Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/843F47BE169311EFB8AF6C5E017001B1.roa
File: 843F47BE169311EFB8AF6C5E017001B1.roa (raw, json)
Hash identifier: RMAMXS6s98iBDrOCqnhaGh6HRwTIky23K5k/Cz+U+fE=
Subject key identifier: 89:08:20:C6:53:BC:BA:68:A8:F6:82:A3:52:96:53:60:21:D7:EB:80
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 166F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/843F47BE169311EFB8AF6C5E017001B1.roa
Signing time: Mon 20 May 2024 10:27:11 +0000
ROA not before: Mon 20 May 2024 10:27:06 +0000
ROA not after: Wed 20 May 2026 10:27:06 +0000
asID: 8220
IP address blocks: 154.16.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5743 (0x166f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 20 10:27:06 2024 GMT
Not After : May 20 10:27:06 2026 GMT
Subject: CN=664b257f-7710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:be:c3:c4:da:47:14:23:04:0f:b3:2a:7f:
d2:12:df:6c:9c:8e:15:72:6f:52:a1:b7:d4:96:41:
84:c6:89:bb:a0:65:32:44:3d:a8:74:03:66:fc:85:
a9:04:f8:8b:fd:9a:11:af:91:04:3d:0a:bb:e7:5f:
8b:8f:a9:ff:63:1c:34:43:e5:20:98:a8:99:b1:4c:
07:70:4f:ec:bf:a6:bf:be:a3:e6:61:34:da:a2:34:
f9:7c:e9:4d:ef:7d:fe:ef:86:59:d6:37:e5:5b:f4:
b2:39:74:60:b5:e9:25:a3:1e:e3:54:5f:e5:77:47:
37:b4:4b:60:bf:52:0e:dc:15:5f:54:75:b1:55:6f:
ee:de:ad:a5:ab:79:ab:7a:8e:15:d1:7d:9b:d7:8d:
41:f6:b3:d0:c1:2b:9d:f8:0b:b8:6b:80:77:7b:e3:
62:9b:6c:28:02:65:5f:67:b7:15:9a:92:a4:5e:71:
e4:2f:dc:c8:cf:e3:4e:b3:cd:3c:d2:9a:ca:5c:1e:
c2:fa:fa:98:b1:5b:ae:0f:07:50:9e:66:42:66:28:
1b:a4:ed:f1:8a:bf:ab:3d:0b:01:31:eb:23:03:2b:
b6:fb:8d:4e:6e:eb:76:37:f6:32:a3:c0:aa:b9:67:
a0:58:d5:bb:30:7d:2b:6b:8f:07:bb:f2:c2:80:f6:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:20:C6:53:BC:BA:68:A8:F6:82:A3:52:96:53:60:21:D7:EB:80
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/843F47BE169311EFB8AF6C5E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:03:b1:4d:29:ba:ae:55:a5:37:9c:f4:c5:e5:1c:fd:ff:3b:
8a:ef:50:47:d3:40:1d:d1:6a:c8:f0:38:a5:93:ce:54:2f:85:
49:82:48:70:63:5b:d4:b2:93:ac:7b:03:77:59:59:42:13:d0:
f9:a7:fe:d8:fd:02:14:7c:ea:88:be:35:57:00:f4:b0:c1:c6:
a3:6a:7d:97:58:9a:72:ff:85:b8:83:1b:04:97:86:80:9f:0e:
cb:48:e6:30:bf:1f:35:d3:09:ef:18:ed:93:8a:7c:07:e7:b6:
10:d7:24:8e:ad:5f:88:f5:e2:1b:0e:ea:16:37:27:11:fd:77:
fb:35:f1:90:4c:aa:ce:52:43:fb:18:99:28:33:bf:04:e0:c8:
19:3f:f2:6e:93:fd:a3:ac:b2:57:9c:46:ef:0d:33:84:34:93:
20:11:47:75:1f:f3:48:8b:df:92:30:47:44:17:d7:90:dc:6d:
18:09:2a:b8:57:b0:ed:59:a7:3c:99:7e:b8:a9:ea:00:c6:a0:
01:6c:86:99:61:c1:18:5d:e8:ad:06:68:4e:a6:24:9f:98:44:
1e:68:e8:91:b5:18:ec:48:2a:18:7d:61:ba:8c:a5:43:14:28:
24:0c:b8:19:db:9f:09:be:39:66:7e:52:ea:24:5c:81:d7:c0:
6f:d5:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:40:45 2024 by rpki-client on console-ams.rpki-client.org