Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/93C48680759411EF91543AAA762E951A.roa
File: 93C48680759411EF91543AAA762E951A.roa (raw, json)
Hash identifier: M0mi5YmfHyyxZpz0hXVAgofIJeJnH9dcqehi3LIPYCk=
Subject key identifier: 84:07:F9:BF:5C:AE:CE:D1:4A:16:92:0F:D5:DD:02:0A:19:11:18:90
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1813
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/93C48680759411EF91543AAA762E951A.roa
Signing time: Wed 18 Sep 2024 08:04:07 +0000
ROA not before: Wed 18 Sep 2024 08:04:03 +0000
ROA not after: Fri 18 Sep 2026 08:04:03 +0000
asID: 212238
IP address blocks: 154.16.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6163 (0x1813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 18 08:04:03 2024 GMT
Not After : Sep 18 08:04:03 2026 GMT
Subject: CN=66ea8977-8d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:33:7e:eb:a8:99:88:80:20:fb:24:b3:49:
37:e2:fd:09:dd:2e:5f:76:99:c4:e6:61:69:77:9a:
65:d8:5c:f8:f3:0d:46:91:3b:61:1a:bb:a2:8c:cb:
fb:79:11:6f:03:c3:6f:e1:1b:f9:ab:17:96:50:f1:
dd:64:70:5c:2c:3a:c0:eb:2c:da:5f:b1:0e:fb:22:
b3:17:23:c0:4b:6b:7b:de:34:13:f6:fc:2a:a5:8b:
4b:b4:fe:5d:1e:f0:a1:bc:3d:67:cc:64:31:ee:cd:
55:4f:e9:d0:93:ab:28:2c:13:fe:c1:98:d5:05:cd:
cd:be:86:ce:ec:e1:d8:64:5b:7a:36:d0:66:00:b9:
64:c6:54:9a:ac:b0:59:5f:5f:60:88:1c:cf:b9:aa:
90:7c:ee:25:3e:ca:5d:61:41:de:77:53:03:c0:3c:
04:21:00:67:17:af:ae:83:8d:9c:dd:92:f4:a1:a0:
b2:16:ee:49:2a:d5:b4:5b:68:cb:23:f3:55:d8:b5:
ad:56:ab:58:90:62:39:c5:fd:6d:14:7e:f1:d1:8a:
9f:bb:a1:cd:35:cd:cf:da:d9:37:b2:09:c7:db:f9:
13:2c:f6:05:dd:9b:b9:31:35:c1:1d:c4:91:bd:6a:
58:0c:6b:78:87:42:0e:d2:a6:cd:58:fa:49:70:82:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:F9:BF:5C:AE:CE:D1:4A:16:92:0F:D5:DD:02:0A:19:11:18:90
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/93C48680759411EF91543AAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:66:b7:bf:dd:07:6a:c7:c8:fb:3e:4b:7b:11:6a:ff:d8:c1:
06:19:3c:fc:65:59:25:5e:d1:8b:ff:41:e4:9b:d1:06:a6:82:
4a:f7:63:1a:6e:6a:4e:76:68:ae:55:0f:7c:0f:f6:56:93:3e:
a5:3e:fb:45:c1:96:f4:b4:d5:7a:21:60:dc:f1:5a:a7:62:a7:
d4:ef:c3:80:ff:66:4a:86:95:f3:ed:5a:8c:7c:42:48:db:f4:
3a:8a:53:0d:73:ca:44:59:ca:62:f9:ae:b8:ee:01:f8:58:0f:
4a:d4:8b:31:b4:94:d3:e0:07:b0:ce:1d:02:69:ae:c3:10:5a:
f9:77:1a:65:12:16:a1:93:b8:78:2f:40:18:6b:3f:d6:d1:a5:
31:ea:f4:14:6e:a9:80:38:31:ca:91:ac:ca:8e:16:2e:1d:ab:
1c:19:d6:27:41:d2:da:51:ed:9c:07:9a:3c:00:b0:06:a1:f1:
67:ce:e1:3e:49:f7:52:2c:6a:2c:10:b2:b6:b4:11:9e:43:ce:
fe:7f:fc:ab:6f:99:7b:c1:57:bd:e6:b7:6b:77:f8:7a:21:0b:
56:54:ac:a0:84:e9:f0:24:30:d3:10:b2:86:91:3e:ea:dc:88:
53:c5:44:30:eb:d1:dd:f3:54:1f:9e:a6:81:9d:be:54:71:b9:
e7:f8:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org