Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7F5B13428B6311EE883B142E4AD9E6FC.roa
File: 7F5B13428B6311EE883B142E4AD9E6FC.roa (raw, json)
Hash identifier: 7WPovTZAwTTS5+EBEw4I7fqu6wy8ntobcTDTqbvQZLU=
Subject key identifier: DF:3E:B9:34:30:6D:25:06:C2:9E:35:9B:69:3B:C8:13:31:33:CC:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 133E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7F5B13428B6311EE883B142E4AD9E6FC.roa
Signing time: Sat 25 Nov 2023 07:23:15 +0000
ROA not before: Sat 25 Nov 2023 07:23:12 +0000
ROA not after: Tue 25 Nov 2025 07:23:12 +0000
asID: 174
IP address blocks: 154.16.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 11:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4926 (0x133e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 07:23:12 2023 GMT
Not After : Nov 25 07:23:12 2025 GMT
Subject: CN=6561a0e3-4641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:3b:24:8e:8f:6d:58:f1:f6:95:ec:e5:d3:
28:6a:53:9a:19:28:b0:e3:1d:a3:c1:6b:7e:ac:f5:
00:d7:1a:fd:a2:00:71:c6:0c:81:be:90:f2:4d:b8:
a7:3b:0e:25:8d:2d:61:0c:0a:76:c0:45:78:4e:93:
f2:01:a3:aa:ac:d6:fc:cf:a8:09:8d:e4:c2:e7:b5:
c2:d2:39:98:76:b3:99:08:95:16:77:b5:5f:c4:a4:
5d:1b:eb:cf:8f:60:aa:0c:9f:61:92:3c:e5:07:c8:
46:c8:63:fd:44:48:9f:45:ac:e3:b2:65:46:1e:fc:
82:8e:5a:19:af:23:53:a8:d1:9f:e4:01:57:4f:d3:
73:3d:1e:39:12:b9:2d:5a:e7:c6:89:01:a1:82:65:
31:cc:66:37:75:10:72:2c:62:2a:bb:82:bd:a7:8d:
f7:2a:d8:9f:5d:b3:38:1f:f4:a2:b1:93:fa:a8:24:
45:4b:12:07:71:01:7a:58:52:b6:a1:8b:8b:e3:8e:
e7:29:2b:33:ae:87:e8:0f:c9:86:23:b8:c2:7a:23:
54:19:35:bc:0f:1e:89:ac:0e:13:7b:8e:f5:8a:a6:
80:54:ad:20:c8:c8:38:14:c1:2c:a0:ad:82:e4:da:
75:db:19:68:2e:a5:ab:b9:39:96:1f:2b:fa:4d:36:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:B9:34:30:6D:25:06:C2:9E:35:9B:69:3B:C8:13:31:33:CC:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7F5B13428B6311EE883B142E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d8:8f:48:a9:36:78:bb:a9:a5:bd:b1:67:61:d2:81:90:43:
55:91:9a:e1:d4:f6:19:a8:84:30:1a:82:39:f2:32:65:af:af:
3d:f2:07:2c:55:dc:2b:c4:f8:8b:51:69:9d:51:23:76:49:46:
ea:55:13:0c:ac:56:7e:b5:54:95:c2:de:55:9f:e2:6e:08:a9:
49:5c:ec:a0:61:7a:9d:ee:94:8c:40:05:57:e3:1a:4c:04:d4:
54:91:cd:57:2c:bb:c5:68:9f:1e:d9:58:9b:33:d8:97:30:d8:
61:b9:0b:ad:a0:1a:b4:65:3c:a3:43:60:37:94:e0:c3:5c:8d:
6a:31:95:fe:50:40:48:6d:0c:2f:35:10:a9:b2:52:3a:11:f6:
59:41:4a:a6:a6:ff:82:82:31:26:30:35:8d:fa:4c:a7:bc:9d:
55:6f:58:f1:c7:03:8a:17:a9:3a:04:86:f9:0a:73:30:fa:ae:
8a:85:38:59:ff:a5:3f:c2:3c:8d:0f:97:e9:b9:28:1f:b9:1e:
36:83:b3:71:02:91:4c:45:47:6b:35:15:31:91:ea:01:07:39:
0c:35:c1:b3:09:42:f1:07:41:c2:14:17:fa:38:c6:9c:9c:64:
b0:82:fd:e7:4d:d3:45:cc:b2:aa:2e:c5:97:f2:55:18:60:b2:
49:76:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:38 2024 by rpki-client on console-ams.rpki-client.org