Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5561670E8B8511EEB733CA174AD9E6FC.roa
File: 5561670E8B8511EEB733CA174AD9E6FC.roa (raw, json)
Hash identifier: w8l/OjxCZZkqibhiu0X31i3n2JAhsc1BBMRvWLUSnHk=
Subject key identifier: B5:89:D1:D0:F6:39:82:EB:34:99:0A:C4:2E:E8:5D:44:1E:3F:90:D1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1361
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5561670E8B8511EEB733CA174AD9E6FC.roa
Signing time: Sat 25 Nov 2023 11:25:27 +0000
ROA not before: Sat 25 Nov 2023 11:25:24 +0000
ROA not after: Tue 25 Nov 2025 11:25:24 +0000
asID: 212238
IP address blocks: 154.16.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4961 (0x1361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 11:25:24 2023 GMT
Not After : Nov 25 11:25:24 2025 GMT
Subject: CN=6561d9a7-2b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:73:ea:8a:74:bf:46:d0:61:4a:06:49:d0:
5a:35:32:62:87:ac:ba:45:a3:61:cf:bd:4f:1c:36:
3d:2f:39:38:cf:a9:e7:e5:6e:79:2a:64:53:f2:69:
eb:29:ca:d5:45:99:ce:55:66:5f:a9:18:0d:3d:fa:
f1:a7:64:f4:f8:16:18:d9:77:c5:a1:62:75:5c:c5:
17:d6:c2:b3:70:9b:9d:a2:4d:eb:b0:5b:45:1c:da:
7e:8c:b2:47:d2:62:0b:2e:19:b8:6d:d5:be:97:e6:
93:d2:f6:bb:4b:c3:a7:f0:9a:3d:06:ce:82:91:40:
5d:a4:69:80:0b:ed:19:e1:b8:d3:c8:a3:0a:be:6e:
01:12:5c:41:8f:5e:b7:32:f6:e9:bd:8e:9c:e3:aa:
c5:9e:0e:d2:70:f6:68:5f:e0:a1:96:ef:6a:f6:36:
4b:5c:76:cf:54:b2:96:bc:79:33:d4:6b:a5:41:86:
1f:55:7a:24:3c:aa:bc:39:bf:3a:78:e0:9a:de:07:
f7:07:78:ba:8c:5f:96:34:c7:54:4f:43:31:80:30:
55:60:6d:67:fe:97:5e:6b:b2:27:cf:cc:09:a2:bd:
6b:9e:6d:f6:3c:70:7a:6a:35:a7:c2:b4:67:b4:fb:
58:ca:62:36:d6:5e:e2:9f:93:40:66:72:78:94:3c:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:89:D1:D0:F6:39:82:EB:34:99:0A:C4:2E:E8:5D:44:1E:3F:90:D1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5561670E8B8511EEB733CA174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:43:e2:12:84:ce:05:ca:24:d2:a5:93:37:08:81:e8:94:3d:
e9:8e:4b:54:7b:6f:1e:09:61:23:32:30:f7:d1:2c:53:47:99:
90:46:98:8c:9f:8c:60:2d:cc:5e:f4:29:79:fd:9a:38:fc:21:
2f:7e:43:ac:60:e3:25:8f:84:e5:68:89:d9:dd:d9:93:c4:d3:
e7:8d:fa:52:62:f1:1a:6a:fa:a6:ee:2a:d8:7e:67:83:34:a2:
37:ad:50:42:4f:e0:b2:08:62:04:ac:a2:5a:bb:86:80:10:88:
12:a6:be:3c:dc:69:69:c6:96:0d:e3:34:c6:75:42:8b:e3:8c:
24:d9:44:0e:3d:38:9c:92:63:ef:cb:1e:cf:47:f1:be:25:64:
ff:f2:1e:cb:ed:00:37:b5:ea:c4:39:9d:e4:51:b6:ea:21:57:
03:68:64:4a:00:ff:75:43:6a:8b:22:b4:f2:c5:ea:8d:d1:34:
62:d8:85:5b:f0:aa:c5:da:3d:a9:1c:49:2b:36:aa:b9:3a:a7:
77:65:c5:c4:73:1e:60:89:36:19:8b:ed:53:b3:5a:d7:61:17:
71:09:8c:62:13:99:8b:5b:34:db:cc:6e:a6:86:f5:e3:58:ef:
ef:44:5b:d4:aa:23:2f:a3:cf:56:e6:78:ab:9d:c0:52:8b:ed:
1c:42:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:12 2024 by rpki-client on console-ams.rpki-client.org