Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4192147EB8FB11EDBA436F7FF1222468.roa
File: 4192147EB8FB11EDBA436F7FF1222468.roa (raw, json)
Hash identifier: g5W9VnUmgDIuMUoJjZ8FE/TBSC8oYGjgxT5xwn5Yjn8=
Subject key identifier: 55:8A:E3:D9:34:FF:4A:03:8B:75:30:D9:73:7E:15:96:08:90:EF:49
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CD7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4192147EB8FB11EDBA436F7FF1222468.roa
Signing time: Thu 02 Mar 2023 13:08:00 +0000
ROA not before: Thu 02 Mar 2023 13:07:56 +0000
ROA not after: Sat 01 Mar 2025 13:07:56 +0000
asID: 61317
IP address blocks: 154.127.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Mar 2 13:07:56 2023 GMT
Not After : Mar 1 13:07:56 2025 GMT
Subject: CN=64009faf-93cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:a2:72:ca:60:a4:df:5e:5f:d9:23:f5:f6:
2a:d1:ea:40:90:6d:c3:28:bc:98:00:25:1f:5e:98:
d4:a2:3f:39:51:0a:6e:82:92:97:50:56:8a:ce:2d:
e8:09:64:49:69:c0:f9:6f:73:54:35:53:55:6c:2c:
ba:f0:85:5f:b8:ad:34:1e:91:bf:df:ab:3e:b8:8a:
0b:8a:7d:1b:f9:5b:70:da:09:39:cc:60:a9:7b:91:
29:16:07:53:88:39:75:1f:5e:0f:fc:b5:0c:3b:99:
05:03:a8:87:13:b5:01:ff:88:71:eb:ed:27:40:c2:
06:0a:b9:34:5e:c2:34:33:f2:5a:d6:8b:68:e8:af:
57:de:43:2a:a7:ba:5e:e1:7c:d6:ee:56:25:4a:1b:
22:80:e4:65:2d:5a:cd:b8:4a:63:3d:f0:cb:bd:48:
e1:8c:1d:15:40:78:75:fc:04:aa:30:08:e0:bd:82:
e5:07:24:83:0c:1f:4f:65:a5:31:02:44:af:91:57:
9c:f5:9b:59:32:33:1a:7b:53:c4:30:93:2a:9b:39:
2a:f0:c7:cc:21:21:a1:dd:63:c0:7b:34:29:d7:07:
82:79:40:d4:ef:c0:61:86:d3:30:f7:fd:66:a7:84:
92:ab:f3:a7:22:20:96:62:3e:e9:42:6e:a5:0b:58:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8A:E3:D9:34:FF:4A:03:8B:75:30:D9:73:7E:15:96:08:90:EF:49
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4192147EB8FB11EDBA436F7FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c9:56:df:27:a3:11:a6:d4:70:2b:3a:f5:fa:c6:8e:d2:cf:
94:ae:99:f9:5d:78:6e:51:8d:4e:88:56:65:0a:64:80:4c:d0:
12:3c:20:e7:7e:9f:40:06:af:04:7b:f2:c1:da:65:48:74:b6:
b5:de:e0:7f:34:bd:83:53:43:f7:ef:86:96:04:20:24:9e:9d:
9a:c5:d6:d5:57:f8:e0:ee:d7:42:89:c0:d9:6a:54:5a:49:b4:
44:a9:8c:ab:24:7d:b8:a6:6a:84:3e:c8:bb:5d:ad:05:8b:d1:
9c:44:43:61:78:77:42:fc:15:39:87:34:ab:4a:c6:60:c5:da:
f0:2f:47:20:b5:31:7c:1d:a9:79:36:92:0e:1c:a3:7d:30:dc:
7b:1c:0f:ad:c8:61:4d:62:33:30:54:5d:7e:f1:50:52:98:75:
ac:c1:2e:ad:a9:0c:9d:de:f4:6b:59:f2:a0:83:ed:0f:a7:2f:
10:bb:97:18:da:e6:5a:f2:3c:33:d2:b5:4e:56:d8:dd:5a:24:
97:76:46:f3:0b:13:f7:b0:9f:a4:91:bb:5c:78:87:07:c8:28:
f8:79:61:cd:4d:05:11:bc:32:c4:78:33:24:8c:df:c6:01:cc:
7a:01:41:27:5f:1b:77:aa:2a:62:b6:b5:67:86:7e:a6:09:0c:
0f:27:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:36 2025 by rpki-client