Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2FC9F97246C411EDB89706A8F1222468.roa
File: 2FC9F97246C411EDB89706A8F1222468.roa (raw, json)
Hash identifier: 2VCm+XppDNPyYaa39OJgovRaSp7J+BTs1qLP4fll/+Q=
Subject key identifier: 14:90:C3:0B:10:0D:51:D3:DE:79:46:28:8B:A1:8C:C8:89:DB:44:E0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09EE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2FC9F97246C411EDB89706A8F1222468.roa
Signing time: Sat 08 Oct 2022 04:46:35 +0000
ROA not before: Sat 08 Oct 2022 04:46:31 +0000
ROA not after: Wed 09 Oct 2024 04:46:31 +0000
asID: 174
IP address blocks: 154.16.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2542 (0x9ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 8 04:46:31 2022 GMT
Not After : Oct 9 04:46:31 2024 GMT
Subject: CN=634100ab-9cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:70:9a:7e:f0:d3:be:a8:41:29:16:07:bd:
05:f1:0d:f7:70:4d:ac:a6:7d:a0:26:20:27:03:c4:
48:cc:29:26:00:e0:62:9b:90:42:ab:41:01:09:3a:
3e:01:e8:2c:6c:99:5e:a9:8e:cd:3f:ac:e3:bd:36:
45:0b:3e:2f:5c:b9:e0:5a:c7:a0:83:eb:29:36:70:
5d:0e:3c:f7:fa:31:24:fc:38:8a:0c:53:9f:88:8f:
50:d4:c3:c5:d2:de:dd:8a:86:5e:5a:25:5d:7e:ab:
66:bb:3b:77:7f:56:4c:ed:4c:b6:2e:72:01:fd:61:
e0:fa:ca:81:2d:a5:83:f0:96:4c:ba:3c:8d:9c:f2:
10:50:28:fe:5e:0d:5c:b6:0c:51:bc:0e:08:ae:cc:
c4:eb:e8:42:1f:86:1d:ae:b5:dd:b1:22:9e:6d:41:
9c:a7:51:89:a3:e3:56:b6:e4:dc:8a:c0:85:f1:2a:
b0:33:50:a4:a7:25:92:e1:fd:23:15:1b:cb:67:c8:
2a:29:19:49:de:7d:13:07:d5:e4:0f:b5:2e:26:b6:
4b:5a:38:fc:97:13:bc:83:98:2c:b9:62:4f:b1:08:
1a:ea:81:ea:58:8e:f7:d5:93:5d:bf:da:d4:ff:46:
ad:70:f4:a9:20:0f:99:3c:57:4e:a1:d6:02:9d:8f:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:C3:0B:10:0D:51:D3:DE:79:46:28:8B:A1:8C:C8:89:DB:44:E0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2FC9F97246C411EDB89706A8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:24:26:77:6b:7e:ed:ab:66:18:2e:9e:2c:99:ae:e5:59:a5:
9d:e2:73:2f:1a:a9:64:83:14:82:0c:64:6b:1f:48:f8:f3:3f:
2f:59:23:2a:ff:77:9d:88:93:19:ba:aa:9d:bb:44:54:b3:72:
c6:ad:1b:db:ea:5d:dc:ef:f8:5c:5e:04:88:14:43:21:f5:05:
fd:13:77:f2:48:06:7a:e3:07:70:fc:b0:c3:b2:c1:15:8e:ae:
27:91:2f:cb:03:1b:11:69:5e:ba:2b:5e:df:3a:ca:15:9e:ea:
5f:55:06:91:f8:15:73:17:99:08:2b:b5:3d:cc:4a:99:f3:db:
d4:2c:75:5c:82:d3:f0:0a:2a:af:ef:6d:12:a4:4c:bb:22:a0:
4c:71:fe:a2:f5:6a:80:96:ac:4b:74:ee:53:12:a0:9a:ce:8b:
5d:b5:31:4a:e3:de:2a:7b:c1:f5:b3:74:23:7e:23:a8:e4:8c:
94:b2:57:02:a2:c0:77:80:1a:ec:60:b1:6e:78:d3:65:9f:0e:
f0:29:ad:6f:80:40:4d:25:e1:d5:83:b2:6d:19:83:66:05:20:
a1:27:a8:08:9b:52:99:8e:19:c5:03:62:e3:98:6f:36:2a:50:
b8:c2:68:8d:06:59:9e:79:1b:f2:8b:58:73:d8:5b:b3:22:a0:
15:94:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:38:51 2024 by rpki-client on console-ams.rpki-client.org