Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/30ACE9DC8B8611EEB080541A4AD9E6FC.roa
File: 30ACE9DC8B8611EEB080541A4AD9E6FC.roa (raw, json)
Hash identifier: qGcJXqamyku4nAOp0O4uY2H4XE1n5AkyS8ERpKI6Lok=
Subject key identifier: 56:46:9E:D7:2B:82:1B:01:CF:43:BC:B9:F7:96:0B:21:DD:07:D8:6E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1369
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/30ACE9DC8B8611EEB080541A4AD9E6FC.roa
Signing time: Sat 25 Nov 2023 11:31:35 +0000
ROA not before: Sat 25 Nov 2023 11:31:32 +0000
ROA not after: Tue 25 Nov 2025 11:31:32 +0000
asID: 212238
IP address blocks: 154.16.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4969 (0x1369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 11:31:32 2023 GMT
Not After : Nov 25 11:31:32 2025 GMT
Subject: CN=6561db17-936c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:38:33:c1:bd:74:e7:53:36:39:68:72:95:
7f:07:cf:25:87:84:3e:ed:7e:41:26:1c:d9:da:95:
80:04:cc:c4:73:b7:35:79:f9:e5:93:f4:01:78:95:
91:39:69:e7:0e:fb:e9:58:23:e4:48:00:c1:98:24:
87:0b:3b:2f:40:f1:c5:37:b2:21:26:a0:40:35:26:
b1:c6:76:66:eb:56:57:1c:87:2f:fb:3b:87:b7:0c:
76:ee:0d:ad:44:74:fa:a8:5a:c3:a2:79:3d:30:87:
9f:2e:eb:0a:ea:db:7a:fd:b0:db:68:bc:18:8c:7e:
75:a2:be:ef:25:1f:87:11:cb:55:de:a3:b1:24:39:
f1:ca:06:b6:74:5f:18:16:d3:76:34:96:a5:b4:0a:
d1:b3:ad:b4:4c:04:57:a5:87:cc:ee:ca:ff:a9:3f:
84:50:92:5c:3d:09:cb:c3:35:f7:b4:26:5b:d7:92:
18:d0:3b:15:d5:53:a0:6c:55:ed:9e:13:49:f1:61:
10:72:34:c6:d6:78:85:11:3c:25:f2:e6:a6:b6:08:
91:be:b9:aa:10:8b:a5:36:3e:2a:99:85:bd:71:1d:
b8:34:96:1f:06:d3:77:c4:ea:52:33:8e:f8:da:e8:
6e:d7:89:7d:a0:52:9f:6d:24:9b:81:66:02:b3:0f:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:9E:D7:2B:82:1B:01:CF:43:BC:B9:F7:96:0B:21:DD:07:D8:6E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/30ACE9DC8B8611EEB080541A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.53.0/24
Signature Algorithm: sha256WithRSAEncryption
59:17:80:08:49:7e:4a:36:9e:13:9f:56:87:f4:a6:75:78:62:
94:d5:95:b8:9b:71:d7:bf:0d:f8:bb:5b:45:dc:90:19:3d:3f:
82:5f:3e:3c:62:fe:1b:3b:c5:eb:01:48:0f:9a:59:d7:5c:41:
52:d6:86:e1:71:f8:3e:d8:8b:cc:55:47:5a:97:7c:57:e9:5c:
ac:b7:36:41:88:f5:f6:34:50:e6:3b:89:4f:0e:e6:52:ef:72:
7c:6d:89:f8:f7:48:23:38:67:ed:20:92:9d:96:00:65:2f:e0:
85:62:8f:fd:5e:e0:06:d8:d1:03:a4:bc:03:ed:bb:96:6d:b1:
38:42:51:ea:ff:d8:07:65:89:03:11:d8:bf:a3:33:03:35:d9:
3b:da:45:58:88:4e:e8:fc:98:ee:78:28:30:8c:18:de:28:ae:
5b:80:fb:27:bb:40:d2:31:a0:14:0e:f0:21:fb:97:b5:20:5f:
e3:e5:50:fe:2b:50:8f:ef:7c:db:af:f1:5b:c1:37:0a:c9:68:
07:71:13:ab:91:ed:83:66:99:0d:7f:fc:85:0f:65:24:d4:1b:
f4:4f:af:d3:57:3a:95:7c:64:ad:69:b6:78:79:b7:45:4d:4c:
e6:00:f3:58:f9:b9:50:84:b5:10:98:2d:f7:28:6b:4e:9a:39:
e4:da:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:22 2024 by rpki-client on console-fra.rpki-client.org