Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36B4E3D6A7EE11EFBBE27B88762E951A.roa
File: 36B4E3D6A7EE11EFBBE27B88762E951A.roa (raw, json)
Hash identifier: mf3ubv2jmUEgbxMIa4QbdKfGAFD98Kj5N9D5TUcjRNA=
Subject key identifier: AC:0D:95:78:6C:C2:54:13:F1:43:1A:7D:F1:BD:6A:EE:7F:69:30:2D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18F9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36B4E3D6A7EE11EFBBE27B88762E951A.roa
Signing time: Thu 21 Nov 2024 09:51:43 +0000
ROA not before: Thu 21 Nov 2024 09:51:40 +0000
ROA not after: Sat 21 Nov 2026 09:51:40 +0000
asID: 62240
IP address blocks: 154.16.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6393 (0x18f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Nov 21 09:51:40 2024 GMT
Not After : Nov 21 09:51:40 2026 GMT
Subject: CN=673f02af-bf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:0c:21:4d:51:66:b5:14:7c:c3:78:7f:d2:
61:8e:dc:81:ac:af:4a:d4:0e:d2:1c:6b:ac:5d:c1:
d9:f4:6a:9e:62:60:b9:e7:c0:69:2b:6f:1b:d0:ca:
64:83:83:fa:47:6e:fd:66:71:c0:4e:32:4f:92:39:
fc:84:30:da:bf:a5:ec:4e:ea:c1:7e:31:77:76:a5:
c8:6c:67:dd:97:86:c5:82:38:e9:a2:23:97:88:af:
e0:37:d6:73:ae:4d:f8:a1:09:41:c2:43:97:c9:a2:
79:86:9b:ec:6b:18:b6:0a:6f:92:a1:71:41:4d:e5:
d0:24:e3:ca:ef:e9:db:ad:7f:0c:b0:a8:39:1c:48:
e2:0c:92:54:22:fb:c3:e6:62:4b:54:83:e9:48:db:
c4:2d:56:5f:5d:55:fc:0c:60:d7:58:70:f1:34:bc:
35:5c:f2:a4:ea:de:f1:7f:33:5e:4a:0a:53:b3:bb:
2e:36:9a:ad:82:34:cc:98:0a:a6:d1:b9:69:e5:82:
a5:af:35:50:06:95:bb:d4:99:8a:95:52:e1:1d:dc:
d0:d1:54:b8:f0:e5:50:82:3e:b9:42:18:a3:c5:5c:
0c:e1:1f:36:2f:8a:54:b0:ee:8f:aa:80:73:12:28:
b7:40:44:d3:92:ac:83:46:98:4b:9d:42:0b:a1:f2:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:95:78:6C:C2:54:13:F1:43:1A:7D:F1:BD:6A:EE:7F:69:30:2D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36B4E3D6A7EE11EFBBE27B88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.5.0/24
Signature Algorithm: sha256WithRSAEncryption
87:24:cd:ed:30:47:e6:73:10:d7:7a:69:cc:b5:fb:19:75:bb:
10:cd:34:61:c1:6e:dc:d0:d2:6d:3b:b3:fc:fa:98:53:19:07:
28:9f:98:6b:f7:57:1b:7b:2f:e0:91:f4:a2:12:28:82:c6:34:
78:0b:39:21:30:c2:c7:f3:a4:76:81:1e:6f:ba:7a:56:b5:82:
2b:c6:10:cf:9f:55:d1:cc:c5:4b:f9:81:e3:9e:d0:3e:4d:df:
c9:e7:24:d9:c1:71:10:a7:91:53:ab:a5:92:bc:24:1d:2d:d4:
9d:a2:6e:fa:98:8c:75:5f:9a:28:96:d6:a7:36:89:a8:c5:5b:
26:02:c7:63:95:48:86:2c:93:71:1e:3a:4b:8a:a2:34:25:b4:
d6:a1:f4:88:ea:2d:32:2d:3f:9c:00:d9:ca:67:10:b7:6e:36:
d4:4a:f2:f5:02:61:98:fc:83:ab:59:84:eb:c1:3e:3a:fa:61:
89:ce:a0:0d:6d:da:47:2b:41:25:fd:ac:33:0d:da:bc:5c:e8:
9a:a0:c4:bd:9c:0e:c9:4e:2f:53:8e:ad:74:46:2b:af:6c:51:
6f:72:cd:76:ac:4d:28:2d:b3:e6:1e:e1:2c:94:bb:3f:80:17:
eb:68:66:80:df:9e:00:5a:c6:44:2e:32:b5:54:79:8d:55:99:
2b:95:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:45 2025 by rpki-client