Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/673665E81BEE11EF8BB388FD7CDC24C2.roa
File: 673665E81BEE11EF8BB388FD7CDC24C2.roa (raw, json)
Hash identifier: RzAAfmrxxCBJAsXtNLyDsGrZ1t7Uidnn/SZkxwZ8ds8=
Subject key identifier: 17:26:59:8E:06:6E:E0:6F:57:A6:F2:FD:ED:24:1C:41:37:97:6E:E9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1695
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/673665E81BEE11EF8BB388FD7CDC24C2.roa
Signing time: Mon 27 May 2024 06:00:22 +0000
ROA not before: Mon 27 May 2024 06:00:18 +0000
ROA not after: Wed 27 May 2026 06:00:18 +0000
asID: 834
IP address blocks: 154.16.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5781 (0x1695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: May 27 06:00:18 2024 GMT
Not After : May 27 06:00:18 2026 GMT
Subject: CN=66542176-59ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:8d:ef:5d:cd:b9:12:2e:7e:0d:7f:56:3a:
d8:60:91:22:d0:7d:1e:31:f3:12:be:e9:0c:96:8f:
78:fb:99:74:6a:b8:31:a3:1a:57:e4:41:dd:0b:a3:
cd:5e:e5:b4:c7:84:43:21:4c:31:45:1e:8c:0e:bf:
e9:33:9c:56:23:24:1f:78:4c:2b:52:3c:69:3a:52:
5a:90:8d:63:27:09:9a:be:68:6f:18:32:72:b7:45:
e5:f4:4a:a0:31:0b:9f:5d:52:0a:75:89:6a:14:ac:
22:58:55:70:f2:2d:50:f2:68:c7:4b:46:c8:f9:5b:
e2:7b:97:94:fb:61:d4:95:6a:d3:34:02:8d:09:0f:
5d:af:52:4e:4b:de:29:12:a0:c7:8b:b3:ec:c6:a1:
99:f9:0f:15:18:81:7a:73:c8:ba:ba:05:fa:b7:61:
2f:8f:11:b8:bc:95:f9:be:d4:0e:20:f2:26:74:5f:
cb:05:a1:b9:a1:bd:b5:c7:9e:94:55:1b:03:36:82:
3a:e4:46:c7:f4:36:22:25:af:a4:9b:1e:cc:f0:65:
0a:cd:75:d8:98:19:a3:5b:ef:a7:63:25:5e:cd:62:
73:d3:70:8e:49:2a:9b:45:07:11:06:9c:ec:a8:4d:
e3:91:39:6f:92:ef:ea:36:53:b9:08:52:f6:c0:7b:
e0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:59:8E:06:6E:E0:6F:57:A6:F2:FD:ED:24:1C:41:37:97:6E:E9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/673665E81BEE11EF8BB388FD7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.232.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a1:a0:96:a5:f4:0b:01:8e:93:ac:ce:d4:d0:27:77:84:47:
bf:c4:b1:cf:98:80:b0:a3:87:2f:e6:61:10:49:80:b1:24:0c:
3b:f8:a1:dd:17:59:cf:d5:3b:f9:35:8a:8b:dd:0b:a0:1d:3d:
73:7a:d2:be:65:02:37:99:c4:d3:13:90:ce:7e:44:03:36:2c:
16:3b:d8:4e:82:0a:ef:68:6f:36:d6:ce:ea:59:c7:de:76:c2:
c5:b1:00:97:96:bf:85:0b:c9:f4:91:13:94:95:1f:82:c8:ab:
c5:3f:ea:25:2a:07:ef:7f:3f:18:0e:5b:9a:13:bb:79:12:af:
b3:fd:58:57:24:14:8e:65:60:1e:34:1b:d2:1c:46:5e:34:39:
80:60:ff:a7:ab:a8:0b:8a:0a:26:4c:49:c5:6e:3a:10:fd:bf:
f3:11:bc:05:e0:d6:9b:f6:43:32:ef:3c:f2:a4:f1:0b:77:0d:
ee:88:74:3b:86:cb:8b:82:15:22:2b:d6:3f:f0:8f:76:2c:0c:
ea:fb:fc:4d:2c:35:18:b0:84:a1:75:5e:46:cf:5d:6a:62:ff:
77:88:a7:a7:45:57:c2:69:bc:cb:6e:bc:04:fb:3a:ba:ca:0d:
73:eb:c4:62:ab:83:80:c2:7f:21:96:dc:5d:7c:90:25:e5:33:
1d:dd:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:18 2025 by rpki-client