Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/93C70AE4688911EF8D5186BE762E951A.roa
File: 93C70AE4688911EF8D5186BE762E951A.roa (raw, json)
Hash identifier: LuPCxGathWpagTBn9bYDlSdVoRa16IcR6UcNCl0m8DM=
Subject key identifier: 8C:21:A5:96:21:56:12:90:56:E3:47:D4:E5:35:0A:8A:D9:15:99:95
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17E3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/93C70AE4688911EF8D5186BE762E951A.roa
Signing time: Sun 01 Sep 2024 17:42:37 +0000
ROA not before: Sun 01 Sep 2024 17:42:32 +0000
ROA not after: Tue 01 Sep 2026 17:42:32 +0000
asID: 834
IP address blocks: 154.16.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6115 (0x17e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 1 17:42:32 2024 GMT
Not After : Sep 1 17:42:32 2026 GMT
Subject: CN=66d4a78d-f952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:23:73:30:66:b8:46:c9:f8:54:4f:6f:d9:
06:5d:46:db:38:0c:a2:e5:71:8e:62:d7:89:59:32:
11:22:55:04:67:45:01:fb:59:ab:10:40:32:21:73:
48:a0:6a:66:15:bd:f6:83:9f:c9:68:df:2c:da:8d:
53:23:48:06:24:86:de:86:15:90:9d:49:54:8b:86:
3e:8d:db:9a:3d:54:1d:46:aa:3d:5e:e0:6a:ab:0a:
c1:9b:bd:5f:25:d6:d2:d2:49:d4:5c:b6:bb:cd:58:
6a:fe:55:87:4b:77:98:4c:51:20:4a:57:16:1c:0c:
88:43:c6:a2:27:96:91:0a:23:58:2c:b2:6c:9e:17:
3d:11:ac:cf:e4:22:f3:45:eb:22:79:69:95:8c:7f:
91:5c:b0:11:ae:81:67:5d:dc:ee:4f:82:ff:e0:6d:
1d:7b:d0:7b:01:ba:88:5f:d7:30:e5:aa:7e:b3:e7:
c4:0c:d7:38:1d:47:78:c1:3c:f1:67:c9:9f:02:53:
f2:31:3a:e7:f2:68:a3:4b:87:6d:ed:00:01:ad:a7:
48:34:8c:4a:66:28:9e:12:b1:e9:bf:ef:5b:d2:aa:
7b:74:4f:67:cc:b3:6f:e0:32:b5:3f:65:98:4b:a0:
ff:51:f1:7b:31:7e:71:56:09:fb:cc:e7:b8:3b:2f:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:A5:96:21:56:12:90:56:E3:47:D4:E5:35:0A:8A:D9:15:99:95
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/93C70AE4688911EF8D5186BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.233.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8d:e4:9e:7c:13:8c:94:ee:6e:42:6e:e7:8f:a3:3c:6b:4f:
1b:36:1e:87:75:4a:c8:0a:34:1f:a8:58:67:d6:97:b4:33:66:
41:07:da:39:aa:35:82:1f:f1:82:fd:3f:bf:62:f9:dd:34:74:
02:ac:52:39:2a:36:b8:20:db:e0:e8:bb:ae:e6:6c:96:31:3b:
88:22:01:46:a7:14:b5:d9:32:f3:ed:cf:de:40:9c:49:d5:8f:
b5:c8:cb:c9:37:2f:0b:ad:aa:92:ee:d9:e9:fa:94:b0:5f:ba:
4a:cd:d8:d1:02:2e:8e:ec:9a:34:be:25:2f:fd:b3:17:0d:86:
1b:44:1f:f5:65:5a:9d:0e:16:0c:05:ca:b6:87:47:41:39:37:
b1:01:6b:b9:77:a8:3c:9b:dd:25:5c:1e:e6:14:36:58:14:0c:
46:46:83:26:1c:48:d7:7c:73:65:31:3a:5c:b6:1c:05:29:78:
49:e0:b7:c8:27:8c:11:5e:a1:5c:fc:33:76:62:41:e8:db:67:
ed:70:aa:6a:5f:7a:c1:07:0b:e6:74:0e:1a:8f:aa:67:ee:2a:
be:fe:b7:4f:23:88:3b:13:8b:6b:0e:f3:3f:d1:8a:b1:b0:6f:
52:28:02:78:cb:af:cd:d6:a4:dc:66:54:db:e0:ef:b7:e9:a9:
03:03:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:44 2025 by rpki-client