Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82D066329DDF11EF8A8D2796762E951A.roa
File: 82D066329DDF11EF8A8D2796762E951A.roa (raw, json)
Hash identifier: 5xc7MrOJa+72v+24zjGzbethei8voTbj63PUD0vtFag=
Subject key identifier: 72:31:21:1F:40:38:D9:09:23:21:FC:D7:B6:2D:CF:1F:69:BA:6E:C2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18D3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82D066329DDF11EF8A8D2796762E951A.roa
Signing time: Fri 08 Nov 2024 14:41:17 +0000
ROA not before: Fri 08 Nov 2024 14:41:13 +0000
ROA not after: Sat 07 Nov 2026 14:41:13 +0000
asID: 212238
IP address blocks: 154.16.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6355 (0x18d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 8 14:41:13 2024 GMT
Not After : Nov 7 14:41:13 2026 GMT
Subject: CN=672e230d-aa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:80:ee:9f:ce:21:2b:f7:d5:23:16:2a:55:
ee:a5:1f:df:ee:63:7e:d1:82:e9:6a:b1:7d:d6:e4:
25:87:8f:39:64:fd:ca:4c:b7:8a:21:b7:83:a3:97:
55:ea:62:49:90:f9:0e:81:17:82:cb:97:c2:f4:3e:
ab:48:48:37:2f:27:65:cd:d2:25:f8:16:3c:76:fe:
25:14:44:a6:24:2c:aa:15:1c:da:97:c2:11:c8:a1:
1b:3e:9a:c0:d3:b2:fa:32:09:83:c6:ac:65:eb:a5:
12:3d:20:46:fa:d5:04:15:88:44:f2:c7:18:29:8e:
ed:8c:c1:25:95:9b:31:07:d3:68:ad:00:ce:e9:c1:
5c:0c:29:71:f5:43:50:9b:0d:c6:18:87:dc:89:70:
b3:bb:9b:e1:68:1e:3a:7a:0f:78:8c:bc:51:ba:c1:
d7:c6:1e:d3:1b:40:1a:5c:ac:b7:79:b9:d1:94:3d:
d7:e7:24:74:5b:fe:bf:a1:2b:6e:e9:67:87:77:ee:
b9:2e:b6:a8:3e:71:c9:c6:88:cd:97:13:07:2d:fc:
61:bb:95:18:b3:ff:44:46:a3:58:7e:a7:4e:93:b8:
69:37:7a:51:5a:a9:8d:b2:ad:86:45:ee:4c:4b:28:
b0:8d:32:7d:2f:41:a5:d3:99:d2:bf:0f:76:9c:74:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:31:21:1F:40:38:D9:09:23:21:FC:D7:B6:2D:CF:1F:69:BA:6E:C2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82D066329DDF11EF8A8D2796762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:72:60:7a:18:6d:13:ef:c0:40:80:65:88:6a:72:a1:e8:f4:
96:75:c9:b8:6f:63:88:d6:21:a0:99:8d:b7:40:ff:5e:03:ec:
68:f4:41:b6:b4:1c:73:b4:a1:69:5f:84:f0:f5:0c:f3:fa:5d:
79:07:a4:65:3a:09:13:b2:3a:88:09:d7:33:3f:96:3d:2b:a5:
77:51:13:bf:68:42:d2:70:45:df:ce:3c:ce:36:f2:b8:cf:c7:
a3:80:36:64:be:bd:87:59:38:94:e9:04:25:f0:8e:9d:72:44:
2d:2d:7d:3b:b8:3a:aa:50:59:13:63:c8:17:34:db:77:f8:3f:
2e:a0:7a:27:5f:b9:e6:16:fb:7e:61:d0:39:4e:d2:da:fc:f2:
4f:8d:c3:4f:09:21:52:28:80:48:02:c9:ba:1d:73:e7:87:2e:
72:e7:32:0e:54:84:9c:0b:eb:91:82:ce:ce:b6:bc:46:b2:39:
42:4c:20:cd:2d:7b:16:18:19:c7:50:55:da:f1:23:46:01:b9:
0b:68:03:7c:97:d6:68:d9:ea:a1:6e:62:8d:01:37:63:c3:d8:
28:f0:dd:11:ec:06:b9:2f:6c:02:6c:6e:fb:dc:53:be:15:b9:
91:da:2f:2b:5d:79:56:bf:88:85:f4:13:8e:75:9b:cb:65:60:
ce:16:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org