Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/736B5D4CB2D311EF93AB11B6762E951A.roa
File: 736B5D4CB2D311EF93AB11B6762E951A.roa (raw, json)
Hash identifier: JvpiHDawHeMDR9G1C6YGYkPhNij02cA5I9ZH5FiqPrs=
Subject key identifier: 91:D5:16:5D:95:51:4B:36:0F:FA:59:E7:07:6B:F4:6C:7C:F0:06:7D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1931
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/736B5D4CB2D311EF93AB11B6762E951A.roa
Signing time: Thu 05 Dec 2024 06:37:52 +0000
ROA not before: Thu 05 Dec 2024 06:37:48 +0000
ROA not after: Sat 05 Dec 2026 06:37:48 +0000
asID: 135391
IP address blocks: 154.16.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6449 (0x1931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Dec 5 06:37:48 2024 GMT
Not After : Dec 5 06:37:48 2026 GMT
Subject: CN=67514a3f-4c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:d8:82:0f:97:ec:70:80:96:a8:70:79:a1:
30:d0:42:19:bf:21:3a:c8:1d:f7:f3:26:7a:fe:85:
35:2d:5d:1d:7d:b6:ac:4f:55:d5:ad:86:5f:6e:26:
a8:b0:4d:41:71:f8:0c:4b:23:37:c0:2a:8c:3f:07:
30:a5:f5:c2:59:bd:bd:40:33:39:86:7f:99:ef:d0:
6f:7f:14:25:0b:1f:85:60:22:7f:21:59:f1:db:af:
c0:59:b7:fc:47:8f:e8:5f:d1:e3:92:93:90:72:2b:
21:6e:f4:82:d0:b8:67:ba:58:d9:0d:a4:e4:1c:b8:
12:af:6f:1a:63:29:1c:00:a4:cf:ea:4e:1c:dc:dd:
11:cd:9a:a8:c2:e3:67:be:0c:43:95:7b:e2:6a:26:
85:7d:db:5d:0b:f6:62:e4:19:25:7f:70:ed:d4:18:
1a:90:0f:2b:67:45:c8:7f:39:73:96:19:73:f5:6d:
1a:d1:63:0e:85:43:ca:ab:9b:06:e4:06:31:be:22:
fa:27:f9:32:8a:c6:7b:eb:3d:4b:d3:3b:08:3a:e6:
a0:56:7a:54:a2:61:76:00:29:b1:67:2d:e5:84:88:
ce:94:79:1c:6c:69:a8:20:cc:8a:f6:5a:31:2a:18:
23:c3:d0:93:42:46:36:71:6d:73:72:6a:4b:7c:58:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:16:5D:95:51:4B:36:0F:FA:59:E7:07:6B:F4:6C:7C:F0:06:7D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/736B5D4CB2D311EF93AB11B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.0.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fe:37:07:58:1e:95:c0:33:a0:47:17:7b:d3:21:21:27:46:
97:b6:6f:be:a1:7c:a3:a6:4a:6a:aa:e5:af:34:ea:9c:5e:9f:
7d:db:a5:69:a1:16:62:01:5c:16:e5:ab:47:ed:de:4c:64:69:
9a:bf:35:78:b9:1c:66:8b:b0:8f:b3:83:a5:bf:fa:02:79:f3:
ea:7c:c7:42:85:00:a4:1a:eb:42:9d:d7:54:ca:77:87:68:9a:
57:0c:22:cf:66:ae:67:58:94:68:98:af:70:3e:35:52:24:4c:
b9:30:28:89:5a:02:b6:4b:7f:8a:7e:07:eb:bf:9c:d3:c4:78:
af:33:9e:3d:d4:cf:d5:c6:eb:d0:49:41:c8:5f:3f:e5:57:79:
82:0b:c4:a9:45:66:5c:7f:50:ef:a3:4b:c4:c9:ae:80:28:41:
a1:27:01:74:bd:94:c1:17:78:99:0f:de:fe:14:ab:3b:90:f1:
6b:54:99:db:e6:4d:25:2b:e9:66:07:dd:4f:56:7e:a0:97:c0:
5f:6d:90:d8:3b:79:cb:b6:a8:8b:2b:45:34:57:de:9c:63:04:
29:a2:6d:33:94:3a:1f:7a:53:de:5d:4b:8c:5c:3a:eb:13:18:
53:51:40:1d:ff:7a:6f:46:5f:8f:b4:0e:b6:ed:33:2b:38:4e:
8d:8d:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:49:14 2025 by rpki-client