Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2F57DA24B411EF99A4D6EF7CDC24C2.roa
File: 3E2F57DA24B411EF99A4D6EF7CDC24C2.roa (raw, json)
Hash identifier: sQhuk98fSprb28UAmOrsYtbeQzeZ4daV+98DIwJGKMU=
Subject key identifier: CF:02:1C:EC:4B:1C:50:14:1E:78:3A:FC:99:B1:2C:07:31:40:3F:1E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 16C6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2F57DA24B411EF99A4D6EF7CDC24C2.roa
Signing time: Fri 07 Jun 2024 09:56:43 +0000
ROA not before: Fri 07 Jun 2024 09:56:39 +0000
ROA not after: Sun 07 Jun 2026 09:56:39 +0000
asID: 13213
IP address blocks: 154.16.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5830 (0x16c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 7 09:56:39 2024 GMT
Not After : Jun 7 09:56:39 2026 GMT
Subject: CN=6662d95b-999b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:e2:1f:9b:8f:67:42:04:3a:4c:ba:81:d9:
a0:a3:f8:d3:58:8d:83:72:c0:e3:20:17:80:f4:69:
81:d3:f1:20:fb:86:f7:1e:85:64:a1:2f:18:bf:dd:
b6:a9:44:f4:a7:93:cd:d1:fa:df:11:ad:68:25:73:
4e:5f:27:84:65:ff:54:6e:a4:25:76:fc:25:65:61:
11:e8:56:52:c2:af:14:f9:ce:22:c7:bb:8a:24:06:
1b:1c:a3:a0:19:50:cc:7b:6d:fc:31:e2:6c:29:9c:
e8:a4:77:8d:98:94:bb:b9:fd:9a:a8:0b:01:b7:e3:
99:f0:9d:19:1f:b4:62:af:3a:8a:fc:4b:18:11:38:
e1:1e:45:63:6d:7d:45:04:05:ef:4e:f4:74:6e:7d:
6b:f5:41:5e:71:cc:d7:cd:bf:d4:5c:5c:5e:ed:76:
07:d1:9a:3c:4c:c3:9f:1d:0f:95:3d:6f:35:6c:e7:
f8:11:dc:74:fb:a8:f0:0f:dc:65:32:76:11:70:d1:
5b:06:28:83:fd:60:6c:90:1f:97:01:fe:32:97:1f:
eb:63:be:d5:8f:42:26:44:64:85:9d:e0:0c:87:90:
c8:a4:b6:9c:a4:c1:70:4e:b3:58:25:e5:ca:89:78:
23:a4:e5:de:3d:c5:50:90:73:d6:59:1c:1e:05:6e:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:1C:EC:4B:1C:50:14:1E:78:3A:FC:99:B1:2C:07:31:40:3F:1E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2F57DA24B411EF99A4D6EF7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.227.0/24
Signature Algorithm: sha256WithRSAEncryption
79:32:e8:6f:b2:30:6e:af:82:b2:5a:e2:50:21:94:82:b4:1b:
b1:93:9b:e0:fe:37:85:c1:91:6c:52:4b:5f:84:7a:73:9e:2d:
e1:64:13:45:cd:f3:e3:de:67:3e:74:43:26:ea:63:ef:68:56:
6c:f4:da:f7:37:93:a2:7c:72:c3:80:43:5b:c6:48:9b:66:ad:
29:62:88:0c:a0:41:4e:fd:24:1e:2d:de:d0:02:0c:4c:47:5c:
05:e9:fa:2e:28:db:e2:a0:b1:c8:96:2f:9c:8d:58:2c:37:84:
3d:84:5a:0e:51:84:a6:52:a9:b6:5c:93:66:6e:b4:31:79:a3:
f8:2f:70:bf:06:e8:bc:9a:b2:df:96:20:31:5f:98:ee:9a:a6:
7d:36:f1:26:71:31:92:e4:f7:0d:06:5f:a6:89:03:b2:52:54:
42:bd:ca:00:d2:d9:6b:6c:68:00:7d:d4:ea:c7:40:d1:84:c7:
bf:e5:af:de:18:f4:19:42:fd:b1:f7:51:d3:c3:96:11:7a:d7:
e5:b3:c4:f8:b2:67:da:bf:ac:56:ee:8a:70:49:e7:4b:af:5a:
aa:3f:bd:3f:4f:1c:e1:58:17:25:e2:b3:bd:4b:f3:5e:55:11:
56:91:c5:84:6e:c3:23:3b:22:23:88:71:2f:f8:11:dd:d1:ae:
4c:28:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:54 2024 by rpki-client on console-fra.rpki-client.org