Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8A0D0440A1A011EFADA4B260762E951A.roa
File: 8A0D0440A1A011EFADA4B260762E951A.roa (raw, json)
Hash identifier: 7phWvxXWx1NkE51/PjdTkp9pLRKITwALj3MwVgsRaSM=
Subject key identifier: 7F:40:A4:46:3C:B3:79:5E:B9:36:FE:C0:A3:2F:F1:2C:01:1D:11:43
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18E1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8A0D0440A1A011EFADA4B260762E951A.roa
Signing time: Wed 13 Nov 2024 09:20:35 +0000
ROA not before: Wed 13 Nov 2024 09:20:27 +0000
ROA not after: Fri 13 Nov 2026 09:20:27 +0000
asID: 214654
IP address blocks: 154.127.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6369 (0x18e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 13 09:20:27 2024 GMT
Not After : Nov 13 09:20:27 2026 GMT
Subject: CN=67346f63-b70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:88:a8:2a:b1:38:b4:bc:33:9a:70:3f:00:88:
46:1b:ca:8d:c4:aa:4a:fe:04:91:bb:5f:b7:af:f7:
76:27:d9:fb:55:70:3a:85:79:1d:9a:68:4f:66:0b:
27:b5:07:d6:a4:db:3e:57:9c:6d:92:4e:d6:e9:00:
10:08:f0:45:fa:06:cd:c6:1e:49:f2:07:2e:25:40:
ee:fb:d6:a3:41:11:5a:ce:e5:29:3f:a9:8b:bb:d5:
2b:82:38:36:d1:12:47:80:82:cd:08:b8:63:5d:4d:
a4:ad:3b:f5:0a:82:35:48:8c:ee:57:aa:1f:8c:2a:
18:26:c0:45:12:05:8c:dc:67:78:3d:f6:e7:41:e8:
2f:da:28:c6:71:d2:83:82:e4:61:82:bc:d5:c5:06:
a8:4b:f7:d9:7d:85:25:9f:00:dd:7d:57:7d:a2:e3:
08:98:92:51:86:de:cf:0d:31:ee:6a:ed:5b:df:15:
fa:39:a6:de:b0:79:6c:ee:24:9c:57:04:d8:5a:cc:
8b:19:41:57:ef:5d:18:bb:f6:26:df:67:57:3c:0f:
4e:3d:bb:8a:21:93:45:29:2e:15:d2:f7:e6:e5:6c:
90:89:2d:86:70:9a:cd:9f:fd:46:cc:0c:ec:e1:28:
d4:b2:05:c7:73:56:ef:e3:e1:52:ef:5a:44:78:25:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:40:A4:46:3C:B3:79:5E:B9:36:FE:C0:A3:2F:F1:2C:01:1D:11:43
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8A0D0440A1A011EFADA4B260762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.59.0/24
Signature Algorithm: sha256WithRSAEncryption
96:be:7f:8a:16:38:d0:30:31:42:59:e8:c6:aa:dc:51:8f:42:
10:b4:8c:bb:f7:2b:2d:a9:4b:41:0e:34:0e:17:84:8d:72:26:
7e:9e:e9:ab:f8:0a:ac:94:60:82:dd:65:0d:0f:3f:73:d4:cf:
b0:9a:c8:0d:0d:0c:4f:91:57:91:d4:4f:3f:9e:2f:42:4a:94:
cd:fb:67:39:89:2f:43:3c:64:0c:c1:37:2e:d5:64:1f:79:90:
29:4a:4d:69:d3:70:a3:1b:b7:1d:7d:34:95:69:c2:6b:1b:f7:
43:ea:27:a5:72:fb:32:08:4f:30:c2:ff:81:bc:4c:94:7d:21:
c2:b2:fe:4e:c1:2f:b9:3f:88:cb:a9:5e:8b:6a:83:95:a1:a8:
d0:0c:18:eb:c1:90:eb:c4:7d:29:1d:6f:91:5c:7b:d7:6b:67:
5a:a2:51:d9:a0:33:eb:3b:d5:80:83:1e:76:0e:8d:8c:11:c4:
b3:4a:76:58:fd:fc:6f:7c:8b:76:be:b8:f2:d7:3e:05:2e:2f:
b1:f0:90:64:ef:e2:26:f4:f0:ec:00:c6:5c:40:a8:0b:8b:9f:
af:e2:c5:c9:07:a9:ec:4a:12:74:30:f6:09:dc:9f:2e:e5:7b:
61:33:e3:5a:4d:c2:4a:25:90:9c:12:16:87:f6:c7:44:10:7b:
fc:ee:95:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org