Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/61DF8874904511EF968C995C762E951A.roa
File: 61DF8874904511EF968C995C762E951A.roa (raw, json)
Hash identifier: Fl6Ozv62Nze19/jHnrSkjmmPHsRZVDbWpFzzKXREbNo=
Subject key identifier: D5:F6:46:70:20:C0:CB:9F:36:D3:AA:79:D7:24:59:A3:4A:18:DE:27
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18B1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/61DF8874904511EF968C995C762E951A.roa
Signing time: Tue 22 Oct 2024 07:15:14 +0000
ROA not before: Tue 22 Oct 2024 07:15:10 +0000
ROA not after: Thu 22 Oct 2026 07:15:10 +0000
asID: 397373
IP address blocks: 154.16.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6321 (0x18b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 07:15:10 2024 GMT
Not After : Oct 22 07:15:10 2026 GMT
Subject: CN=67175102-ef2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:9a:3d:b4:0c:45:e8:34:c5:42:77:73:72:
af:06:a9:f5:6a:15:9d:71:52:2b:e7:8f:58:59:a3:
db:53:b9:95:98:ca:30:45:31:92:6e:d6:1c:8a:12:
09:c8:10:65:6e:61:c6:61:c7:1e:ce:39:a8:55:a5:
4b:4a:47:3f:91:0b:24:84:d4:d7:f8:0b:3f:97:b6:
58:8d:99:fd:e0:08:00:a9:8b:38:cb:b4:b3:cf:57:
34:64:b4:a5:1a:ca:4d:97:16:a2:d8:52:6a:95:cc:
e0:ef:5e:ef:27:e5:61:fa:11:7a:8e:89:a3:df:77:
ea:84:42:69:65:ed:d5:6c:be:56:9a:f2:42:1c:43:
e9:65:98:c8:4b:1e:25:93:12:66:e9:a1:63:44:0c:
70:9e:3a:02:18:60:03:7a:6e:1d:07:59:00:22:6f:
f8:47:d6:1c:ff:ef:80:9b:09:7f:9e:b1:29:05:0d:
6e:89:f4:e0:f4:0c:38:68:4f:3a:52:6c:ae:99:d5:
c4:d0:4d:5d:33:3a:e0:b4:ba:6e:3b:09:02:46:9e:
04:a4:11:40:c7:8b:77:bf:6e:b8:a8:ea:d0:37:fa:
6f:ed:f6:4f:1b:63:d9:12:7f:ce:19:4b:04:ab:10:
50:60:37:68:98:98:6c:d8:1c:1b:29:e6:c7:42:df:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F6:46:70:20:C0:CB:9F:36:D3:AA:79:D7:24:59:A3:4A:18:DE:27
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/61DF8874904511EF968C995C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:29:72:40:05:ee:8f:31:2a:c6:d1:52:a1:bc:c8:30:43:f7:
71:b8:22:f8:8d:32:56:8f:fd:2d:47:19:8d:11:b0:fb:c4:7a:
98:cf:89:15:47:02:47:2f:cd:ed:70:85:49:78:3a:6a:e0:78:
66:f0:06:75:e7:85:69:4e:6b:cd:a2:e3:7e:40:90:90:50:5f:
e6:cf:f1:4e:07:34:45:ce:b7:1a:60:92:80:31:b7:98:09:99:
e7:0f:34:8b:88:76:ad:0d:57:0e:08:9c:f6:f7:d1:6b:61:4b:
6b:92:7f:b5:9c:45:32:a9:9b:0b:75:fd:45:76:d7:ea:90:7f:
38:03:ce:bc:bb:72:99:6f:2d:bd:63:95:ab:67:44:96:0b:14:
12:e7:bd:37:b8:f4:0e:d8:05:24:cb:e4:71:7d:31:bb:ed:90:
87:f2:74:6d:7f:05:d7:d3:12:43:52:73:d1:16:b5:9f:14:00:
98:2f:30:f9:ea:1b:83:75:4a:59:63:0d:60:d1:b2:d9:1b:49:
f3:27:93:97:b8:91:0e:4e:9e:88:14:fb:a8:4e:97:79:c5:86:
15:36:ae:4b:d2:b7:d1:c3:ca:b9:93:12:d5:7c:42:d4:8d:9c:
e5:c3:01:60:69:22:04:ca:e1:82:23:3d:2a:6f:f7:50:50:ec:
30:8d:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org