:d2:64:be:cf:5d:9f:9d:00:fc:46:5f:62:7a:22:
84:09:56:68:06:9c:1c:fe:d4:bb:c3:23:09:42:2d:ea:7c:e0:
f4:8c:01:e4:49:4b:e9:58:31:ed:3a:64:7d:68:78:6c:98:82:
0c:15:fa:75:b8:97:44:45:47:7c:92:fd:d1:e1:b7:05:b9:ba:
b3:87:d7:d6:c0:e0:ea:20:d4:c2:c2:e9:4d:4f:4f:53:ae:30:
4a:dd:46:47:02:ef:db:2e:ac:6f:eb:a0:7b:e7:d8:70:7c:b5:
25:bd:48:ed:f2:0a:54:6e:97:89:bd:31:9f:dd:d8:6b:c7:8e:
45:9b:79:83:36:53:5c:e4:ba:f2:2a:01:27:3c:20:e5:12:1a:
27:ca:b3:c6:d3:0c:4a:a5:37:51:92:91:6f:a5:f0:93:e4:08:
6c:91:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:22 2024 by rpki-client on console-fra.rpki-client.org