Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48936EA4552211EDADFD1F8AF1222468.roa
File: 48936EA4552211EDADFD1F8AF1222468.roa (raw, json)
Hash identifier: P5ReqdlUfQg9kToZNfUGJrW9FrhmYtVr/egtFQAs9MQ=
Subject key identifier: F4:B8:38:4B:FE:2D:32:E9:A5:C5:2E:2B:FF:44:33:76:41:8F:47:22
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A72
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48936EA4552211EDADFD1F8AF1222468.roa
Signing time: Wed 26 Oct 2022 11:35:25 +0000
ROA not before: Wed 26 Oct 2022 11:35:22 +0000
ROA not after: Sun 27 Oct 2024 11:35:22 +0000
asID: 36352
IP address blocks: 154.16.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2674 (0xa72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 26 11:35:22 2022 GMT
Not After : Oct 27 11:35:22 2024 GMT
Subject: CN=63591b7d-fb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:dd:e2:99:78:84:89:26:9b:49:48:6b:6f:
ae:73:58:7c:b5:59:3d:2f:9b:0d:50:af:72:5f:63:
e2:1a:61:f4:d4:f5:38:56:f0:91:9c:4d:c2:e2:14:
be:19:57:6e:ba:02:02:50:8a:1d:dc:26:87:2a:db:
e0:93:92:69:2c:46:8f:63:e2:46:b8:9d:92:74:11:
96:75:c2:5a:e0:00:95:a8:dd:df:ef:53:06:c1:77:
59:b1:e9:9b:03:10:75:39:9a:98:ba:b5:fb:c9:fd:
68:8f:e4:8f:6a:ef:db:3b:56:20:d9:76:08:aa:88:
fc:08:a4:ae:56:33:e3:8c:60:9b:ac:3b:0e:f3:76:
f4:6e:ed:5a:5e:67:dd:26:65:58:97:ac:a3:c0:38:
b6:a6:ed:1f:73:36:f2:99:4e:f5:23:9e:b5:e2:f5:
41:9e:ce:f7:25:27:29:c3:5d:29:a5:f6:00:96:49:
ac:4e:47:92:10:ed:74:0b:ef:d9:80:f9:db:79:5c:
bf:fb:bc:25:bc:36:e9:23:8f:74:69:cc:b9:ab:96:
50:fe:50:6a:24:3d:0c:72:de:20:52:67:bc:f2:5c:
c1:61:8e:95:ba:55:98:f1:0b:2a:92:4c:da:38:16:
95:87:a6:b3:9f:08:6d:92:9c:1d:83:00:ad:c2:30:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:38:4B:FE:2D:32:E9:A5:C5:2E:2B:FF:44:33:76:41:8F:47:22
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48936EA4552211EDADFD1F8AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.117.0/24
Signature Algorithm: sha256WithRSAEncryption
32:77:a5:32:20:98:b7:0a:78:13:5a:da:c3:bd:a9:6e:ec:59:
fc:38:51:5c:ce:99:ba:3a:56:ec:5c:af:02:1d:69:80:59:a5:
7e:25:b4:6b:54:ed:45:c9:83:4d:d7:7f:06:e4:24:01:c9:c8:
bb:7d:c3:c5:58:62:f4:a8:f4:49:e0:c9:4e:84:61:3c:b1:7e:
ca:ca:57:fc:83:1e:48:74:d2:d5:3f:ba:59:37:d7:77:61:da:
47:71:c0:3b:02:27:d0:1f:f3:29:6d:a7:fb:f9:cc:6a:95:8b:
03:48:72:9c:12:1a:d3:44:1c:c7:4d:3b:51:09:db:bd:ea:6d:
a8:5f:df:88:59:ed:c7:4d:7f:da:ed:78:32:ea:18:d1:dd:b5:
81:3b:04:1b:0a:13:08:7f:e2:ea:3f:50:34:59:ec:0b:9f:60:
0f:82:2b:b1:3e:9a:67:7e:bf:38:f4:7c:e8:51:a3:39:2c:c6:
78:97:c2:dd:f8:2f:8e:49:b0:25:04:2a:cf:78:0f:a2:da:67:
81:0b:bc:d3:ac:90:dc:85:c2:3e:30:12:d5:82:05:75:61:4d:
98:85:13:01:f7:72:34:ab:13:85:f1:6e:63:73:53:5f:3b:2d:
2c:83:d0:e2:1a:96:43:75:32:2d:a9:8f:45:5d:2d:28:f1:c3:
f1:ed:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 13:16:51 2024 by rpki-client on console-ams.rpki-client.org