Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/531400B4FDA511EE919E272B017001B1.roa
File: 531400B4FDA511EE919E272B017001B1.roa (raw, json)
Hash identifier: tES8aij+4HUXDI5meVjkauIKirmv76UZPqpTJjQFu3o=
Subject key identifier: B3:D9:56:45:5A:76:00:00:4C:1F:AC:EB:67:B9:21:C0:AC:E4:8C:7F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 15EB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/531400B4FDA511EE919E272B017001B1.roa
Signing time: Thu 18 Apr 2024 17:01:40 +0000
ROA not before: Thu 18 Apr 2024 17:01:37 +0000
ROA not after: Sat 18 Apr 2026 17:01:37 +0000
asID: 140208
IP address blocks: 154.16.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5611 (0x15eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 18 17:01:37 2024 GMT
Not After : Apr 18 17:01:37 2026 GMT
Subject: CN=662151f4-be70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:c8:20:66:72:0e:8f:da:a1:35:59:71:2e:
a0:b9:3c:ed:20:35:86:c0:64:b6:27:53:7d:a1:e5:
f5:d5:9d:5a:d0:a7:9b:ef:b3:b5:8c:09:ce:3c:95:
fb:d6:7d:f2:bb:65:32:4c:25:18:e7:16:65:68:3e:
93:06:8c:25:c4:17:98:3f:28:57:c7:34:03:8a:ed:
c9:ee:7d:bf:17:4d:18:e5:08:bb:db:60:cb:a0:f5:
50:a1:4e:ea:14:3e:ca:bb:6c:b5:47:1f:7b:65:f2:
4a:4e:69:28:56:e2:af:60:a2:cd:79:4e:7b:1b:4c:
33:75:d7:dc:b6:b4:8b:8b:46:eb:ab:f8:24:cb:46:
b8:e0:bd:b4:05:ea:49:e9:1f:c1:70:c5:7c:52:ac:
60:db:57:44:c0:71:a8:67:b7:e3:21:21:70:f3:70:
97:eb:40:17:76:2a:dd:3c:c9:bd:1e:d4:b9:48:f5:
65:3f:1e:d5:00:16:98:57:6f:f1:82:da:1e:3b:0d:
a6:bb:d9:5e:9e:b1:a2:06:79:c0:0a:0f:42:b8:5c:
43:0d:a1:38:38:14:00:4c:bd:e7:78:d8:09:10:8e:
d6:f4:95:89:7c:99:02:2a:35:92:da:aa:90:85:9b:
1a:4b:06:21:38:eb:d5:ad:5d:0a:fa:72:37:2d:23:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:56:45:5A:76:00:00:4C:1F:AC:EB:67:B9:21:C0:AC:E4:8C:7F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/531400B4FDA511EE919E272B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.220.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:30:c5:0c:bd:91:c7:3a:13:a6:b1:76:04:77:a5:0b:51:b3:
8c:fa:3c:e6:70:2e:99:6e:e1:25:e4:1e:29:3b:b2:b3:23:02:
b9:5b:52:94:b5:06:51:68:09:63:1e:3e:4a:ac:35:c2:c7:4d:
5c:bf:b3:c9:30:10:46:b0:72:90:d9:ba:2f:96:7a:57:23:f7:
8f:8c:87:9e:b3:38:6d:af:32:0f:0c:32:12:04:17:da:03:1d:
2a:3b:52:0a:29:bd:10:2f:5c:28:e9:27:8e:84:5c:e6:48:d3:
06:60:55:5f:8e:06:73:d8:16:18:e1:0e:09:c0:94:05:8f:6d:
82:d8:82:08:c4:60:bf:cd:6d:f2:5b:3a:73:4c:9a:24:45:a8:
41:ca:5b:b0:89:3a:59:12:87:a4:29:a5:f0:be:19:6d:67:3d:
e0:16:70:29:e7:91:3e:4e:35:26:2d:0c:f2:63:a7:30:dc:9c:
94:04:37:f2:80:b0:57:15:e2:c8:35:89:41:1f:5c:f5:27:01:
c0:2a:bb:b2:d4:9e:b8:33:6d:71:be:b3:b6:2c:3d:6b:12:bb:
90:37:50:c6:2b:1c:27:61:20:3d:72:f5:b5:72:f7:66:0e:84:
8e:7e:18:fa:c8:52:d5:b4:5e:6a:cb:8a:89:06:97:7b:67:11:
38:6f:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:32:45 2024 by rpki-client on console-fra.rpki-client.org