Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97D9967C192111EF93575631017001B1.roa
File: 97D9967C192111EF93575631017001B1.roa (raw, json)
Hash identifier: uLMlQYbY3NTELG1BPocZXvUDFr6Gq3rtVub9/DiTcL0=
Subject key identifier: 88:13:1D:05:36:C9:CC:57:5D:4F:72:E1:3F:2F:D3:B3:E8:A2:CF:57
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1681
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97D9967C192111EF93575631017001B1.roa
Signing time: Thu 23 May 2024 16:29:14 +0000
ROA not before: Thu 23 May 2024 16:29:11 +0000
ROA not after: Sat 23 May 2026 16:29:11 +0000
asID: 202464
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5761 (0x1681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 23 16:29:11 2024 GMT
Not After : May 23 16:29:11 2026 GMT
Subject: CN=664f6eda-0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:e1:97:52:9a:c1:fe:46:e9:b9:f6:8f:8f:
70:64:80:b5:5d:08:59:0e:97:1b:a2:16:56:93:68:
2e:b0:db:7e:d7:d6:f0:43:a0:59:b1:3c:0b:2c:41:
1b:d5:0c:76:e3:ce:76:19:97:75:c3:9a:fa:cf:58:
c9:0a:f2:43:66:58:37:a9:a9:07:9b:55:23:ea:bc:
e9:23:a7:bc:03:91:b7:05:a8:70:c9:14:63:9e:e9:
2a:e7:5c:3b:18:25:78:f5:08:0b:a4:a4:19:f8:c0:
b6:11:b2:24:62:26:6d:3b:33:91:f0:61:ab:93:3a:
f5:7e:a5:2d:0d:f9:d7:4a:9e:61:87:a0:aa:f2:cc:
40:8b:d6:de:71:a7:b4:a7:c5:76:26:5c:fb:fb:3e:
68:11:1a:b8:96:c8:66:23:a8:71:da:77:46:db:13:
3b:5d:63:19:30:e5:c9:2f:d4:4c:3f:65:92:46:5f:
59:6d:90:ba:b6:79:d7:c4:b9:8d:e8:cd:2a:8d:8f:
59:6d:a3:ee:b3:d0:8f:eb:60:f4:e8:10:0b:4f:f9:
b3:0f:df:14:bb:8e:ef:d8:35:5a:26:c3:98:37:dd:
3d:2e:12:4e:55:98:a7:f7:86:70:ef:9b:6f:54:d4:
81:80:59:ec:d5:7a:b2:22:f2:bb:3e:41:f0:42:75:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:13:1D:05:36:C9:CC:57:5D:4F:72:E1:3F:2F:D3:B3:E8:A2:CF:57
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97D9967C192111EF93575631017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
97:78:70:33:4d:85:50:04:a4:b5:2d:13:06:27:53:ac:8c:26:
53:0a:c5:41:47:77:79:e1:c9:61:8c:d9:51:43:e8:d4:b6:da:
a3:8e:c1:c3:8c:97:99:6e:91:b8:c4:23:a5:8c:07:35:10:3d:
fc:41:98:7f:9a:06:fe:e3:62:99:b9:67:ce:f2:20:4d:fd:9d:
0c:bd:56:f5:bb:43:f7:90:d9:2e:a6:66:70:d3:fc:c5:29:f9:
77:45:6d:4b:a6:40:38:81:b2:bf:d9:21:43:f7:ad:1e:9e:42:
fd:54:ac:68:fc:3c:fa:21:dc:1d:b3:c6:be:5d:dd:0c:07:a8:
0b:bd:d6:4e:70:87:1e:9c:1e:45:f6:2b:23:c0:e7:de:79:ba:
a4:da:ea:bd:17:34:37:7a:65:e9:8c:9a:2f:b4:15:18:70:5d:
d6:4a:b5:c1:e2:7c:58:fb:aa:69:e1:69:a8:f0:89:71:60:0a:
be:29:a7:16:c4:d5:18:6f:be:59:4e:aa:12:b9:af:de:c5:bb:
5a:ea:a4:00:b7:b2:a6:30:b3:79:59:5e:3d:6c:6b:04:f5:2f:
84:bb:07:f5:f5:9c:35:8b:61:68:f6:26:50:71:c0:80:d9:9f:
bc:4b:86:d9:df:d4:0a:da:8b:83:b5:04:06:32:3a:3f:ad:e1:
57:40:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:28:47 2024 by rpki-client on console-fra.rpki-client.org