Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/900DA882151411EE9C78C5634AD9E6FC.roa
File: 900DA882151411EE9C78C5634AD9E6FC.roa (raw, json)
Hash identifier: xplmyM/TYxwUELrrABnqjoP+Eyvt/wn/vGh6GGGdZDs=
Subject key identifier: 80:5B:30:00:E6:D2:D6:43:A6:AE:46:F4:A8:6A:34:B4:AA:FE:38:AD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1015
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/900DA882151411EE9C78C5634AD9E6FC.roa
Signing time: Tue 27 Jun 2023 18:00:56 +0000
ROA not before: Tue 27 Jun 2023 18:00:51 +0000
ROA not after: Fri 27 Jun 2025 18:00:51 +0000
asID: 11351
IP address blocks: 154.16.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4117 (0x1015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 27 18:00:51 2023 GMT
Not After : Jun 27 18:00:51 2025 GMT
Subject: CN=649b23d7-c68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:b5:47:6e:04:93:0b:4c:ba:b2:0a:8f:3c:
ef:99:5a:78:62:6f:67:86:1d:6c:57:bf:31:aa:f0:
d5:57:03:10:17:d6:47:89:30:09:d0:91:f9:58:26:
13:c8:7e:af:4c:b2:7a:f2:04:4b:e2:69:c5:8f:77:
aa:ca:99:6d:79:3b:ce:c2:2a:a4:ed:ca:8c:e0:82:
54:49:f3:fc:d6:f7:c2:cd:9e:b3:68:4a:52:90:09:
24:a7:81:65:50:de:0d:bd:69:f7:8a:7d:10:62:19:
2d:18:2b:ed:c2:ff:0c:88:65:b3:b4:65:0a:01:6a:
12:d1:74:18:7e:bb:c0:c7:da:fd:55:de:0b:99:e8:
54:81:98:e4:c4:35:aa:ff:b4:2f:20:e8:47:e7:e2:
f1:47:f7:22:3f:90:83:5b:59:da:26:79:6f:93:c6:
d7:a9:62:ec:77:44:9f:db:f3:b0:c3:24:70:84:71:
f7:3a:c7:c3:ac:dc:8a:33:45:6f:01:9f:73:7f:a0:
40:63:bf:af:94:bb:b9:69:69:17:5d:cf:b4:0b:68:
55:75:71:7c:c3:59:32:7f:8e:fc:80:e9:66:83:c3:
ee:7c:17:a5:68:22:ef:39:ea:46:d9:3b:32:08:43:
85:df:fb:80:49:89:3d:f0:14:6a:bd:dc:ee:73:e5:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:30:00:E6:D2:D6:43:A6:AE:46:F4:A8:6A:34:B4:AA:FE:38:AD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/900DA882151411EE9C78C5634AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.42.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ed:88:10:9e:8d:bc:a9:f2:48:14:29:fb:47:4a:76:71:ba:
92:83:bf:a5:65:9b:29:80:a4:25:f9:41:6e:c9:8b:16:e6:48:
d3:75:ef:3d:95:ad:1f:6f:7e:0f:55:41:0d:68:6f:63:2b:38:
0a:3f:de:d0:d4:14:db:e8:e4:7b:23:2d:7e:2f:d6:d5:70:6a:
39:ac:d2:b8:3d:8c:30:1c:d5:06:b9:c3:7f:a7:f7:da:51:37:
6f:b6:78:fe:63:c2:9c:ef:56:43:45:dc:11:99:29:4e:32:cb:
cd:9b:b8:9c:b3:82:72:1a:e0:d2:47:e4:58:eb:27:8e:6f:31:
a4:4e:55:6d:57:25:3c:d5:2d:82:39:34:b4:cd:df:eb:32:e2:
57:54:eb:0f:c9:50:73:de:e4:3b:9c:a5:fa:b7:54:3d:2c:b8:
50:e5:20:77:f8:f0:99:a4:c0:b3:45:2d:1b:42:da:b5:46:e1:
12:48:b0:2f:d1:0c:15:59:87:60:cc:20:16:55:8c:ce:a5:7c:
02:40:44:f7:45:49:92:97:a8:41:fc:0b:3e:04:2a:1c:52:af:
df:e6:a6:aa:67:46:ff:ad:2f:21:f7:30:d4:40:81:76:e8:2a:
54:f3:50:74:8c:bc:73:a7:05:91:08:2f:2f:94:fa:e9:ad:f0:
83:b6:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:23 2024 by rpki-client on console-fra.rpki-client.org