Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FCA2124446B11EF97DD1587762E951A.roa
File: 4FCA2124446B11EF97DD1587762E951A.roa (raw, json)
Hash identifier: qphCa9I5XfUHX4y4neD67k1Wbd04/Y62ZAz7LRmqf4U=
Subject key identifier: 5E:51:83:E9:BF:15:15:72:4F:FD:B0:2D:F1:27:D1:31:B4:BD:B8:87
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1743
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FCA2124446B11EF97DD1587762E951A.roa
Signing time: Wed 17 Jul 2024 18:35:16 +0000
ROA not before: Wed 17 Jul 2024 18:35:13 +0000
ROA not after: Sat 18 Jul 2026 18:35:13 +0000
asID: 9009
IP address blocks: 154.16.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5955 (0x1743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 17 18:35:13 2024 GMT
Not After : Jul 18 18:35:13 2026 GMT
Subject: CN=66980ee4-619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:99:50:c2:2d:78:2d:04:59:0c:df:7f:44:
1b:0e:f2:58:62:b8:cf:02:bd:cd:33:1d:b7:87:bd:
1e:a8:9b:b7:42:85:3b:80:c4:1b:ce:80:3d:03:17:
c8:71:79:64:23:43:61:73:4e:e6:a5:77:98:51:1b:
2d:12:54:46:19:5d:91:09:db:91:40:c8:4c:18:a7:
bb:03:4d:cf:01:0a:c6:31:ca:0c:91:ba:a0:95:0d:
1e:b1:d1:cd:99:ea:0b:54:08:0b:5a:92:53:a3:68:
97:90:54:26:29:42:3b:12:12:4d:8e:ad:d3:d9:ae:
d7:05:dc:5b:22:23:21:e3:f2:55:d8:47:57:41:04:
0a:9b:a3:db:82:4d:29:d5:07:95:76:6c:8d:80:d2:
59:e0:2c:25:19:30:2b:5f:7f:21:65:14:59:13:7a:
1f:ac:69:5c:04:bc:cf:7d:cf:66:5f:91:4b:78:7f:
38:05:69:47:4a:96:fa:64:c2:68:23:81:b2:3d:be:
d3:63:28:49:29:d2:29:ec:ee:26:1d:89:02:86:ad:
af:89:92:a4:18:10:13:d8:d2:ac:08:d0:f0:1c:71:
3a:9f:df:cc:a1:39:2a:83:d4:d7:f4:55:c9:a3:1b:
7d:a2:74:af:8b:b9:5e:61:cb:a7:9e:b3:72:6d:f1:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:83:E9:BF:15:15:72:4F:FD:B0:2D:F1:27:D1:31:B4:BD:B8:87
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4FCA2124446B11EF97DD1587762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.178.0/24
Signature Algorithm: sha256WithRSAEncryption
76:94:cf:ba:68:8c:57:ab:7f:7a:a8:40:ea:45:93:b3:0b:24:
71:9b:d9:a3:13:f8:51:39:e7:16:12:10:24:72:b9:1b:2a:61:
ad:0e:17:34:c4:94:fa:8c:7e:9c:74:33:e1:76:b1:35:d7:23:
b7:33:a9:84:42:a6:b8:05:bd:ec:33:c8:ab:c1:47:da:97:9a:
0e:58:c8:71:da:d7:fb:95:32:87:c2:4b:36:c8:b7:d1:73:36:
c7:61:99:03:a1:45:5c:cb:cb:cd:f2:77:c8:d5:d7:93:8e:89:
71:ad:69:1d:61:cf:9c:09:82:4b:84:9c:1b:c2:f6:37:da:bf:
f1:b5:ea:fa:8b:dc:8d:d8:a2:7b:3c:57:53:bd:70:99:8d:ce:
c3:c1:d0:1c:da:98:d2:96:2c:58:66:3f:c0:af:af:d4:72:a1:
90:f2:ea:da:04:74:96:bb:78:cc:b8:9a:86:07:30:f8:2d:7b:
62:27:60:4f:35:a6:51:8a:f8:be:bc:d2:f4:77:34:24:24:5d:
e3:0b:d4:fe:7a:1d:63:e8:32:ef:5f:40:eb:84:25:fc:f0:bf:
fd:68:85:f7:3d:37:0a:b9:89:04:cb:eb:00:73:eb:bd:00:97:
2d:e5:08:f2:ab:9b:0d:10:dd:38:3e:31:ec:01:11:52:a4:a1:
bb:40:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:40:45 2024 by rpki-client on console-ams.rpki-client.org