Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44EE8B607FED11EF9B001644762E951A.roa
File: 44EE8B607FED11EF9B001644762E951A.roa (raw, json)
Hash identifier: hk5pbM7hufzwEcOtkwXnXzZMOeIWcfO8nNbb+xPHKY8=
Subject key identifier: 72:89:15:3B:7D:22:1B:1A:F7:FA:BA:84:FE:0A:36:83:4E:42:9E:ED
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 183A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44EE8B607FED11EF9B001644762E951A.roa
Signing time: Tue 01 Oct 2024 12:04:11 +0000
ROA not before: Tue 01 Oct 2024 12:04:08 +0000
ROA not after: Thu 01 Oct 2026 12:04:08 +0000
asID: 174
IP address blocks: 154.16.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6202 (0x183a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 1 12:04:08 2024 GMT
Not After : Oct 1 12:04:08 2026 GMT
Subject: CN=66fbe53b-cef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:b9:90:bc:57:37:65:c7:ee:0b:b6:45:a3:
0c:95:33:e6:d5:50:db:a0:d9:64:23:03:c5:7c:a5:
9e:77:b3:68:60:96:29:c2:13:f5:b0:ca:4f:8e:a4:
a1:82:98:d1:59:49:c7:0b:b8:3b:06:15:41:35:35:
a4:f1:1d:d0:75:58:92:5f:8f:a6:94:f3:92:b8:80:
87:53:8f:d8:3f:9c:45:2e:d8:cf:0d:f0:a2:81:1d:
48:62:c0:b0:00:c7:01:8b:2d:2d:36:98:6c:7a:fc:
f5:e2:cf:85:44:b3:41:2f:66:2a:5a:8d:ed:dc:50:
3d:9e:cc:10:4f:21:b8:52:73:1f:56:26:83:14:ba:
0c:0f:e2:91:02:78:ff:0f:e4:03:18:34:21:8e:0c:
9b:35:18:35:d5:9a:46:4e:17:9e:f1:27:a9:10:3c:
00:d0:f9:bb:04:21:60:0d:e6:85:ed:a3:69:4d:62:
d0:00:69:1a:f4:96:4d:df:44:5d:10:33:9d:84:a2:
7c:a5:9b:81:74:94:ae:f0:27:10:79:42:64:a9:bc:
66:3f:f3:01:4c:fb:cc:52:95:c7:4d:a4:d1:a5:9a:
26:9e:bd:bc:94:b1:27:5a:be:6e:dd:e9:07:ac:40:
05:06:34:b8:06:c8:f6:b3:ff:07:98:c5:dc:8c:b4:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:89:15:3B:7D:22:1B:1A:F7:FA:BA:84:FE:0A:36:83:4E:42:9E:ED
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44EE8B607FED11EF9B001644762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.105.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ac:14:75:f4:99:87:a6:02:ab:bd:c4:61:24:10:18:aa:22:
3d:e7:b0:9d:89:5d:4b:f5:3b:61:19:cd:7e:70:b2:04:4b:92:
9c:03:4e:11:87:89:75:1a:2e:b1:ea:31:1c:7d:75:73:06:20:
94:7b:45:4c:7b:05:30:be:9f:61:df:26:bd:1c:bc:49:df:2a:
ab:15:58:d9:ce:46:a2:50:91:cf:9a:7b:f8:1a:d9:b4:29:65:
93:d5:61:9b:85:27:11:38:d7:4c:8d:32:2c:23:61:a7:14:8b:
70:44:1e:36:4c:45:af:28:f3:18:1c:36:2d:ec:47:3a:52:50:
d0:66:fe:47:64:22:19:28:51:a7:49:b4:c4:8a:80:16:12:34:
d6:6c:67:d3:4c:82:c9:1c:cd:32:80:95:54:ed:c9:32:fc:36:
23:08:7a:51:00:f7:d3:60:c5:8d:a1:32:d4:28:02:15:bb:c4:
9f:d3:38:46:f9:6b:4d:28:08:b5:b7:7c:fe:66:69:da:d9:d4:
78:31:57:b5:7d:d4:71:32:e9:92:55:89:ad:55:22:55:02:8b:
7c:61:82:a5:43:ef:89:48:37:41:95:af:83:c8:ec:1b:6a:cd:
e5:a9:a3:c2:85:97:42:b9:80:de:72:45:0b:8b:6b:cb:04:16:
f6:ae:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 09:34:27 2024 by rpki-client on console-fra.rpki-client.org