Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6FBBDFCAD54B11EE8CE4AD91775412E6.roa
File: 6FBBDFCAD54B11EE8CE4AD91775412E6.roa (raw, json)
Hash identifier: I7CAR3mf0elR/eygr7mStCrwx+TGlLFNBYwwyKKfab0=
Subject key identifier: DA:0D:22:09:98:E2:FD:ED:28:13:A0:C9:47:98:DC:2C:13:09:FA:7D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1500
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6FBBDFCAD54B11EE8CE4AD91775412E6.roa
Signing time: Tue 27 Feb 2024 08:37:27 +0000
ROA not before: Tue 27 Feb 2024 08:37:24 +0000
ROA not after: Fri 27 Feb 2026 08:37:24 +0000
asID: 201341
IP address blocks: 154.16.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5376 (0x1500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 08:37:24 2024 GMT
Not After : Feb 27 08:37:24 2026 GMT
Subject: CN=65dd9f47-8c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:a9:ea:13:c3:c3:db:82:ea:25:26:8d:22:
68:f2:86:a0:60:0f:c0:f6:f7:e9:80:18:67:c2:c0:
54:cb:90:63:d7:20:91:d8:6b:5c:d5:af:f5:f4:b3:
b8:45:91:d6:84:3f:73:6d:9f:8a:60:c2:a9:67:0e:
bd:45:e6:c4:95:ef:e7:d9:3b:9b:27:7e:ac:e5:2f:
f7:7a:fe:11:9f:f6:e2:c4:6f:a7:2e:60:b1:31:15:
85:a7:b0:9f:a3:58:0a:9a:4c:56:bb:cb:79:e3:00:
89:00:23:fa:53:82:d2:14:89:9b:6e:7e:f2:e3:f3:
98:80:4e:4e:80:64:b6:61:6c:aa:c7:4a:ee:a5:4a:
a2:63:77:08:a0:c9:fb:c9:3f:39:37:c5:75:aa:1d:
7f:b9:72:68:e1:95:87:ec:4c:0d:a5:95:92:df:74:
cb:90:d1:fc:25:23:fc:c1:08:c3:96:af:55:69:28:
e5:4b:c2:93:1a:83:f0:ba:6c:a5:43:19:9e:7f:fd:
77:c4:1f:86:c8:0f:ef:a7:8f:23:e5:43:f5:ef:6c:
4e:b3:57:ba:77:06:86:68:ef:3e:03:23:2a:6f:ca:
ff:4f:07:6b:dd:ef:a2:6a:5c:56:9c:f7:2a:77:13:
fe:88:fa:88:a7:4e:c3:0c:fe:1f:78:f7:91:e6:1f:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0D:22:09:98:E2:FD:ED:28:13:A0:C9:47:98:DC:2C:13:09:FA:7D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6FBBDFCAD54B11EE8CE4AD91775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.101.0/24
Signature Algorithm: sha256WithRSAEncryption
60:28:fc:d7:36:04:dd:93:e7:67:ff:b7:d8:50:6e:38:56:14:
d2:45:1a:5c:3e:3c:cf:23:30:e5:40:e1:a8:e1:38:15:79:07:
4d:57:bf:38:40:85:2b:8f:a7:57:06:cb:10:09:e3:44:e6:89:
80:fc:d4:57:6f:65:24:ac:e9:20:7c:f7:71:56:13:f6:c8:70:
d4:36:94:63:b1:7a:46:bc:28:cf:ae:b7:d3:d2:5f:75:23:30:
2c:5a:50:07:8a:53:81:d1:c9:74:51:38:cc:c5:5d:0e:82:f0:
2d:6c:46:26:f0:1c:11:69:65:dc:82:35:08:7a:9e:e6:63:62:
c7:3c:fb:c4:2b:21:de:a1:12:05:b0:61:8c:57:73:4c:e9:09:
5d:18:89:65:4c:d8:19:c5:43:97:7d:5b:bd:99:b6:1c:8f:9c:
77:74:b1:65:b9:49:c1:23:30:35:20:88:78:ef:7b:d8:15:5e:
84:d6:02:90:cd:1e:b6:c5:7f:48:b6:8d:9d:2c:ea:c8:48:ca:
0a:64:13:ba:2e:94:65:eb:42:2c:0e:e7:35:6a:7d:22:de:19:
87:60:a0:3a:f0:0a:3c:7e:2a:35:b3:03:81:70:8a:2c:4a:fd:
c6:9b:0e:5c:5c:e5:bc:d9:ab:be:c7:45:dd:fb:0b:e6:74:46:
d8:98:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:12 2024 by rpki-client on console-ams.rpki-client.org