Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2D891E90BD11ED9E0241F9F1222468.roa
File: 3E2D891E90BD11ED9E0241F9F1222468.roa (raw, json)
Hash identifier: 3rQdAOwedLc2Hwa7q6X2kSHYOC2OO2cQ2Xgnfnz3sMI=
Subject key identifier: 10:31:C4:77:98:7B:57:0C:AE:FC:8D:F6:34:34:0A:76:C9:DA:6A:51
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B5A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2D891E90BD11ED9E0241F9F1222468.roa
Signing time: Tue 10 Jan 2023 08:03:19 +0000
ROA not before: Tue 10 Jan 2023 08:03:14 +0000
ROA not after: Fri 10 Jan 2025 08:03:14 +0000
asID: 64267
IP address blocks: 154.16.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2906 (0xb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 10 08:03:14 2023 GMT
Not After : Jan 10 08:03:14 2025 GMT
Subject: CN=63bd1bc6-4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:ab:5d:30:f1:99:2c:9e:0b:80:74:83:bd:
e9:4f:b6:c9:00:06:25:f1:9f:ce:fc:d9:e1:1b:99:
54:7e:f0:8f:cc:ea:23:4d:69:76:f2:f7:ba:e8:f8:
47:57:44:fa:d6:78:24:ea:26:89:e8:63:c9:19:c2:
81:25:47:27:af:a2:5b:0d:90:62:ce:70:1b:1b:07:
c6:b7:10:23:46:cb:1e:66:54:af:3a:5b:db:25:cc:
02:13:fa:a5:3a:25:40:ff:4f:11:31:5f:dd:5a:83:
3a:83:cb:45:80:7b:85:bf:e0:c6:ee:e8:70:00:35:
fb:28:75:b4:eb:d8:b6:e1:7e:07:07:41:20:17:c7:
59:bd:74:f1:8e:19:d3:06:8d:4f:7b:cc:03:23:f6:
e7:60:51:8c:2c:fc:e0:1e:f7:d5:19:cf:89:6e:80:
82:7f:07:77:fd:16:81:a2:de:13:e1:73:e1:08:9b:
f4:cd:f1:95:22:79:71:c7:94:23:1e:cb:68:1b:70:
d6:a1:9e:18:76:3d:cb:c7:a4:57:85:f6:f9:cf:a5:
7c:2f:87:27:b1:58:d8:c6:fc:6b:98:a8:31:00:e5:
63:99:d5:af:2a:5f:97:79:8a:b7:82:8e:d1:29:a1:
9f:ee:01:d3:12:21:45:f9:10:24:ee:99:81:fb:bd:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:31:C4:77:98:7B:57:0C:AE:FC:8D:F6:34:34:0A:76:C9:DA:6A:51
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2D891E90BD11ED9E0241F9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:d0:cb:61:39:43:f6:d0:f0:f4:c0:ef:9b:11:e3:38:ed:bd:
fc:99:e8:0d:34:97:b2:2f:2c:4d:64:81:5f:f5:80:f2:0f:77:
46:8a:79:2d:f9:4a:86:a9:8c:fd:4d:41:00:ee:06:e5:0b:eb:
00:16:05:d1:fa:4d:2f:81:95:16:25:a4:b1:57:4b:91:d9:3c:
8c:06:37:2f:b5:06:62:89:0f:1c:71:a8:a6:c6:ff:02:ef:14:
69:29:06:c5:49:14:90:bf:32:65:fe:3a:2b:54:67:59:b7:bd:
59:4b:93:be:c3:02:83:4d:f6:db:d8:24:17:ce:35:57:83:06:
29:7d:ef:0c:56:11:a9:5d:d6:93:ac:ac:ba:b5:6c:2f:db:59:
71:81:db:4a:66:b9:96:28:60:18:ce:a7:49:7a:00:b2:d3:77:
3b:be:13:6c:53:a8:af:8b:35:ff:53:c7:4d:b1:ae:72:29:d2:
5b:aa:53:87:5c:9f:4b:3f:13:8a:a1:c3:10:4b:c9:08:c1:b5:
56:b1:df:27:67:19:b2:61:07:ba:fc:4b:be:04:1e:86:79:da:
e4:b6:c5:58:13:53:68:c6:8b:4f:40:a3:59:1c:6d:4e:66:20:
d2:18:8c:da:14:c6:6b:bf:6e:a5:0b:b9:d9:f9:23:f1:c9:84:
e4:a4:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:01:47 2024 by rpki-client on console-fra.rpki-client.org