Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/98720B4C551811ED8E465CF2F1222468.roa
File: 98720B4C551811ED8E465CF2F1222468.roa (raw, json)
Hash identifier: 3cXyiIV8TbPq5oG5Px6mxI1CEG/dRkUvsmxtOZWgwYA=
Subject key identifier: CB:B1:56:6A:AF:EB:B5:20:03:CC:B1:78:7E:95:1D:0F:F0:20:AC:22
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A3C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/98720B4C551811ED8E465CF2F1222468.roa
Signing time: Wed 26 Oct 2022 10:26:04 +0000
ROA not before: Wed 26 Oct 2022 10:26:01 +0000
ROA not after: Sun 27 Oct 2024 10:26:01 +0000
asID: 46562
IP address blocks: 154.16.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2620 (0xa3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 26 10:26:01 2022 GMT
Not After : Oct 27 10:26:01 2024 GMT
Subject: CN=63590b3c-75b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:3e:05:93:e1:d3:a2:e9:51:b4:d7:4a:dc:
eb:9d:d6:0c:a5:32:74:df:3d:2d:6e:08:64:b2:3b:
27:a2:91:34:3a:2f:30:4a:c7:95:2c:90:a6:b0:5e:
0b:85:dc:07:7c:99:3d:42:0a:00:2f:38:93:e6:ae:
74:27:f0:ad:89:04:d9:ef:21:8f:39:b5:69:98:49:
72:55:da:68:df:b5:6c:60:50:57:65:6c:e6:b1:ec:
e4:91:10:9c:18:cf:0d:08:1b:1e:3c:3b:45:83:00:
20:5d:91:8a:e7:15:10:27:a9:15:74:7d:bf:78:cc:
79:47:24:cc:12:39:a1:49:be:4b:27:1f:72:61:3e:
84:19:a5:0f:d3:66:fd:68:33:85:c1:6b:15:d2:92:
c6:14:2d:2e:9e:3a:7a:cc:ec:2e:11:a7:63:c2:c1:
20:74:3a:f4:2e:4f:07:17:79:9b:fe:b9:22:51:bc:
ad:16:1f:4b:d6:18:02:67:1c:51:00:71:ac:96:0c:
d3:93:21:bc:bb:2e:15:f5:9d:29:c4:c6:0f:af:eb:
0d:88:9b:34:c8:35:a2:6c:d6:5e:00:e0:c4:65:6a:
69:90:01:be:b6:37:28:f8:51:af:4a:4b:f7:25:63:
a4:3a:26:36:c8:f4:09:7f:31:0a:ac:4f:fc:e3:44:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B1:56:6A:AF:EB:B5:20:03:CC:B1:78:7E:95:1D:0F:F0:20:AC:22
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/98720B4C551811ED8E465CF2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.175.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:21:b4:a0:94:49:52:b6:ac:91:e4:1d:38:57:b9:85:28:d8:
59:55:4a:50:5d:57:59:eb:1a:82:42:9f:30:49:02:a4:91:85:
00:a8:5a:51:b9:22:d2:11:81:bd:4b:95:6d:b0:1d:c1:66:ca:
bc:b5:03:b0:0d:27:b6:8e:9d:08:f9:98:7d:71:f4:4b:6e:7f:
5a:10:31:df:d2:25:14:3a:34:72:29:8c:f4:6f:97:96:84:42:
4a:7c:b9:04:dd:c7:0d:ed:6c:6e:e0:d5:7b:fb:a6:24:6f:78:
69:43:bc:8d:3b:2c:b6:e2:95:7b:02:16:45:53:73:e8:8c:32:
fa:62:3f:18:df:87:78:e8:64:c0:89:56:f4:b2:ab:dc:e1:d8:
1b:98:52:96:81:6a:1d:50:31:f6:c3:d0:fb:34:65:0c:35:cc:
23:c7:ca:0a:be:f0:15:e2:ba:d2:ef:5c:00:bd:b1:8d:e0:e1:
ad:b9:94:db:b6:9c:37:de:9a:c7:d8:33:69:5e:0f:0f:26:11:
38:ae:7e:bc:cd:9f:3f:0a:c5:39:01:dc:2d:7d:a6:25:a9:a0:
49:d7:59:fc:d3:60:c5:a9:a9:3b:e1:8c:ae:d2:3d:65:66:b6:
21:ec:87:87:c9:85:07:65:43:72:ed:47:b6:57:ee:c3:22:16:
ca:e7:bc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:38:52 2024 by rpki-client on console-ams.rpki-client.org