Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34F0367471AF11EF91A35F42762E951A.roa
File: 34F0367471AF11EF91A35F42762E951A.roa (raw, json)
Hash identifier: ccoexBAJ6OfK9hAavt/hpD5PTYSdo/Z2I86sl22fjtA=
Subject key identifier: B2:A1:4D:99:72:37:79:75:67:F6:BA:35:18:BD:3D:8C:0B:95:7D:7C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17FD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34F0367471AF11EF91A35F42762E951A.roa
Signing time: Fri 13 Sep 2024 09:04:39 +0000
ROA not before: Fri 13 Sep 2024 09:04:36 +0000
ROA not after: Sat 12 Sep 2026 09:04:36 +0000
asID: 53340
IP address blocks: 154.16.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6141 (0x17fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 13 09:04:36 2024 GMT
Not After : Sep 12 09:04:36 2026 GMT
Subject: CN=66e40027-8334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:cd:de:f3:2a:2e:f8:11:b2:8e:3f:87:8d:
52:27:6d:05:17:e4:1e:99:2a:c5:c0:6a:d2:aa:b1:
20:a6:10:75:9e:d6:4a:d7:44:7b:7c:3b:3f:86:a1:
77:03:a3:5a:24:ec:5e:5f:59:15:b0:9f:66:6c:96:
55:31:1a:03:2f:19:49:ca:c5:cc:9d:e3:91:dd:71:
cc:9e:50:bc:e6:7e:27:13:ad:c1:ed:5c:8b:b1:cf:
13:3a:bf:aa:bc:d5:ac:57:ff:24:ec:79:7d:7d:3b:
e2:09:a1:3b:7d:36:2f:b2:dd:49:d9:e4:45:ad:19:
3a:51:27:ab:78:b5:48:9c:6f:ab:36:a6:bc:5c:74:
f4:a4:88:ad:c4:bd:fa:a3:e3:a1:4c:20:63:23:1b:
83:e5:73:82:0b:39:a0:88:3e:ea:e2:9d:31:5c:d1:
1f:13:3f:1c:3b:fb:cc:2f:8b:86:0c:05:50:d9:62:
03:b6:d4:a4:fe:6f:a0:7c:70:7c:be:cc:67:1d:51:
5e:f3:96:71:dd:98:36:da:b3:3a:b9:99:3a:b1:bb:
0e:68:e2:2b:19:b9:09:e3:dd:a8:05:2c:9f:7b:0a:
db:f5:f1:2e:bd:46:fd:36:b2:6f:53:90:41:c7:92:
e0:7a:3c:d7:ed:b3:91:33:0d:4b:ac:df:78:d5:1a:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:4D:99:72:37:79:75:67:F6:BA:35:18:BD:3D:8C:0B:95:7D:7C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/34F0367471AF11EF91A35F42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5a:cc:dd:8d:46:f9:fe:72:7d:eb:e8:93:9e:57:6a:33:97:
a7:25:17:8e:32:15:6a:8d:dd:24:d6:1b:db:81:7f:72:98:30:
9c:4c:a2:e3:81:71:78:42:d9:40:80:5d:40:84:48:a5:13:dd:
79:cd:41:44:c6:13:bf:7a:e6:91:b2:fb:39:e3:8a:c4:72:88:
cc:b5:52:39:b0:e8:4d:2d:03:6f:25:89:85:0a:13:6a:4f:3a:
44:ff:4c:68:64:97:2a:6c:d7:6f:20:a3:4a:58:e9:66:04:7e:
a4:90:57:77:ca:da:f3:5f:b1:8c:ea:f3:51:ce:fb:37:28:da:
49:2d:83:58:47:69:19:39:c0:5f:f3:f3:0b:87:d2:8d:e7:39:
62:6d:a9:87:70:ed:7a:1d:be:f5:dc:4a:ab:31:ed:25:b2:a4:
d3:f9:d4:c6:f4:1f:3f:31:b2:00:43:22:16:8c:67:04:81:50:
30:eb:ce:e8:dd:9c:6f:6d:be:e1:73:e5:ed:cd:3b:88:4b:6b:
4a:bf:4f:d0:67:d8:97:dc:6f:da:63:aa:33:43:4b:41:97:f1:
6d:b0:f9:03:fd:d1:2c:da:1d:8d:3a:1d:10:b7:87:84:28:88:
40:6b:c4:38:89:34:96:ea:ad:71:3a:2c:8b:5b:75:eb:38:50:
b1:e4:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:25 2025 by rpki-client