Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48CFA398EA7111EEA6C9A693775412E6.roa
File: 48CFA398EA7111EEA6C9A693775412E6.roa (raw, json)
Hash identifier: 3czNWAeDy+kaudX5oPrsypYHfZ6c61ScLkD/Q5bsAT0=
Subject key identifier: D4:7A:3D:C1:A2:81:BD:DC:6F:8F:93:D3:70:7B:34:F1:3C:A6:C5:D4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1578
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48CFA398EA7111EEA6C9A693775412E6.roa
Signing time: Mon 25 Mar 2024 06:31:17 +0000
ROA not before: Mon 25 Mar 2024 06:31:13 +0000
ROA not after: Wed 25 Mar 2026 06:31:13 +0000
asID: 834
IP address blocks: 154.16.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5496 (0x1578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 25 06:31:13 2024 GMT
Not After : Mar 25 06:31:13 2026 GMT
Subject: CN=66011a35-7258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:e9:71:6c:84:43:58:bb:17:ab:e1:80:46:
22:76:f9:b7:db:64:39:06:05:e0:94:91:98:fc:c7:
58:50:ce:51:93:e7:d7:40:ff:eb:02:84:16:91:f9:
aa:02:b2:af:81:89:06:34:58:05:fe:da:42:50:eb:
8f:67:a6:36:90:ae:07:99:24:54:d6:0e:8f:ac:74:
9e:ba:4c:0a:38:9c:0f:cd:6c:1f:19:11:a1:1a:f0:
e8:2f:e1:96:e9:68:68:5b:d9:40:14:f0:2d:1b:e6:
59:3a:29:14:2c:fb:2f:66:b6:8c:60:dc:d4:b4:72:
f9:09:a2:e3:53:ad:9c:e2:05:e8:2a:90:68:75:c9:
c8:5d:0c:3a:d0:02:b0:ff:12:2f:9e:f0:a8:1b:92:
26:4b:f5:ae:56:de:a6:d3:6c:54:1c:bf:4c:13:84:
c5:06:b9:9a:26:c4:e4:ce:ae:26:bb:54:a8:e6:69:
d0:73:01:d6:e5:00:e4:f5:5f:2e:f4:66:da:d4:04:
6c:fc:2e:ad:76:71:21:67:96:b7:e7:c7:4f:b8:c9:
4d:02:d3:02:ab:0d:be:14:ca:9f:87:6b:c4:59:cf:
74:c1:9d:db:1d:3f:72:49:4d:61:73:d5:a5:28:11:
94:f3:b5:4d:60:9f:ff:59:33:ea:e9:92:ba:08:2d:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7A:3D:C1:A2:81:BD:DC:6F:8F:93:D3:70:7B:34:F1:3C:A6:C5:D4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48CFA398EA7111EEA6C9A693775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.254.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8a:eb:76:4e:48:c0:e7:8f:9c:1d:92:91:13:bb:49:40:c4:
04:6c:90:66:21:7e:df:ad:ef:ec:af:b7:4f:77:61:a3:53:e7:
bb:5f:7f:13:40:43:d4:bc:e5:e1:f7:82:96:da:2b:16:19:53:
4b:ca:0d:e2:6e:d5:ae:6a:ca:04:0a:5f:53:ac:0f:1a:e6:87:
ca:dd:0c:1c:a5:fa:70:8a:b8:0c:20:94:c6:00:32:69:8d:8d:
bb:6d:04:a7:9d:d0:c4:f8:53:bc:c3:e3:62:7c:0a:16:c9:26:
0d:c7:e9:0f:cf:ac:b7:88:3d:ba:a0:06:1e:51:3c:98:d1:56:
ef:69:34:01:b1:ba:b8:0e:b0:44:7b:b2:94:6c:9a:c4:a2:3a:
9e:81:81:52:71:c3:25:67:99:ae:50:38:47:1f:00:de:68:99:
ae:d6:e8:48:bf:8e:2f:47:35:86:df:66:2f:24:48:b1:20:22:
28:9f:29:97:bb:0b:5e:e8:1b:a2:8f:9c:bb:00:cf:63:5a:26:
85:cf:b0:fc:64:63:56:a2:8d:01:34:6e:a8:ab:72:84:39:4c:
8a:66:bf:9a:66:fa:81:04:48:66:2b:37:f6:8e:de:c3:cb:38:
dd:f0:be:0e:d5:cd:c6:4c:23:02:46:0e:f5:00:05:2c:be:1f:
8d:cc:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:18:33 2024 by rpki-client on console-fra.rpki-client.org