Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5A3AC2581C1B11EFA5810B2C7DDC24C2.roa
File: 5A3AC2581C1B11EFA5810B2C7DDC24C2.roa (raw, json)
Hash identifier: rtIBEKp0HT2H/7dtWHCLknbsc/ENLB62DXzAi++yJy4=
Subject key identifier: CD:01:C9:43:C7:06:82:14:1D:6A:5C:5B:74:D7:50:E8:61:23:4C:77
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 169C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5A3AC2581C1B11EFA5810B2C7DDC24C2.roa
Signing time: Mon 27 May 2024 11:22:08 +0000
ROA not before: Mon 27 May 2024 11:22:04 +0000
ROA not after: Wed 27 May 2026 11:22:04 +0000
asID: 9009
IP address blocks: 154.127.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5788 (0x169c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 27 11:22:04 2024 GMT
Not After : May 27 11:22:04 2026 GMT
Subject: CN=66546cdf-ac53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:93:d4:dd:70:ae:c5:20:a0:68:81:8f:80:
c7:e5:b4:ef:0e:6c:4c:23:7e:c2:52:0f:a7:4a:38:
93:5c:e9:2d:f7:8b:0f:df:68:17:37:5a:fb:c2:2d:
ea:d3:08:d4:7c:80:a6:c5:94:b5:26:33:29:8d:4a:
3c:8e:15:a6:a3:00:b4:eb:4d:79:30:70:a9:9c:62:
70:d9:58:61:c4:ba:56:28:8d:65:ee:b2:c7:eb:c5:
26:91:71:af:42:98:15:29:09:9e:dd:d0:fe:10:7d:
71:ec:8d:b5:dd:3f:8f:09:a4:a4:54:3c:c5:19:68:
38:fb:b2:aa:4b:54:ef:41:db:78:d1:54:be:57:d9:
7d:87:76:c4:c2:49:45:30:c1:40:8e:af:a3:80:d5:
76:2f:b3:8c:90:f1:92:2f:b2:a2:3c:0d:ed:d0:d7:
4a:9f:87:37:af:f1:38:81:fb:63:ab:a6:18:05:d2:
36:6d:96:ac:f1:04:3d:14:73:e9:eb:11:3d:11:48:
1e:b4:e1:7b:0a:80:38:fa:ee:98:4c:82:f6:4e:ec:
ba:e5:a8:13:96:f4:88:56:ae:18:04:a5:56:66:0b:
c5:4d:9c:32:8c:ea:f8:7f:f9:21:0c:98:fc:3e:35:
a6:0a:a1:86:4e:05:89:3d:65:3a:dd:e1:45:11:4c:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:C9:43:C7:06:82:14:1D:6A:5C:5B:74:D7:50:E8:61:23:4C:77
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5A3AC2581C1B11EFA5810B2C7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.51.0/24
Signature Algorithm: sha256WithRSAEncryption
39:78:ce:95:2c:0d:82:5b:a3:ec:69:fc:45:8e:4c:d4:a0:97:
94:73:8c:b5:fd:66:5c:ed:db:ae:94:41:d1:70:8f:09:3e:71:
4a:4a:0b:a8:e0:69:de:dc:50:66:64:f4:f6:1c:e3:2b:21:25:
c2:bb:53:30:69:f3:9c:7e:b4:d7:f6:7d:80:c6:6b:17:e1:ca:
30:b9:d6:de:f7:cb:03:ed:b3:34:8c:6c:1e:60:b2:33:35:96:
8b:cd:f6:c1:d8:bb:be:65:4c:dc:3b:84:cd:d6:7d:bc:6b:43:
6c:e5:14:89:eb:1e:61:c3:fc:e9:bf:bf:9a:9f:4e:19:af:e2:
f7:5e:c0:65:ba:8c:5e:8a:08:38:55:af:83:31:fe:69:74:9d:
a0:49:2a:ab:1b:39:67:27:64:6e:a0:68:8f:4a:56:fe:7a:b7:
1a:6d:7c:aa:4b:51:99:03:15:93:2f:cd:a3:05:d3:a6:59:0b:
71:7d:fa:23:da:f2:70:89:6c:f3:9d:91:16:6c:c6:26:3f:55:
f9:d9:eb:ad:97:9a:85:10:1a:9c:7c:84:00:02:8a:c4:58:3c:
88:4d:12:4d:c3:7d:59:20:13:08:f6:15:2d:bc:fe:7b:b0:a2:
a2:a8:cc:b2:6d:a7:86:f0:e2:1d:28:ac:1e:1b:d1:7f:86:97:
05:65:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:55 2024 by rpki-client on console-fra.rpki-client.org