Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D77689EB8FB11ED93F98180F1222468.roa
File: 8D77689EB8FB11ED93F98180F1222468.roa (raw, json)
Hash identifier: eq6hloycHnd4iLijX8eaRVqUfLQsN378PEvXOV2McgA=
Subject key identifier: 26:CB:F3:40:D0:0C:33:27:37:7E:10:4D:78:44:5D:D9:84:CF:C9:6D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CDD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D77689EB8FB11ED93F98180F1222468.roa
Signing time: Thu 02 Mar 2023 13:10:07 +0000
ROA not before: Thu 02 Mar 2023 13:10:03 +0000
ROA not after: Sat 01 Mar 2025 13:10:03 +0000
asID: 61317
IP address blocks: 154.127.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3293 (0xcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 13:10:03 2023 GMT
Not After : Mar 1 13:10:03 2025 GMT
Subject: CN=6400a02f-0c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:61:41:fd:48:2b:8d:44:06:ad:a8:05:5a:
8c:1f:78:ce:41:49:22:c5:79:90:ba:f8:bd:96:cd:
54:02:bb:bf:03:0a:16:da:3d:59:5e:fc:e8:b2:3a:
3b:d1:00:bd:6d:7a:11:53:e9:6a:75:e6:9d:2b:a2:
4b:2b:a9:8c:67:f8:92:8f:27:ad:ff:f8:61:b2:24:
0c:d5:e1:58:c3:99:38:7e:34:9f:a3:d8:18:1a:04:
04:20:97:5d:37:ea:15:d7:40:02:91:93:21:72:e8:
87:f1:3d:36:94:d8:0b:c3:56:82:31:73:22:92:4a:
8c:59:be:7c:9e:b4:f8:0a:25:b0:bd:55:fb:3d:02:
fc:2a:ff:cc:75:db:29:47:67:4c:e9:cb:f5:48:5f:
9d:7b:89:7d:56:33:4b:ae:b5:02:04:c0:99:a6:e7:
d9:58:b0:35:7b:9d:9f:64:41:3d:f2:09:0e:53:d8:
5a:2b:2e:b3:e9:81:51:88:d6:11:10:6f:26:ca:62:
c1:b0:20:b3:50:bf:7d:39:bc:3d:75:77:a8:48:0e:
0c:2a:62:15:33:60:26:72:17:c0:59:8d:c5:1f:6c:
f2:5b:dc:aa:6b:ef:e5:36:a5:55:30:f5:03:f5:e8:
8f:df:65:5a:02:a6:b9:b0:3e:3b:53:3f:7d:ed:de:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CB:F3:40:D0:0C:33:27:37:7E:10:4D:78:44:5D:D9:84:CF:C9:6D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D77689EB8FB11ED93F98180F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.59.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ec:a3:34:1e:e0:0a:f1:05:f3:e9:d3:04:8c:68:ef:bd:1c:
04:c4:89:63:66:17:bb:08:31:50:53:d1:bb:e7:ca:ae:ce:e9:
3e:e7:d5:fc:ad:29:32:6e:89:fb:d5:25:56:ab:f7:b8:e9:75:
4b:27:dd:7b:e9:2a:e5:4c:81:c2:b9:95:5d:76:88:31:69:14:
49:0f:88:ca:00:65:67:ba:95:79:69:ef:70:fb:98:bd:d7:43:
00:be:6c:ef:5a:b1:d1:b6:99:d8:8f:80:95:17:ce:f4:16:af:
ea:1e:2f:69:2e:c7:9d:80:eb:35:7b:47:d3:09:0b:47:f6:86:
c3:8f:77:7c:bc:ea:82:62:91:50:18:7b:bc:f6:cf:22:79:3d:
fc:4e:ea:f8:4d:59:33:cc:ce:05:b8:41:b4:16:4e:d6:e6:0f:
98:03:ba:5a:56:44:7b:b0:ac:1f:c4:b1:be:ec:7d:57:2b:73:
a6:c2:30:b3:b2:25:23:bc:1e:e8:fa:90:61:77:7c:65:e9:8c:
d8:23:9f:15:d0:6c:bc:2c:96:63:cf:06:a6:70:05:ed:19:32:
56:0c:97:12:5b:8c:92:4d:73:bd:54:ce:fc:66:95:3e:63:3d:
d6:eb:5d:e0:dc:ac:43:14:d4:bf:7b:dd:f5:e0:a7:5a:9c:35:
30:e0:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:50:30 2024 by rpki-client on console-ams.rpki-client.org