Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36C519BCE31611EC99B390CBF1222468.roa
File: 36C519BCE31611EC99B390CBF1222468.roa (raw, json)
Hash identifier: ct1dLHjUga80Wm1/iOIIjU6WBWeFSL6BnI71Bnj4x6M=
Subject key identifier: 2A:6D:9B:A0:CA:3A:39:35:64:D3:A5:83:3E:CA:75:0E:03:66:D5:26
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 087D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36C519BCE31611EC99B390CBF1222468.roa
Signing time: Fri 03 Jun 2022 08:21:49 +0000
ROA not before: Fri 03 Jun 2022 08:21:45 +0000
ROA not after: Mon 03 Jun 2024 08:21:45 +0000
asID: 19437
IP address blocks: 154.16.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 3 08:21:45 2022 GMT
Not After : Jun 3 08:21:45 2024 GMT
Subject: CN=6299c49d-4ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:13:c7:f2:38:70:1f:e3:96:0e:4d:de:ac:
cd:c7:bd:66:48:e1:12:52:4d:ef:9c:b5:f6:35:ed:
87:1a:1a:5a:69:0b:44:1e:44:26:39:66:ef:fa:ee:
ee:b1:c2:4e:d1:c9:cf:ae:1f:29:7d:4e:5c:83:c6:
c9:ad:b8:be:3d:96:52:2c:71:91:8b:e5:f9:50:c2:
f1:13:55:8c:1e:d0:a5:c8:49:eb:11:55:3d:43:fa:
35:14:4d:4a:4b:99:f0:54:c1:16:a8:0d:62:1b:68:
f8:8f:88:29:20:72:58:58:95:47:31:68:ee:ad:cb:
bc:f2:a9:df:c2:81:7a:66:7c:d5:68:d1:39:bc:9c:
5c:d7:76:b4:fb:1a:5c:08:11:6e:fc:4b:44:1a:ac:
47:5b:ac:e1:7b:a3:2c:38:6c:63:5b:fc:74:03:a2:
0a:36:c5:13:0f:7c:d6:64:5d:35:85:5a:f7:49:96:
2d:73:b3:2c:ad:5a:a1:01:c2:79:49:5b:c1:46:04:
d8:f0:ad:68:e2:e0:55:71:aa:6d:75:5f:b7:06:f1:
78:70:6a:e7:49:11:54:98:48:a4:b3:26:81:89:88:
48:70:fc:47:4e:14:54:69:c2:0b:a8:c8:fc:60:09:
75:a2:76:4d:c3:41:c1:e4:bd:99:3d:5e:36:4e:d9:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:9B:A0:CA:3A:39:35:64:D3:A5:83:3E:CA:75:0E:03:66:D5:26
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36C519BCE31611EC99B390CBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.125.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:bf:95:e8:37:f1:16:96:e5:9a:ea:7c:49:e8:a3:75:b3:3c:
1c:c8:9c:48:b8:06:45:a4:2f:de:aa:bd:08:13:cd:bf:ad:59:
43:6d:9e:f6:97:28:45:b4:61:57:0a:c2:c9:9d:2d:f7:e7:63:
14:5f:ff:78:cd:1a:72:d7:c7:09:33:e5:2e:21:94:49:64:05:
de:00:29:9f:94:7e:d4:a3:49:93:0d:a3:02:85:41:56:21:77:
9b:dc:06:62:6a:da:27:14:ba:90:3f:5d:98:8a:37:54:4b:7b:
1b:4e:51:d0:5d:e0:ce:41:e6:d9:ea:fd:73:dc:d1:63:90:f4:
70:6a:4b:87:2b:59:63:4a:3d:3c:e9:eb:5b:0d:93:72:7e:a5:
6d:2f:40:0f:83:d9:d6:aa:c9:bb:1f:dc:31:43:0a:b7:4c:14:
51:77:14:c5:69:12:58:e9:6b:25:b8:49:77:00:70:ad:45:38:
ab:b9:e9:b2:39:35:f3:9f:3e:ad:ca:b6:fe:f3:5e:e2:ff:40:
3e:c2:cc:f4:a3:59:e6:3f:26:d3:c6:0c:b6:a0:43:ed:20:6c:
4b:6e:1b:5b:5c:4b:c4:93:b9:71:d6:ca:ef:36:b3:a5:68:79:
25:62:e3:5e:1d:dd:9e:d4:ab:13:ed:7c:1e:f9:31:8f:93:d6:
7c:e1:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 13:23:13 2024 by rpki-client on console-ams.rpki-client.org