Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/978B8D30644711EF92C13483762E951A.roa
File: 978B8D30644711EF92C13483762E951A.roa (raw, json)
Hash identifier: YQiLc2laZFJ7NdeZYVD43qlW3IM0F3z0iR+C+PJPUmk=
Subject key identifier: E8:EA:A9:0A:2F:9D:45:4D:48:06:09:47:66:F7:A6:88:B8:E8:A0:F2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17C9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/978B8D30644711EF92C13483762E951A.roa
Signing time: Tue 27 Aug 2024 07:40:12 +0000
ROA not before: Tue 27 Aug 2024 07:40:09 +0000
ROA not after: Thu 27 Aug 2026 07:40:09 +0000
asID: 209181
IP address blocks: 154.16.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6089 (0x17c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 27 07:40:09 2024 GMT
Not After : Aug 27 07:40:09 2026 GMT
Subject: CN=66cd82dc-3e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:20:95:11:8d:1a:0f:3d:4b:57:e8:6b:3a:
79:74:06:ad:9e:f9:b4:bf:db:1c:5c:33:2f:19:f1:
8c:a1:8b:9f:76:07:4f:1f:c9:d7:32:30:a5:b3:9b:
be:35:cd:29:df:0f:04:90:53:20:46:88:ba:75:fa:
6b:d2:73:ba:7f:00:12:35:6b:87:4b:32:cf:b6:49:
6c:31:5c:6b:51:44:a9:15:36:6d:09:a3:c3:56:ba:
e3:30:f9:74:0f:37:7e:e2:09:60:4a:c3:8b:84:f4:
ac:17:e1:59:70:d4:a4:72:dc:53:8b:4a:bd:2f:00:
ed:ac:a4:97:2c:c6:a3:09:e7:93:59:12:58:e6:25:
8c:ad:c3:65:97:1c:1a:c7:68:de:a6:73:23:ba:16:
9d:73:ea:74:f4:f3:f4:e8:1d:7b:5d:2f:e8:5d:4d:
1f:fa:8b:67:ca:7a:ca:46:eb:02:df:31:64:d6:92:
c7:e6:2b:e6:a7:50:4c:be:a6:98:98:17:54:01:09:
80:00:ea:53:6b:ff:ed:ce:16:4d:f8:25:5b:95:9b:
dc:76:d7:0f:d4:4c:f1:97:b2:54:09:dd:39:a0:27:
05:4e:b0:86:d2:08:05:2e:31:a2:18:0b:f0:87:b8:
38:6f:99:71:74:22:36:0d:6c:7b:14:00:c7:59:ed:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:A9:0A:2F:9D:45:4D:48:06:09:47:66:F7:A6:88:B8:E8:A0:F2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/978B8D30644711EF92C13483762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5a:5d:5e:f0:7c:8b:0f:b7:92:8f:ee:04:e7:f0:32:be:66:
56:66:96:1d:0f:5e:4d:f3:56:b9:3c:6f:33:6d:cf:60:99:d8:
de:20:39:69:71:32:f9:a4:74:02:92:2f:da:01:0e:34:e1:63:
e0:19:9a:cd:b1:5e:b2:9d:42:d8:5f:ff:8a:e4:d1:e0:3f:cc:
95:20:59:c6:a7:70:4e:36:0d:69:f7:43:c5:78:bc:2f:24:f5:
3e:5e:b0:39:84:3f:25:37:aa:3a:00:64:0a:c2:a5:6b:87:71:
82:c6:77:2f:c6:48:0f:37:80:7e:fe:72:77:ab:3a:95:09:44:
d4:23:c1:1c:87:7f:4c:25:98:e9:a4:3f:fd:c8:aa:93:70:3f:
f1:0a:bc:19:1d:f9:e8:5e:8c:a6:bf:45:c6:14:9f:df:22:19:
38:9c:45:ab:e7:e4:c8:00:8a:30:f1:89:37:69:bc:45:7c:8a:
b2:9d:bd:d3:3c:44:1e:b8:a0:dc:d1:1e:49:8c:e2:4a:07:35:
f1:48:91:e0:b7:28:e6:fa:23:e9:90:73:ec:d6:48:a8:83:62:
4b:77:5d:c7:63:64:58:2e:b0:71:59:0a:0b:c7:40:74:c7:f7:
b1:3a:9c:b5:7e:b8:0b:13:12:48:f4:4d:00:3b:a1:5a:7f:21:
bb:52:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org