Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/905E927A0C1D11EDA4BDC6A7F1222468.roa
File: 905E927A0C1D11EDA4BDC6A7F1222468.roa (raw, json)
Hash identifier: eQdhOyv6cejJvtbpz9OsW3VlZlnPUd73x5oycp/p1T8=
Subject key identifier: FD:FF:15:89:96:86:30:0A:93:68:F7:05:C5:9B:3D:19:05:55:26:8D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0900
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/905E927A0C1D11EDA4BDC6A7F1222468.roa
Signing time: Mon 25 Jul 2022 13:27:43 +0000
ROA not before: Mon 25 Jul 2022 13:27:39 +0000
ROA not after: Thu 25 Jul 2024 13:27:39 +0000
asID: 212238
IP address blocks: 154.16.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 25 13:27:39 2022 GMT
Not After : Jul 25 13:27:39 2024 GMT
Subject: CN=62de9a4f-e5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:0c:fd:90:37:61:bd:7c:e1:3a:c8:a2:8a:
c3:12:e4:06:fa:2f:e9:56:95:e6:25:bf:7e:cf:c7:
9e:ff:2b:a2:8e:4e:7f:db:9f:90:59:bf:42:f9:77:
1c:ae:8a:53:e5:0a:64:6b:63:52:a2:f3:59:46:3c:
4c:2e:f2:88:17:4b:bb:f7:03:84:fb:1b:f8:7b:41:
5b:ba:8b:79:e2:87:f2:fb:c4:7f:e6:26:01:d4:c0:
bc:61:fe:ea:2d:36:b0:7d:7f:43:d6:cf:3f:90:0f:
8e:02:15:ab:46:79:e1:fe:a3:39:35:e9:bd:1a:19:
de:22:48:ef:32:4f:a2:5b:a3:72:a6:21:2e:e8:1f:
bf:49:d4:d7:23:74:f6:d6:fb:e9:a9:a3:71:2d:d9:
89:d3:32:03:c1:6d:ef:4e:c5:0f:a2:61:c2:68:29:
e5:13:18:b5:63:19:e2:16:29:a6:19:eb:b2:f6:e7:
62:b2:9b:c1:9f:31:bd:1f:ab:5c:33:74:3b:10:d1:
ef:e8:d6:e1:bf:a7:f1:50:30:0f:d6:e4:3e:49:20:
6a:40:cd:d8:30:c0:1e:bd:ef:4d:54:47:60:ef:f2:
a9:f6:c8:d6:fb:91:5c:37:ef:74:b1:87:d1:75:cb:
ca:99:b4:3e:23:08:d0:0f:82:77:eb:a0:cc:53:9f:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:15:89:96:86:30:0A:93:68:F7:05:C5:9B:3D:19:05:55:26:8D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/905E927A0C1D11EDA4BDC6A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.190.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5d:94:60:48:02:a8:57:20:c5:b8:7b:fa:25:99:1c:5a:a5:
63:65:2e:8c:a6:03:52:d1:85:05:92:85:d1:fa:03:a9:a9:b2:
49:c6:17:0b:db:7a:43:49:9d:cd:fc:52:35:29:cf:97:ae:fb:
bb:76:31:ba:a8:25:d3:c4:68:d4:51:0b:1d:bf:6a:78:4c:f5:
41:5c:35:2a:fa:e6:3b:7d:31:d3:47:37:77:40:14:9c:fb:23:
22:1e:3f:5d:36:d8:df:35:eb:9d:7c:cd:73:f7:19:44:0b:62:
78:62:73:cd:28:e0:08:8e:d2:34:88:43:65:7b:b0:3b:41:19:
36:b6:91:b5:14:ce:42:18:e3:7d:da:87:2f:e6:7b:67:dd:b0:
d0:0b:77:5f:39:42:fa:d5:9e:4b:80:fe:f2:1b:ef:42:7d:27:
c1:6d:10:5e:c4:1d:4c:f3:f2:f7:a0:f5:55:e6:c8:04:52:52:
d8:38:cb:8e:e2:9f:a5:72:b5:b1:9a:30:2f:31:7a:e4:77:8f:
ff:f6:fc:a5:9b:39:a7:0f:f8:95:19:76:02:c4:01:66:de:ab:
d1:d7:4d:03:2f:94:47:d4:2d:73:77:dd:2d:eb:6c:a0:09:e8:
a5:ab:58:61:8e:fd:92:8b:0c:f8:d4:9c:f2:af:3c:07:c4:74:
9c:1e:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:38:52 2024 by rpki-client on console-ams.rpki-client.org