Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8A8075B27FED11EF92B57344762E951A.roa
File: 8A8075B27FED11EF92B57344762E951A.roa (raw, json)
Hash identifier: eNj/soZscpuhM2GGBuy6CJUFsc3XqfuFjXKeR/iqwLY=
Subject key identifier: 09:BE:69:65:AB:F9:E9:46:46:7F:B3:81:DD:D2:2D:58:93:9C:26:90
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 183D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8A8075B27FED11EF92B57344762E951A.roa
Signing time: Tue 01 Oct 2024 12:06:08 +0000
ROA not before: Tue 01 Oct 2024 12:06:04 +0000
ROA not after: Thu 01 Oct 2026 12:06:04 +0000
asID: 397423
IP address blocks: 154.16.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6205 (0x183d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 1 12:06:04 2024 GMT
Not After : Oct 1 12:06:04 2026 GMT
Subject: CN=66fbe5b0-2fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:ad:72:00:ab:bd:85:3c:1e:d9:6d:31:7b:
e0:b4:2a:e2:41:0f:1c:3f:34:8e:f6:1a:b8:2b:87:
68:74:c5:5a:2e:48:4c:fa:7c:1b:39:1e:2b:cf:fe:
d9:80:e4:c3:22:39:9e:c1:00:93:e2:63:f3:28:6b:
fe:e7:0f:38:62:32:6d:6d:01:6b:f8:55:0e:4a:9f:
d0:fd:5d:4a:c8:cf:da:68:60:39:fc:da:c7:a8:48:
03:b9:04:a1:76:de:4c:78:da:c7:44:eb:23:cb:98:
b1:74:a9:26:f4:46:69:f0:c5:ef:db:30:e0:65:0b:
bb:22:0d:2b:9a:e7:77:8e:ea:a9:d4:b1:97:3f:f7:
32:0f:35:9a:e0:2d:d7:1f:a5:8c:cd:36:91:62:9d:
95:1a:e7:9f:72:a9:d9:95:a5:18:d8:ba:3f:df:12:
0f:a7:c8:7c:fe:63:74:b6:54:28:cd:e7:0a:c6:43:
1e:2f:a4:31:8b:98:40:7c:6f:b4:67:a7:7c:79:65:
a7:89:09:13:f6:ac:bd:6f:32:f3:0c:01:1c:84:0b:
81:21:7a:44:e1:14:74:e8:cc:7a:90:00:dd:6f:9e:
f4:fc:0b:e8:58:92:25:f6:90:86:73:5d:b2:87:ad:
a2:eb:6c:39:14:1a:c1:f2:aa:d4:a1:40:e4:f7:13:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BE:69:65:AB:F9:E9:46:46:7F:B3:81:DD:D2:2D:58:93:9C:26:90
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8A8075B27FED11EF92B57344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.151.0/24
Signature Algorithm: sha256WithRSAEncryption
44:67:6e:f3:58:a9:79:c2:e2:e4:77:51:a9:67:5e:1e:63:d2:
3d:c1:5f:b7:aa:40:cf:d6:b7:b8:5a:2c:23:67:91:66:52:89:
f1:fd:7a:21:11:ab:7e:e7:5f:1c:08:8d:66:22:8a:fe:41:cf:
19:7a:44:38:79:fc:fb:d6:3e:fb:2f:13:46:aa:45:b5:35:6d:
70:5b:f7:a6:cb:6b:e6:ce:43:16:48:84:d0:12:56:49:de:fd:
47:44:7e:33:90:b4:8c:06:62:dc:3d:38:46:57:8a:5a:62:fd:
cb:56:8d:e7:23:06:38:8a:f2:8a:88:b7:29:3b:8d:be:9c:c2:
cb:be:42:0d:40:0f:49:c6:5c:55:aa:95:d8:5a:bb:2f:a5:e5:
18:1c:f4:66:98:31:3a:82:9e:4c:f8:39:ac:82:d9:c3:50:1a:
95:c8:17:8c:67:66:23:b8:bb:7b:57:53:29:76:f9:29:37:e1:
f9:7b:bf:ad:d4:89:16:5b:59:74:48:cd:06:0f:56:50:fb:6c:
41:7c:9b:75:11:93:11:a8:7c:48:26:9f:d5:02:72:97:09:43:
f8:51:b5:2a:f0:f3:89:f4:06:f4:0a:70:df:1b:f9:c0:6c:40:
1b:a4:34:a0:82:46:74:3d:a0:ba:70:f8:06:62:96:45:01:5f:
9a:21:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org