Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4EEEB6401EC211EEA40BBC5E4AD9E6FC.roa
File: 4EEEB6401EC211EEA40BBC5E4AD9E6FC.roa (raw, json)
Hash identifier: YxzR1dKtCs68wwU4fXFgostfc+PaWNTAc+bcrfldnpI=
Subject key identifier: 08:51:EC:11:E5:3B:CD:08:A2:90:DF:C0:FA:AC:D5:EE:62:89:06:0D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 105F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4EEEB6401EC211EEA40BBC5E4AD9E6FC.roa
Signing time: Mon 10 Jul 2023 01:37:19 +0000
ROA not before: Mon 10 Jul 2023 01:37:16 +0000
ROA not after: Sat 12 Jul 2025 01:37:16 +0000
asID: 61112
IP address blocks: 154.16.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4191 (0x105f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 10 01:37:16 2023 GMT
Not After : Jul 12 01:37:16 2025 GMT
Subject: CN=64ab60cf-711a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:1d:d9:7b:2e:6c:b5:4e:6e:56:51:74:c6:
cb:31:03:9f:c1:44:6f:59:d5:1a:2a:9b:03:e1:5e:
48:24:5c:26:8a:01:bc:53:70:57:43:61:71:b9:40:
6e:bf:d9:bd:ce:68:4b:ac:6a:c2:fa:c5:d4:c6:ba:
22:4f:83:04:74:0e:03:79:55:4d:3c:bf:3f:88:f7:
40:6e:48:dc:07:75:8a:c7:76:a6:67:fb:88:5d:af:
b2:19:b8:bd:4c:06:82:bc:9c:f4:d4:2e:94:c0:6f:
1f:19:74:2b:87:ef:0d:72:21:27:dc:69:c6:e0:da:
22:eb:54:34:b7:4f:75:75:df:81:f2:40:d6:0e:80:
78:ba:5d:2f:53:be:0e:9f:44:21:c8:8c:0a:e2:89:
e0:f9:f0:24:42:e4:57:e5:3c:49:36:f9:69:34:1e:
97:c0:94:e3:c2:2f:4d:8f:bf:18:a0:5a:a3:c9:30:
a7:31:71:55:0c:c2:aa:4d:5a:6f:65:cf:e0:19:57:
14:11:62:d5:17:3f:2c:3a:26:80:64:80:97:db:65:
18:d4:d8:41:4f:1b:65:9d:b9:71:d3:32:ac:db:57:
b3:ba:49:5e:85:34:95:1e:83:3f:d7:51:74:13:c1:
db:55:a2:47:c9:04:f1:7c:de:88:10:84:cd:86:4b:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:51:EC:11:E5:3B:CD:08:A2:90:DF:C0:FA:AC:D5:EE:62:89:06:0D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4EEEB6401EC211EEA40BBC5E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c0:f0:3d:1b:a4:b6:c5:f8:e7:bf:03:7b:29:26:dd:e7:95:
23:3d:bd:0b:7a:c7:23:1d:56:79:ce:b1:0f:29:e3:6f:e3:c3:
fd:48:9f:77:a2:03:61:97:50:f5:e7:51:e5:f3:15:ae:eb:3c:
25:93:7d:af:c4:05:1c:1d:0c:ad:53:29:91:82:01:df:aa:9b:
cc:ef:58:bb:75:13:e5:b9:fc:bf:83:d6:ac:51:1f:f5:c6:e9:
8d:0f:3c:62:4e:05:e5:dc:ed:d4:22:81:f5:eb:14:ef:2c:93:
30:96:45:61:ba:f9:3b:1b:d6:33:3f:3b:a8:57:4b:79:4c:14:
df:f8:e2:70:20:96:87:d7:af:3c:71:19:6e:d0:9c:8e:fe:72:
20:55:41:3f:16:da:01:64:1b:04:af:b6:2d:58:6e:c3:c6:1d:
ef:9b:15:da:47:1f:0b:7f:8a:d2:d9:d8:8d:75:5d:33:63:17:
c7:3e:06:9b:d9:f5:2a:90:ae:82:90:06:e6:11:da:2d:31:62:
3e:e9:80:fc:04:f2:b5:5b:56:28:9f:bc:90:d7:ef:dd:ca:34:
19:a1:21:83:cf:8d:a0:8c:fd:6d:2d:e2:12:be:59:9d:6f:76:
eb:a5:e8:2c:86:06:c0:49:9c:25:4a:ad:a8:58:40:03:50:51:
65:5f:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:22 2024 by rpki-client on console-fra.rpki-client.org