Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4EC9D54227DF11EF8C5378EE7CDC24C2.roa
File: 4EC9D54227DF11EF8C5378EE7CDC24C2.roa (raw, json)
Hash identifier: gc7tbai4aVUMjHRZ5Cw3TkJilLc/tCGbRqqQLy+KG4s=
Subject key identifier: A4:70:FF:A6:9D:81:54:CD:40:5D:97:E7:2E:04:88:E6:B3:B7:64:91
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 16D7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4EC9D54227DF11EF8C5378EE7CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:42:32 +0000
ROA not before: Tue 11 Jun 2024 10:42:29 +0000
ROA not after: Thu 11 Jun 2026 10:42:29 +0000
asID: 13213
IP address blocks: 154.16.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5847 (0x16d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 11 10:42:29 2024 GMT
Not After : Jun 11 10:42:29 2026 GMT
Subject: CN=66682a18-c7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:cf:94:af:a6:16:ca:22:c4:c9:2d:1a:40:
f5:e5:13:e1:80:04:20:c3:9a:24:e8:07:f6:f9:a6:
ac:a5:9a:40:f1:c4:ff:75:34:1f:1c:e8:94:7a:1c:
46:e5:68:52:57:33:0c:0d:d4:34:03:74:28:0d:61:
e8:7e:58:19:64:0f:34:5f:fe:2b:96:45:67:d3:60:
87:29:a1:0e:86:e0:b7:ed:dc:d0:87:b9:35:be:7e:
66:97:6e:b5:70:35:33:29:00:5e:83:8b:24:05:70:
a9:b2:77:a1:d6:5e:cc:ba:4a:3b:79:7e:32:29:90:
65:0b:8c:10:f5:28:87:42:da:a9:bb:e2:02:9b:ee:
fa:65:19:2b:be:c9:59:83:38:8e:58:96:ab:66:59:
ae:58:03:27:b7:c5:26:0b:d7:73:fa:1c:40:26:30:
11:e7:64:f4:da:91:b2:27:91:a5:62:38:9b:6e:36:
e4:d3:e3:75:fe:22:80:74:55:db:bb:7f:ed:4c:41:
ce:9d:6f:9e:c5:33:5b:30:e7:bc:d2:42:54:97:73:
f5:7f:03:8f:20:a0:c0:87:ac:56:8d:e2:15:f3:be:
05:d4:0a:bf:36:26:fd:47:08:05:60:72:ad:75:e4:
65:d2:bb:f8:96:b5:fa:48:5f:19:95:b1:27:c9:1c:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:FF:A6:9D:81:54:CD:40:5D:97:E7:2E:04:88:E6:B3:B7:64:91
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4EC9D54227DF11EF8C5378EE7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8e:71:52:7e:00:b8:65:19:6f:91:95:de:15:19:80:e2:8c:
52:94:11:31:ee:67:b5:2d:0a:f9:97:c3:79:3f:51:4e:09:20:
01:28:b9:c1:39:12:de:e3:12:d4:49:33:f2:01:ac:26:ed:de:
df:68:01:3d:69:59:4a:85:2d:bf:2d:85:2b:74:d0:e7:98:80:
91:11:f9:95:24:cb:ec:52:14:f6:b5:10:de:52:0b:95:2c:f4:
b4:4a:8e:d2:da:8e:af:62:12:8e:6e:65:69:a5:0e:57:45:f4:
43:7e:57:b6:cb:78:69:f2:36:d1:a9:74:f9:1f:b7:db:0d:8b:
b3:e6:ad:0c:e4:35:fa:81:b9:32:e9:92:c3:ae:aa:cb:9a:2c:
f2:95:97:85:93:2d:40:da:77:32:9e:97:7b:c2:7f:34:68:dc:
42:14:e2:ec:20:17:82:89:59:0e:24:52:65:21:30:49:c6:0d:
a8:14:85:8c:59:2c:fe:31:05:ae:5f:83:9b:ab:14:69:82:c7:
b1:48:88:8f:99:52:0e:ba:b1:00:2a:ef:db:c0:77:8b:bd:49:
46:dc:66:78:d4:5c:98:b0:d2:2d:81:22:ed:f3:2e:9a:c4:47:
60:11:84:28:be:2a:f5:34:f7:a2:29:d4:0a:ad:e0:87:83:2b:
88:60:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org