Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/969F3468DF2211EDB0FAF9F52F6D8C1D.roa
File: 969F3468DF2211EDB0FAF9F52F6D8C1D.roa (raw, json)
Hash identifier: KvbvbDz0gUGCy0cqWe3erd618MTe0beLcgqDPT/9/0w=
Subject key identifier: 32:A5:64:58:9A:86:F6:D9:F2:CF:BD:DB:66:41:30:D5:80:A4:FB:35
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D70
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/969F3468DF2211EDB0FAF9F52F6D8C1D.roa
Signing time: Thu 20 Apr 2023 02:25:17 +0000
ROA not before: Thu 20 Apr 2023 02:25:11 +0000
ROA not after: Sat 19 Apr 2025 02:25:11 +0000
asID: 174
IP address blocks: 154.16.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3440 (0xd70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 20 02:25:11 2023 GMT
Not After : Apr 19 02:25:11 2025 GMT
Subject: CN=6440a28d-cf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:1e:2a:f5:24:22:7b:88:18:fe:a4:c5:fe:
1a:cc:2c:9a:a3:51:57:3c:cf:82:31:a8:34:ed:f9:
8b:d1:b6:4d:fe:5e:d1:e2:3a:5f:23:b7:6a:65:76:
6e:ff:b5:39:93:19:85:86:af:19:75:03:41:4b:81:
b8:3c:4c:14:36:a5:a3:f0:9c:54:ca:a3:77:28:18:
b1:48:a5:cf:cd:46:6b:a8:2f:d4:bb:17:9d:c3:4c:
e5:07:db:3a:0e:1b:c5:ca:89:55:ed:d5:41:8b:ce:
e9:4a:55:0c:1b:d3:a7:98:b8:77:13:77:47:f7:33:
c3:c8:65:22:63:93:57:3e:08:71:f3:ea:e8:d6:7f:
2a:db:a7:4b:89:e3:a5:7b:a1:29:93:0a:35:78:df:
93:c4:27:85:c8:54:32:69:2e:ad:28:0d:7c:3a:ae:
0d:09:f9:01:ec:d3:dc:d1:83:e6:74:44:e7:64:9f:
88:ed:be:13:aa:c6:2b:9d:ac:d3:2c:89:e6:73:5c:
b5:61:be:78:6f:c3:25:57:18:f6:55:ea:09:c0:a2:
1a:c8:ea:4a:23:bd:17:f2:78:6e:30:af:1f:32:a8:
7f:04:86:fc:67:16:fe:2d:1d:cd:7d:6c:00:2b:71:
d4:11:80:9a:16:1a:5d:48:14:64:b1:7a:58:7f:1c:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A5:64:58:9A:86:F6:D9:F2:CF:BD:DB:66:41:30:D5:80:A4:FB:35
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/969F3468DF2211EDB0FAF9F52F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.192.0/24
Signature Algorithm: sha256WithRSAEncryption
05:66:3b:2e:f1:d8:58:a0:93:b1:3d:db:36:ae:77:bf:91:26:
c2:0c:5e:d2:c2:f1:d7:0f:9b:c5:ad:1d:df:33:86:a4:90:f0:
15:03:19:34:ab:cb:9b:98:49:3b:29:64:4c:c1:ca:9a:1f:a8:
7f:8f:dc:fd:df:29:a3:9c:b1:57:e5:74:55:03:b2:93:4e:be:
6a:0d:01:19:00:81:83:3e:96:e2:ca:7f:76:9d:ba:48:88:ee:
0a:d5:35:9a:a1:60:99:bc:b5:5e:80:37:ee:f5:8f:71:68:63:
d4:5f:99:cf:53:f3:84:fc:be:d6:91:98:96:5e:eb:3f:dc:ab:
86:d3:a7:48:86:e7:8c:6c:1b:d0:59:d3:81:53:45:1a:e8:7f:
94:cd:7e:d3:cf:dd:39:e9:14:8e:10:2a:b1:0d:8a:b1:ff:17:
71:1c:79:84:b5:52:0b:93:2b:a9:1a:29:67:d8:3c:9a:53:20:
ad:8f:37:cc:9c:96:0b:f7:cf:38:db:01:65:0f:7f:99:90:a9:
71:69:28:7b:9b:a0:fd:20:99:23:91:2b:b2:b2:2e:5e:47:18:
06:65:7a:63:46:a3:de:76:be:9d:c4:65:e4:ec:73:89:0d:0b:
16:fc:b8:d9:05:bd:90:74:bf:85:db:80:a2:61:3b:36:4d:27:
c8:31:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:27 2024 by rpki-client on console-ams.rpki-client.org