Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C519BBC272711EF9860D9067DDC24C2.roa
File: 6C519BBC272711EF9860D9067DDC24C2.roa (raw, json)
Hash identifier: xiqsDOwhlsaUDuUoj6s0SbFO/vMDWyH3PodXRFI5XPo=
Subject key identifier: C7:98:24:8C:67:4B:7B:FA:39:87:AF:5B:4B:6A:9E:C9:E8:13:25:A5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 16D1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C519BBC272711EF9860D9067DDC24C2.roa
Signing time: Mon 10 Jun 2024 12:46:15 +0000
ROA not before: Mon 10 Jun 2024 12:46:11 +0000
ROA not after: Wed 10 Jun 2026 12:46:11 +0000
asID: 9009
IP address blocks: 154.127.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5841 (0x16d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 12:46:11 2024 GMT
Not After : Jun 10 12:46:11 2026 GMT
Subject: CN=6666f597-ee45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:8d:47:4a:36:7a:e3:be:ec:47:36:76:d3:
f6:26:b1:40:db:b8:39:2b:85:43:1a:7c:66:d5:10:
74:6f:1b:51:df:62:40:c7:53:93:96:a5:ac:e6:72:
0d:c7:60:de:ff:11:3f:ad:74:47:ea:4e:00:8c:1c:
a4:c7:2f:67:54:7d:04:af:75:aa:12:b3:1b:8c:21:
9e:fa:cf:5b:00:c8:28:eb:d2:9e:59:b6:ca:7b:e2:
7e:56:5b:c1:da:41:39:c4:7b:17:5b:c4:1d:76:01:
c8:1b:96:8e:35:9b:77:04:5e:15:76:96:a6:dd:f6:
51:57:5c:4b:b9:45:4d:39:10:f3:ca:59:31:17:58:
01:be:d8:22:0b:9c:f4:5f:f9:7d:15:ae:43:e1:0c:
fc:9b:23:88:a5:23:03:23:a4:ed:7f:c1:92:cf:8e:
84:d2:a8:04:12:52:78:3b:71:c1:dd:d2:5f:0a:3b:
46:05:34:04:49:d1:23:5b:90:fc:2f:99:33:ed:d3:
d0:81:f0:66:ad:17:09:db:a1:ae:13:37:d0:99:43:
30:76:53:c8:8a:85:70:57:42:a9:71:40:80:ab:0f:
a4:2f:82:28:e8:62:47:b0:02:36:ab:60:3c:9a:51:
59:7e:25:d3:68:a5:63:d9:0b:1a:44:d5:5c:b8:72:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:24:8C:67:4B:7B:FA:39:87:AF:5B:4B:6A:9E:C9:E8:13:25:A5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C519BBC272711EF9860D9067DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.49.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9d:37:cd:09:d3:ba:d4:54:a5:68:f1:82:a6:d1:8a:10:c8:
7d:5f:b6:98:ce:d0:18:e2:fb:30:6a:bc:c2:58:16:38:b6:59:
ca:36:1a:bc:36:5d:66:2b:a1:68:ec:9f:1c:7c:65:61:ee:fa:
4e:2c:bc:92:3e:6b:6f:5b:11:1a:04:81:cb:50:c0:86:b3:72:
99:47:b8:66:54:fc:72:36:90:6b:15:b0:38:4f:d3:3a:17:87:
d4:dc:dc:bf:83:cc:db:3b:b2:44:c0:a7:c4:94:e4:f9:08:6e:
6e:7c:e8:cc:77:4b:a0:bd:48:a7:cd:8d:de:c1:a3:b9:83:38:
2e:a1:39:6d:0d:09:93:b3:5d:0b:7e:7e:b3:ef:d3:86:d8:34:
b7:4c:4f:db:e4:2d:82:02:45:16:d5:b6:db:9a:7a:d7:94:05:
8e:84:bf:16:47:42:20:70:37:1d:1f:12:d4:24:64:19:65:20:
67:78:50:cd:ea:73:24:d0:06:ae:7a:6d:3c:2d:f0:70:6e:b3:
a0:92:86:e1:ce:aa:17:0a:50:d8:53:9e:d0:ef:b8:ff:67:8f:
14:22:6b:31:8c:35:9a:7d:85:a4:87:19:a9:46:16:e5:02:96:
a1:9a:d7:4f:6e:b1:96:ab:7b:68:f4:ef:a9:21:c3:63:e4:b9:
28:14:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:55 2024 by rpki-client on console-fra.rpki-client.org