Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9AB581A054A211EF9F37166B762E951A.roa
File: 9AB581A054A211EF9F37166B762E951A.roa (raw, json)
Hash identifier: IuuzkFLkYH9GtSpXqheYHMLQMZGH498As18DmZRwhp0=
Subject key identifier: BD:15:36:57:BA:B3:6A:61:6C:47:74:DB:4C:A9:ED:23:9D:F9:97:1D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 178A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9AB581A054A211EF9F37166B762E951A.roa
Signing time: Wed 07 Aug 2024 09:51:23 +0000
ROA not before: Wed 07 Aug 2024 09:51:20 +0000
ROA not after: Fri 07 Aug 2026 09:51:20 +0000
asID: 14670
IP address blocks: 154.16.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6026 (0x178a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 09:51:20 2024 GMT
Not After : Aug 7 09:51:20 2026 GMT
Subject: CN=66b3439b-05b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:5b:63:8a:59:e6:d5:3e:67:12:cb:aa:fc:
1f:0e:54:77:f3:9b:09:25:c3:83:db:a3:6e:17:0f:
c6:c1:ec:f9:35:e9:f5:35:c6:10:3e:6a:2e:ee:d6:
68:28:38:33:5f:f8:89:37:e9:e7:8a:84:a7:2c:f6:
59:1c:b9:8d:f9:8c:9c:7a:f1:0c:49:d3:82:c5:9c:
c4:b7:1a:76:c7:72:1f:fa:26:b5:22:3e:bc:9a:3e:
bc:e8:36:ec:be:2c:a7:60:be:64:1f:6b:06:da:06:
67:74:42:e4:d4:70:9b:37:2f:91:67:06:a5:e7:d0:
9b:7a:4c:f2:0d:79:de:37:b9:ae:24:27:7b:dc:82:
83:d8:67:3c:0f:a9:32:13:9d:77:d7:50:2e:a0:af:
ab:a1:45:d0:a6:f6:08:79:12:33:8a:dd:79:98:c8:
66:c3:81:35:f8:22:ce:e1:e9:13:1c:0c:2d:d3:24:
e1:ca:c4:56:66:a5:7b:2d:d2:96:b9:9e:1d:c3:26:
1d:d7:02:00:9f:1d:54:36:f0:e1:80:08:49:14:c8:
a2:8b:22:77:69:ed:6e:43:d2:25:bf:1c:6c:76:d3:
4e:f8:65:c9:87:90:ce:86:46:4a:71:51:b8:54:29:
03:eb:d8:c3:9e:bc:6e:1f:b1:fa:c0:d3:a0:92:ab:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:36:57:BA:B3:6A:61:6C:47:74:DB:4C:A9:ED:23:9D:F9:97:1D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9AB581A054A211EF9F37166B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ec:36:ee:e1:8a:af:20:46:61:7e:9a:66:d2:97:0d:a4:53:
f8:0f:63:a0:d0:f1:69:40:a7:26:a0:48:45:98:9c:e2:1c:fc:
c8:11:ce:bb:d7:ef:8e:b9:ba:b3:d1:1d:4d:24:a4:0f:a5:cb:
3b:b7:cc:84:87:17:55:14:4d:10:ec:9f:a1:e3:e6:72:9a:19:
ee:07:88:d8:de:b2:27:e7:05:9a:9a:bb:f3:40:79:f2:42:3e:
96:7a:98:ef:02:de:75:29:bd:a2:7d:8a:f5:97:20:a4:f3:90:
cf:48:f1:ef:e2:57:ba:df:5b:b2:8c:df:07:ee:1f:72:a3:0c:
1f:48:e0:a3:89:54:46:87:8f:34:4d:b7:f0:4c:41:55:1d:87:
53:11:11:34:20:79:b5:a5:28:ee:c6:9c:f1:12:75:ea:e5:08:
f8:1a:22:92:46:94:2d:d9:9e:d2:06:fb:cb:86:04:ac:ce:ed:
8b:5d:a5:1e:a4:85:e1:73:77:cf:ca:fc:3d:c5:d8:15:7d:a3:
c9:50:34:a3:01:c6:75:c0:4d:09:26:33:e3:8c:20:43:0c:7b:
e4:f4:4a:d7:e5:df:e7:c1:b5:1d:26:2e:cb:4e:ad:01:35:0a:
32:de:96:83:8e:1e:a1:e7:e9:30:40:ea:7f:28:9e:f6:54:4c:
53:15:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:23 2024 by rpki-client on console-ams.rpki-client.org