Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2AFA5CBC54A411EFA036C675762E951A.roa
File: 2AFA5CBC54A411EFA036C675762E951A.roa (raw, json)
Hash identifier: 6V3Nihp2pEhcPkBJYAN3WfsJSfiLcAU4lRg7KgZTvCc=
Subject key identifier: F4:4C:70:94:BB:FA:29:7C:9D:34:1E:33:21:57:3F:3C:32:E9:72:65
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1796
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2AFA5CBC54A411EFA036C675762E951A.roa
Signing time: Wed 07 Aug 2024 10:02:34 +0000
ROA not before: Wed 07 Aug 2024 10:02:31 +0000
ROA not after: Fri 07 Aug 2026 10:02:31 +0000
asID: 14670
IP address blocks: 154.16.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6038 (0x1796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 10:02:31 2024 GMT
Not After : Aug 7 10:02:31 2026 GMT
Subject: CN=66b3463a-9bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:16:09:6d:ee:b9:16:6a:b1:4b:2a:f1:c2:
6e:fb:0e:b2:58:22:3e:99:6e:1f:c2:23:28:c1:54:
8f:35:7b:30:e7:b8:57:07:45:2e:77:fd:b0:17:8f:
aa:f4:64:60:aa:b7:81:e9:bb:0d:a7:ed:1c:53:d7:
13:9b:1c:9d:7e:30:8d:32:b2:9d:9c:6a:11:18:a3:
8a:b8:b1:32:3d:d9:b1:bf:49:39:b8:28:2c:55:51:
d7:ef:25:02:08:eb:a6:ec:58:31:a1:55:1d:78:5e:
0e:46:f3:7e:9c:a5:fb:9f:a0:cb:41:38:06:33:fd:
dd:c1:77:92:11:4f:b9:eb:74:35:cb:8d:61:0c:f4:
8a:00:95:4b:2c:00:ec:b4:82:d3:ec:40:c7:7f:71:
3e:32:06:da:f4:72:0f:0a:72:90:fc:54:36:dc:d2:
5a:00:68:04:47:f7:e0:a2:9c:6c:49:85:10:2d:20:
6b:17:ed:f3:bb:c5:b8:28:11:6f:57:b7:df:b9:1f:
d4:5c:78:51:a7:dd:0e:7b:67:7a:0f:31:26:da:9c:
05:02:31:d2:b1:8e:f9:4a:8f:cb:dc:c1:0f:64:c1:
03:55:16:8d:4b:38:b5:21:49:0d:20:29:b8:e6:45:
16:58:5f:41:67:98:1f:87:0e:7c:9b:92:2f:38:01:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:70:94:BB:FA:29:7C:9D:34:1E:33:21:57:3F:3C:32:E9:72:65
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2AFA5CBC54A411EFA036C675762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.116.0/24
Signature Algorithm: sha256WithRSAEncryption
84:86:06:5b:73:e0:f5:d2:5c:26:6e:7a:89:82:67:ed:0d:29:
c8:9a:19:9c:a4:84:aa:bc:cb:23:e5:d8:78:e2:77:9d:d4:c6:
d1:c6:0c:0c:b7:3f:75:c8:20:1f:b2:6b:a0:ec:d9:a1:d3:ce:
f4:59:e0:9c:f0:c4:97:ab:6b:0c:6e:7a:ae:06:4d:b7:7e:da:
47:8b:0d:e3:4a:6b:bf:59:2c:8f:8f:f3:0e:df:e6:37:b6:68:
c1:15:b3:a4:fe:cf:01:22:18:00:0d:cb:a0:e3:f0:4d:f8:b8:
94:33:b1:c0:34:05:cf:c4:e9:b1:07:29:58:14:f6:73:02:d4:
6a:5b:59:8e:33:b9:ad:d4:26:b9:f3:8e:e2:72:de:96:f1:ec:
d9:f2:ef:f6:2b:49:06:7a:ca:c6:0a:61:f6:1e:ee:88:5f:e9:
52:d6:65:37:d4:ce:3d:42:53:3f:b9:c6:3d:c1:9c:e2:1a:f6:
34:48:40:e5:ee:e9:e1:7b:92:7f:da:af:2f:69:41:bf:4b:9e:
bb:a6:93:35:f7:06:2f:15:6f:ff:17:6e:b0:ca:87:f2:90:a4:
da:5c:3c:57:0a:bb:bf:4a:cc:ef:2d:6b:5c:94:01:1b:a2:7b:
5f:58:43:f3:46:b7:a2:2d:ef:65:31:63:40:c3:95:c6:e8:fd:
91:4d:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:22 2024 by rpki-client on console-ams.rpki-client.org