Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6071D6E8446B11EF8A191D87762E951A.roa
File: 6071D6E8446B11EF8A191D87762E951A.roa (raw, json)
Hash identifier: pbasbP7mm9XdYIeF/qhiE8COJVGGfgcB98Cyi+pLblo=
Subject key identifier: B2:D5:EC:16:41:E5:B2:42:42:93:CE:57:F8:26:FC:D9:B0:6B:B7:FA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1745
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6071D6E8446B11EF8A191D87762E951A.roa
Signing time: Wed 17 Jul 2024 18:35:44 +0000
ROA not before: Wed 17 Jul 2024 18:35:41 +0000
ROA not after: Sat 18 Jul 2026 18:35:41 +0000
asID: 9009
IP address blocks: 154.16.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Oct 2024 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5957 (0x1745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 17 18:35:41 2024 GMT
Not After : Jul 18 18:35:41 2026 GMT
Subject: CN=66980f00-a4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:4a:14:1f:42:5b:0f:ba:65:f1:2b:ea:93:
ec:92:bd:4a:c0:ae:34:b9:99:04:9d:9f:61:78:b5:
4b:7f:3f:74:58:7a:3f:19:ed:52:35:2c:40:72:26:
7b:6e:0f:b7:d9:c4:be:b2:d1:3f:55:16:7b:d4:ea:
0f:78:d9:9d:cd:36:be:e2:d5:4a:39:16:1e:37:26:
45:c7:73:fc:9d:5b:bb:fb:ee:21:86:d3:97:28:cf:
02:53:fd:b0:30:31:14:3b:9c:af:8d:f0:b2:85:41:
13:a8:a9:92:b3:95:d2:52:b2:53:44:53:93:84:7f:
98:b0:e5:ac:d6:4a:2b:23:f3:94:4b:d3:a0:19:02:
56:9d:83:69:34:71:e5:1e:ef:13:78:00:e6:55:68:
26:f6:b2:75:60:49:96:9c:5d:e9:46:3b:45:b3:9d:
7c:97:48:3a:81:43:92:c9:c6:08:02:7d:0e:5e:e7:
f5:38:5f:7d:a6:69:a4:75:6a:f1:e8:db:58:ea:92:
85:29:86:40:b3:b1:8e:5a:aa:6e:9c:4f:77:f2:e1:
06:7b:10:6b:a8:45:a2:47:cd:ec:69:9b:fd:c5:57:
63:94:d0:3f:d9:05:5f:b5:20:5a:03:e6:80:bc:61:
19:27:48:0d:e2:c2:7f:8e:ad:d9:a5:34:75:96:48:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:EC:16:41:E5:B2:42:42:93:CE:57:F8:26:FC:D9:B0:6B:B7:FA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6071D6E8446B11EF8A191D87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:19:2c:1c:7b:82:f8:15:40:8d:51:d0:48:f3:96:57:2d:86:
82:e1:1e:2d:a6:a5:30:a9:56:fb:ae:ea:a5:14:fc:1f:5e:37:
06:f4:9e:a7:e3:bc:b7:00:5d:a6:e1:9e:db:15:33:2f:c7:3b:
d6:c3:f3:e3:a3:59:28:6c:b4:4d:9f:d1:9a:f8:5d:1b:f8:1e:
d9:f1:4f:eb:99:52:0c:e0:21:82:73:00:e1:8b:94:02:c0:40:
fb:9f:63:b1:12:d5:9c:06:f6:a6:e4:b9:9f:a3:38:df:44:bb:
4d:79:c9:08:ed:06:74:fe:29:9f:01:af:f2:70:bf:09:63:95:
12:69:f8:66:44:92:fa:03:24:64:f7:96:68:46:8b:13:fa:9c:
07:05:2a:5d:f1:b8:b8:ae:12:9c:c9:dc:d1:fc:75:1a:43:d5:
c1:02:23:b5:10:a8:c2:92:87:be:41:bb:4c:3a:bb:7e:e9:58:
a6:b7:e2:cf:b5:2b:61:61:11:0f:1b:6d:56:00:4e:ae:51:1e:
e1:8c:96:c9:26:66:9b:4d:23:71:e2:ae:fc:29:22:b6:c0:db:
2c:cd:b7:4d:94:88:17:e3:e0:12:2d:50:3c:4c:71:09:76:5f:
74:43:17:eb:2a:c6:99:09:7b:93:a5:0d:df:08:fd:32:20:c2:
43:44:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 01:55:23 2024 by rpki-client on console-ams.rpki-client.org