Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4BB5D18E903611EFAF23C97C762E951A.roa
File: 4BB5D18E903611EFAF23C97C762E951A.roa (raw, json)
Hash identifier: /qn4ewPrEUbJJTcNOFe/NdbN1urNQGpJoC2CW4gev94=
Subject key identifier: 2C:C7:0F:D3:22:2F:26:78:25:78:E5:AE:6E:74:26:8A:D8:30:76:A7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 186F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4BB5D18E903611EFAF23C97C762E951A.roa
Signing time: Tue 22 Oct 2024 05:27:15 +0000
ROA not before: Tue 22 Oct 2024 05:27:10 +0000
ROA not after: Thu 22 Oct 2026 05:27:10 +0000
asID: 36352
IP address blocks: 154.16.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6255 (0x186f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 05:27:10 2024 GMT
Not After : Oct 22 05:27:10 2026 GMT
Subject: CN=671737b3-4214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:2f:27:89:ff:70:72:b8:85:5d:ec:6b:8f:
4b:f4:a8:4f:13:c0:fe:59:65:42:b8:dc:98:e1:a6:
79:38:d2:f3:85:58:ee:1c:1c:4a:55:44:70:38:1a:
1a:45:85:09:cd:f0:cd:8d:1f:c1:1b:64:a6:b3:db:
cc:f1:25:c7:d8:3f:8a:d2:11:87:97:e8:1b:46:44:
b9:9e:77:c3:98:d5:2b:0a:bd:40:31:b9:2f:b6:7b:
ab:1d:ad:a2:a5:35:39:dc:de:04:4d:9d:9a:43:51:
80:54:8a:22:28:0f:ff:8b:1d:c5:dd:54:7b:d5:95:
17:4c:39:04:01:04:c7:db:d2:33:83:51:38:b6:2d:
4c:b0:d8:2c:39:80:c9:49:43:fe:bf:8d:64:ef:5a:
a2:82:fd:ff:82:e8:cd:52:da:ab:5e:d8:06:51:a3:
5c:ed:8b:4a:57:13:34:c2:a0:d0:0e:99:c0:bf:34:
05:a1:01:dd:ca:71:8d:aa:c3:c5:92:37:1c:49:fc:
90:1e:8b:21:d6:cd:22:ef:ce:e0:57:2c:f2:53:a6:
a4:9d:88:6b:4d:c6:4a:93:bb:e0:7d:98:99:f7:90:
3e:5b:e0:cc:9d:95:bf:dd:d1:e3:82:3d:44:e9:99:
c7:5f:06:ca:0a:cb:10:83:d2:cc:f1:46:a4:28:3a:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:0F:D3:22:2F:26:78:25:78:E5:AE:6E:74:26:8A:D8:30:76:A7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4BB5D18E903611EFAF23C97C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.114.0/24
Signature Algorithm: sha256WithRSAEncryption
34:99:b0:45:a2:c2:7f:30:45:50:9a:49:e0:ca:8f:04:30:d3:
9d:83:74:0d:78:e5:9a:22:3f:91:55:f5:fb:51:ee:94:ce:7f:
6e:d4:01:55:e4:b2:c5:3f:36:18:1a:2d:c0:c1:3b:91:10:06:
b0:e4:3c:86:26:c1:90:87:13:18:6f:a1:aa:54:6a:76:b0:97:
97:b5:68:a1:3b:7e:21:21:9f:0c:fa:e6:7e:c6:89:db:c6:9d:
02:2c:ca:e6:3d:88:0a:06:ee:f3:7a:f7:b8:15:3b:5d:e2:e8:
fe:f3:e6:22:03:f4:7a:b5:e2:e7:df:b3:86:f8:5d:b0:c0:0a:
f2:b2:b5:5b:5b:08:89:c3:4b:98:52:58:6b:7d:af:d8:dd:cd:
41:d9:11:39:1b:4b:89:2f:cc:fb:6b:38:29:93:b6:cb:4e:ad:
14:49:dc:d8:0f:a6:3c:58:ea:27:da:62:da:dc:97:0f:aa:98:
2e:26:d4:90:1a:b1:cf:bf:c6:d0:a8:89:40:59:0d:a6:b5:ef:
04:83:4e:bb:09:e1:88:e2:bb:41:cb:f2:3a:d0:99:56:e9:fb:
78:2d:8a:e8:94:7b:40:1c:3a:15:c8:a7:9a:be:63:17:da:8b:
c8:79:03:bc:ef:84:6f:80:16:9a:12:08:ce:d4:36:1e:32:39:
d6:cf:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org