Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2D966EB2903A11EFB16C9794762E951A.roa
File: 2D966EB2903A11EFB16C9794762E951A.roa (raw, json)
Hash identifier: 1JUeazHGeAZB34MiYQIfuCn//Hl5f3iVLNzbcFs6Agk=
Subject key identifier: E5:36:A4:86:D1:71:50:23:1A:DF:12:26:20:A1:B8:72:18:F9:D0:41
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1893
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2D966EB2903A11EFB16C9794762E951A.roa
Signing time: Tue 22 Oct 2024 05:55:02 +0000
ROA not before: Tue 22 Oct 2024 05:54:58 +0000
ROA not after: Thu 22 Oct 2026 05:54:58 +0000
asID: 212238
IP address blocks: 154.16.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6291 (0x1893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 05:54:58 2024 GMT
Not After : Oct 22 05:54:58 2026 GMT
Subject: CN=67173e36-8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:cf:ee:2e:1f:e4:16:bd:c2:71:51:47:b3:
63:fb:1c:be:da:bf:dc:78:67:d4:02:b8:c2:17:50:
be:2c:cc:08:10:4f:5b:a2:48:ef:15:e6:de:6c:8b:
2d:08:b0:d2:46:4c:b3:8d:d1:3e:29:4d:28:f6:88:
46:2b:08:11:1f:dc:c9:49:64:16:7c:5f:b6:5b:eb:
15:4b:04:48:50:d7:79:07:10:fb:90:02:01:11:a3:
0b:43:aa:fd:02:21:62:9b:e2:2a:07:26:94:83:d5:
2d:55:f2:5f:32:65:15:e2:32:6b:ba:42:82:c4:04:
b4:f8:73:ea:56:53:91:b8:c9:31:ff:87:9e:3c:f1:
c7:2c:e4:24:a9:2f:fb:eb:78:73:bd:5f:32:ac:cf:
a1:d0:b9:82:b9:c2:9d:9b:4c:de:24:d9:5f:5a:96:
74:f7:97:d2:7c:59:0b:4b:ba:3a:c2:78:1d:37:83:
a4:63:1a:66:9c:f2:31:9f:b9:f2:9a:50:1f:94:9b:
b7:ec:55:09:a3:6c:be:f3:f3:7d:7b:e9:b8:34:93:
7c:c5:9c:15:01:19:9b:16:23:0d:30:d6:e6:63:d2:
ec:35:db:e8:56:b5:0e:8c:8b:96:0a:de:63:47:12:
1c:37:4d:09:05:57:f0:ce:f7:ca:62:d5:35:aa:96:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:36:A4:86:D1:71:50:23:1A:DF:12:26:20:A1:B8:72:18:F9:D0:41
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2D966EB2903A11EFB16C9794762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.198.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:46:74:aa:9c:ca:29:b5:d4:e6:7d:c8:07:3a:84:ed:a4:09:
e8:6e:f2:7c:2d:ad:72:3b:f8:1f:2b:20:c5:a8:d5:fd:bb:8b:
bd:77:2a:92:d2:66:0f:54:6d:7c:cf:e9:61:3a:c1:4c:28:45:
74:c3:a5:1d:a7:1e:f0:af:42:94:a5:ce:05:fd:19:b5:97:f9:
3e:9f:8c:85:fa:ec:6e:29:1f:f0:1c:4e:80:6d:5d:6b:5f:99:
f3:df:c1:4d:a0:13:9c:47:99:42:09:b5:65:c6:44:d2:23:c9:
6e:81:8b:be:c8:1b:bb:d3:c4:18:8b:22:58:da:6a:eb:37:0b:
ca:19:22:47:34:bb:c8:ae:45:0a:47:88:46:f3:0c:be:20:c9:
a6:10:c9:79:34:86:2c:6e:70:9f:16:73:f9:c0:47:84:96:e1:
93:7b:86:32:3b:09:c4:e5:61:63:16:c8:ca:c8:53:65:c4:d2:
46:ef:93:a2:12:55:5f:ec:cc:a0:42:7e:79:bb:02:be:fc:78:
f0:4b:c7:d6:98:eb:43:4e:02:3d:d2:c4:ae:da:21:ca:69:52:
0c:c1:4a:ff:01:6b:54:28:5f:28:b3:6e:28:87:50:7a:ad:fe:
3a:1e:9c:7f:ac:1f:9a:33:49:53:c9:b2:52:4f:40:ca:f2:42:
f0:55:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:55 2024 by rpki-client on console-fra.rpki-client.org