Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C154720D54911EE9680318E775412E6.roa
File: 4C154720D54911EE9680318E775412E6.roa (raw, json)
Hash identifier: urYhEjDUbSY0MrurTSnyUje4rE+n9dXLZvAIuqH/ukM=
Subject key identifier: D8:D5:AA:2C:BB:CC:5B:DB:EB:0B:35:9C:4A:63:78:43:EE:8A:51:BB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14F0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C154720D54911EE9680318E775412E6.roa
Signing time: Tue 27 Feb 2024 08:22:08 +0000
ROA not before: Tue 27 Feb 2024 08:22:05 +0000
ROA not after: Fri 27 Feb 2026 08:22:05 +0000
asID: 201341
IP address blocks: 154.16.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5360 (0x14f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 08:22:05 2024 GMT
Not After : Feb 27 08:22:05 2026 GMT
Subject: CN=65dd9bb0-94d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:49:73:37:a6:89:e0:90:29:ce:e9:1a:74:
d8:db:e7:e2:1c:a5:b2:be:7a:ab:cf:a1:3d:11:c0:
ab:ec:eb:0c:43:37:b4:aa:1c:cf:f5:2a:47:d2:5b:
ec:d2:29:d9:fb:43:4d:f1:86:de:f1:2a:39:38:56:
ec:0b:f5:fe:6a:6d:05:78:ad:43:55:d9:cd:ae:0e:
90:00:3c:2d:29:9f:cf:80:c9:1a:bf:ad:da:f9:0f:
3a:d5:6e:36:04:0e:6c:cb:72:ac:e2:ff:91:9c:b4:
88:65:46:ae:64:9c:ea:e9:98:c7:d6:82:8e:e8:ff:
93:55:a9:4a:4f:c5:59:b7:18:d0:b5:d0:eb:29:2f:
6c:1a:e5:0e:0d:5e:ff:44:ab:cf:04:b3:72:01:d1:
af:80:b5:21:f6:6d:8d:b3:d6:de:78:ef:cc:28:e8:
67:b5:13:2d:d4:42:c0:b7:b8:c5:03:c5:fc:a1:9c:
24:e7:50:30:92:38:93:a6:4a:95:f9:f7:1b:79:21:
d3:0d:17:6a:c1:09:61:0b:65:46:4c:b1:b0:f1:34:
93:ca:fb:c0:bb:e2:41:11:92:5e:0c:85:61:a1:05:
61:5a:4c:a4:bc:c3:69:1f:5c:82:0c:d2:ff:5e:85:
91:63:42:c0:0f:1c:59:32:8e:bb:1f:04:69:fa:40:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:AA:2C:BB:CC:5B:DB:EB:0B:35:9C:4A:63:78:43:EE:8A:51:BB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C154720D54911EE9680318E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.60.0/24
Signature Algorithm: sha256WithRSAEncryption
81:46:e5:d2:58:7c:4d:69:cc:38:97:b8:d7:5c:4a:a8:e7:58:
6d:de:e1:6e:3f:9f:55:55:10:fd:65:79:94:be:25:08:b1:f8:
1e:0d:fc:74:a2:2e:59:b8:d8:7a:56:82:9b:5e:ac:2c:ed:31:
52:48:ad:34:31:91:bc:6a:33:78:c7:23:5a:b7:b0:f5:47:6a:
15:d1:c7:10:3c:59:d9:03:cf:50:83:2c:0e:43:4b:30:39:99:
f3:e0:1f:c8:7c:5b:3a:73:73:9d:d3:21:85:b9:c9:ef:83:6a:
13:fd:01:5b:a6:d1:ed:5d:82:35:50:d0:91:b3:0e:ba:46:9a:
34:e0:8a:40:f3:dc:a8:9f:3c:9e:ea:88:3e:c3:2a:a8:33:39:
e2:7a:06:57:f9:32:f2:18:77:b0:0e:50:eb:04:a2:9a:72:ad:
54:41:f2:18:87:62:a9:5d:e8:5c:e9:d7:6d:14:0d:2e:25:c7:
68:0a:50:9a:f8:43:a7:50:e9:69:d9:ae:6e:34:a9:02:76:a0:
09:d5:fc:0e:bc:ec:ec:2c:70:51:77:8b:11:de:e3:44:78:a7:
3e:bf:37:79:50:e9:f9:20:d0:3b:4b:74:7d:fd:aa:85:46:bd:
64:c4:98:cc:61:a9:02:f3:a6:54:07:01:90:1c:0d:3f:78:de:
d2:ae:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org