Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7DBD6908ACFB11EF95569E50762E951A.roa
File: 7DBD6908ACFB11EF95569E50762E951A.roa (raw, json)
Hash identifier: YX1pW3ZfhbfWmvZO8/KxEey6vqaDFNvnajMhXgVBUkk=
Subject key identifier: FC:99:80:57:0C:03:3E:DF:B3:6A:1C:FF:95:C9:61:18:DB:CD:1E:23
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1913
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7DBD6908ACFB11EF95569E50762E951A.roa
Signing time: Wed 27 Nov 2024 20:09:22 +0000
ROA not before: Wed 27 Nov 2024 20:09:18 +0000
ROA not after: Fri 27 Nov 2026 20:09:18 +0000
asID: 834
IP address blocks: 154.16.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6419 (0x1913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Nov 27 20:09:18 2024 GMT
Not After : Nov 27 20:09:18 2026 GMT
Subject: CN=67477c72-4f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:6a:05:01:6e:91:98:1d:d5:89:bb:f9:f4:
10:e3:41:12:f5:44:b4:24:bf:92:dc:83:b4:9f:5a:
26:58:11:c8:97:37:ca:ce:d9:6e:7d:6f:6a:24:96:
2c:2c:8a:99:54:ac:c9:fa:64:68:eb:f3:57:f5:61:
92:9a:33:67:ee:76:b4:ab:70:27:61:4b:d0:2b:4a:
52:4b:52:7c:3f:7f:de:a3:78:e4:4c:c4:51:7b:68:
17:dc:e5:37:2f:04:75:f9:1e:88:fb:aa:ca:3e:4b:
fa:05:00:df:92:78:f9:80:51:9f:ea:d6:f8:24:26:
a5:b5:90:e1:2e:71:61:fb:b0:1e:f8:ac:a1:e8:57:
41:e1:8f:26:5f:df:76:e3:bc:b6:47:5f:c1:c9:68:
fa:46:93:7a:2c:26:bb:4c:63:3b:ba:64:6a:b2:a7:
85:e0:11:5c:44:c2:96:98:53:07:72:63:59:b8:d7:
f5:b5:dc:18:c8:24:6b:76:a2:6d:64:bc:bd:b6:95:
45:37:4f:4b:f0:e6:4c:cb:55:69:e2:04:5a:c9:7a:
c0:58:66:11:67:14:e3:2d:b1:4f:2f:78:63:78:c7:
0e:40:44:71:bd:7a:d7:64:7f:0f:81:c3:67:00:69:
d1:d9:36:5a:2c:b6:45:c0:0b:9b:ad:5f:ff:f9:7d:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:80:57:0C:03:3E:DF:B3:6A:1C:FF:95:C9:61:18:DB:CD:1E:23
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7DBD6908ACFB11EF95569E50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:17:6c:5b:fd:9a:bb:00:ae:a6:c3:aa:86:49:bb:a5:d5:01:
c8:d0:f4:d8:0c:c8:6b:06:47:a3:c4:a7:ed:ba:bb:72:ca:57:
6d:17:78:36:44:e6:f6:cf:2d:7f:6b:32:e8:52:7f:f1:90:55:
72:fa:33:11:2d:e5:63:bb:0e:e2:05:55:6e:c7:06:0c:cb:7b:
9c:8c:c8:7c:36:3d:ee:f3:82:8c:c2:65:06:f3:03:a2:e0:b4:
6a:e3:e1:c3:9f:01:9a:5a:90:fb:3e:09:80:bb:b3:68:d4:e8:
0f:ba:05:9b:d6:dc:13:45:c3:97:45:7d:64:b7:a6:9c:d5:44:
7e:7a:ac:87:c6:09:c0:7d:a0:8e:60:35:82:73:0a:13:ac:5d:
44:b4:64:ba:e4:c6:bb:35:e1:f1:4e:d1:22:c9:06:d6:83:91:
dc:f3:fc:a1:25:88:e0:f3:d7:16:b0:4c:c9:fa:11:11:b2:21:
98:9c:74:28:8a:fe:ec:4a:42:ac:5f:2d:21:72:3d:c6:d0:dc:
75:63:65:b3:c0:a4:f0:a3:42:ea:45:36:4f:bb:c2:3c:6b:04:
4e:2d:37:a6:b1:ef:37:bf:f9:d5:77:0a:f0:20:90:4d:81:1f:
77:b9:0b:37:02:d7:73:6a:17:b1:14:30:fe:3e:93:ca:23:23:
2c:e1:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:44:27 2025 by rpki-client