Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD0D82EFF7E11EDA08833864AD9E6FC.roa
File: 6AD0D82EFF7E11EDA08833864AD9E6FC.roa (raw, json)
Hash identifier: ywsqfP3SADSZ/bfmfp1Kz7t7AvtHVHqFb3Ye9OGwIRY=
Subject key identifier: B1:FB:B9:7A:8E:D8:D4:33:B9:71:28:DB:65:B3:8B:D6:5E:33:F5:A2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E03
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD0D82EFF7E11EDA08833864AD9E6FC.roa
Signing time: Wed 31 May 2023 06:43:14 +0000
ROA not before: Wed 31 May 2023 06:43:10 +0000
ROA not after: Fri 30 May 2025 06:43:10 +0000
asID: 38001
IP address blocks: 154.16.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3587 (0xe03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 06:43:10 2023 GMT
Not After : May 30 06:43:10 2025 GMT
Subject: CN=6476ec82-49e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:f9:f7:a8:e9:d8:d7:5a:93:b6:28:47:91:
f0:45:26:1b:4a:46:4f:39:50:5b:41:28:b5:89:62:
c3:7c:c9:62:2d:56:8e:c4:5e:fa:1b:71:f7:1a:ca:
af:ba:18:d5:d7:60:0c:ca:a0:85:85:a7:7a:e3:7c:
8e:40:ba:b5:4f:bb:44:83:81:25:fe:39:56:c5:58:
d7:3b:53:08:12:6e:a5:00:a6:34:34:c4:f6:78:02:
9e:c9:62:0f:cb:9a:c9:8f:71:73:82:05:ed:74:5b:
02:65:40:ec:ba:85:84:1a:cb:07:fc:8b:88:9a:d0:
0d:cf:a7:b3:9d:b3:14:04:c5:6d:ff:7a:93:dc:ac:
32:90:7d:d2:1e:af:82:6f:b6:c7:2e:fb:23:fd:bb:
a3:a6:1d:cc:e0:07:ea:43:fb:7d:e2:70:50:2e:94:
5b:b9:26:9e:b7:9c:f5:d5:56:bf:b4:da:47:d2:1a:
3c:27:bb:6f:29:8d:a5:37:dd:e6:b4:d1:48:07:59:
e8:a0:cf:4e:91:08:d2:cc:5b:7e:00:27:c9:f4:e6:
cc:2f:d6:86:2b:8c:af:de:3a:f5:c2:cd:74:85:58:
41:0c:d8:27:b1:a6:7d:47:87:7b:53:2b:f6:46:4c:
96:da:04:bb:4e:02:56:4d:07:85:b5:67:94:24:e2:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:B9:7A:8E:D8:D4:33:B9:71:28:DB:65:B3:8B:D6:5E:33:F5:A2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD0D82EFF7E11EDA08833864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.19.0/24
Signature Algorithm: sha256WithRSAEncryption
39:29:4e:8c:f3:01:f9:98:c2:d3:1a:c8:47:95:4b:d9:e9:b0:
3b:83:b5:f0:30:c2:74:88:b3:b1:c3:e7:ab:29:4c:73:44:30:
a1:06:5f:c8:ef:ad:25:a5:d7:18:d5:c8:76:08:3f:ca:df:7e:
39:ce:1a:2c:86:38:41:ef:ba:30:3a:a2:4c:09:8f:72:e6:f5:
72:e5:bc:5f:52:d4:4c:4b:cc:4c:8a:ae:e4:09:a9:52:8d:f9:
35:3e:9c:ad:2a:f8:3b:0a:23:ed:f9:4c:79:8e:6c:fa:24:4d:
c0:88:52:33:91:67:ec:70:42:42:55:0f:04:32:89:45:97:0b:
be:bb:9d:2e:94:4c:cf:1a:92:18:bb:17:99:64:b9:5d:b4:80:
a6:3f:f1:a3:4f:24:e4:9d:fb:7b:19:86:22:82:b1:7c:8a:d7:
71:81:87:e7:d3:75:a2:55:4e:fa:31:96:ce:db:c9:56:f5:39:
99:39:53:38:e2:c6:0d:62:a7:cc:4b:9d:ab:37:71:70:e2:96:
c2:82:3e:f8:09:16:3d:ff:e8:b2:d1:c5:5e:5a:54:f3:8b:2c:
26:68:66:f3:e3:07:67:5b:74:b7:46:85:5c:cc:69:dd:54:9b:
22:bf:7a:09:3b:a9:a7:11:54:fb:9d:e8:7b:52:ab:cf:15:10:
bc:10:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org