Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F474CF88B8811EEB6D554214AD9E6FC.roa
File: 6F474CF88B8811EEB6D554214AD9E6FC.roa (raw, json)
Hash identifier: hO8r+hw5NLcfQPflw91glHRDTw5fDoCJxm2BJ9R3xOM=
Subject key identifier: 24:81:4C:A1:1A:D4:4A:09:87:32:9C:CC:B2:12:57:18:C0:09:D0:0B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1383
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F474CF88B8811EEB6D554214AD9E6FC.roa
Signing time: Sat 25 Nov 2023 11:47:39 +0000
ROA not before: Sat 25 Nov 2023 11:47:36 +0000
ROA not after: Tue 25 Nov 2025 11:47:36 +0000
asID: 212238
IP address blocks: 154.16.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4995 (0x1383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 11:47:36 2023 GMT
Not After : Nov 25 11:47:36 2025 GMT
Subject: CN=6561dedb-ffc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:74:d4:ff:1f:e4:71:ad:b6:14:d1:bc:ca:
e9:ad:4c:e5:06:68:84:01:4a:00:56:46:56:b8:e8:
55:06:86:bc:17:e8:ba:cf:63:a8:d4:bc:16:59:b2:
35:1b:7e:21:30:60:3a:36:eb:72:20:85:8a:5c:63:
6f:97:16:04:d5:ab:11:a6:51:07:c8:5d:57:24:6e:
70:04:c3:f2:ec:14:39:d4:cd:bf:24:bd:94:da:50:
5a:13:e4:d9:c4:5f:b5:32:e7:33:54:f6:c8:7a:78:
95:c9:95:62:43:94:5f:4f:a2:ed:3f:cf:e5:cf:33:
a5:d0:27:57:58:48:16:ea:2a:02:46:df:5a:24:fc:
f0:53:24:a7:c8:d3:33:23:7e:0a:8c:90:f1:c9:92:
b4:ca:73:9c:1b:40:39:b1:31:70:01:28:2a:a1:43:
36:2c:e1:e6:3b:09:09:38:21:19:cd:59:0b:70:68:
7f:d2:9b:e3:3f:fd:95:44:98:f7:4d:e1:c8:b3:ec:
a1:f9:37:e8:3a:9d:37:98:ba:c5:db:c7:ae:c7:12:
e6:8e:00:2f:de:6a:9e:41:7a:b4:4b:87:ad:ea:b5:
2e:18:e0:42:fa:35:2a:30:fe:c9:00:e4:07:c1:1d:
d8:24:eb:f4:cf:08:a4:d9:8f:18:02:97:82:20:cc:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:81:4C:A1:1A:D4:4A:09:87:32:9C:CC:B2:12:57:18:C0:09:D0:0B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F474CF88B8811EEB6D554214AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:22:80:a5:0a:4a:0c:16:8a:80:df:0a:e1:99:0c:d9:a7:ae:
e5:be:d3:41:95:c1:11:40:68:a3:cf:3f:12:dd:3c:e4:4f:77:
69:80:cb:b6:eb:79:6b:51:d2:ee:c7:28:09:6f:b3:07:cc:dc:
79:e1:75:dd:1e:6e:af:99:a8:08:be:99:ed:9a:cf:0a:40:d4:
e6:87:a7:50:25:4a:81:8b:75:8b:fd:ca:3e:72:20:d4:dc:9b:
7b:eb:47:97:91:5c:36:4d:a7:86:bc:d9:15:62:11:82:ff:11:
37:c8:0f:de:3e:ea:4d:1a:c8:68:29:38:69:b6:06:c2:ae:fa:
ef:82:43:3b:64:3d:4c:49:16:4d:e1:2a:36:b4:d5:08:18:a2:
22:cb:6b:a5:59:39:84:5a:70:ee:19:f7:36:51:7f:79:a0:be:
bb:56:ff:1a:8b:bb:ab:4c:c6:b5:0e:0f:63:7d:47:bb:f5:53:
b7:a2:0d:d2:58:fc:f3:b1:84:ec:3b:ed:45:e4:56:67:d5:71:
80:52:82:50:94:6e:6f:80:21:dc:ac:46:ee:5a:4b:fe:ef:01:
4f:f4:b1:82:de:d5:03:2b:92:0f:95:8c:0e:4b:ec:d4:94:38:
38:b1:0a:86:92:c8:bc:65:51:28:8c:4e:bf:87:25:4c:10:1f:
bb:d0:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org