Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ABF9BCCF7FF11EE90348628017001B1.roa
File: 9ABF9BCCF7FF11EE90348628017001B1.roa (raw, json)
Hash identifier: dVAs7D7KIv59cYGKhLFksQkAVzRlkWsEAePvsw+l3Ts=
Subject key identifier: FF:9D:86:1C:E1:6C:41:08:A2:19:75:46:3F:08:74:D2:25:59:9F:D9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 15A7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ABF9BCCF7FF11EE90348628017001B1.roa
Signing time: Thu 11 Apr 2024 12:32:48 +0000
ROA not before: Thu 11 Apr 2024 12:32:44 +0000
ROA not after: Sat 11 Apr 2026 12:32:44 +0000
asID: 213060
IP address blocks: 154.16.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5543 (0x15a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 11 12:32:44 2024 GMT
Not After : Apr 11 12:32:44 2026 GMT
Subject: CN=6617d870-16d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:85:85:9d:30:a8:23:7e:39:60:2e:e2:c1:0b:
3f:4b:70:9a:69:4a:a5:9a:c7:c3:a4:45:49:eb:98:
60:00:f4:41:45:26:27:cd:48:13:bf:a8:1a:43:0b:
c5:61:d2:ef:52:29:b9:16:3e:49:ac:b9:6c:f6:d6:
4f:f3:a3:ff:b7:03:92:9a:c0:90:de:d1:92:65:9f:
7f:82:86:02:0c:da:46:cb:96:9d:68:ad:93:8d:30:
bf:0d:7e:f8:af:19:e1:44:73:55:50:4f:75:2c:0b:
83:1b:8a:e2:8c:fe:97:2b:2e:d5:d1:52:fd:24:32:
9a:b0:76:c0:44:eb:4d:ab:82:2c:66:4f:7a:b5:fb:
bc:64:93:e8:e0:19:b5:80:c0:93:ba:91:33:99:79:
48:a2:8b:f8:fb:ff:ed:54:76:00:81:d1:0a:60:e9:
a7:67:c6:25:9a:55:ff:eb:b0:5b:24:48:74:ec:c6:
92:09:2c:e7:bc:45:6e:39:6f:92:6f:ca:13:60:45:
9d:2a:06:0a:1f:3d:82:54:4e:ec:8b:be:27:22:55:
e0:65:31:42:9e:90:bd:e4:59:fd:8e:d4:12:43:32:
bd:81:26:a1:d5:58:aa:5a:5d:fb:d0:c4:a7:a0:61:
28:33:80:9d:e3:19:12:20:63:d6:3c:3a:5f:0b:82:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:86:1C:E1:6C:41:08:A2:19:75:46:3F:08:74:D2:25:59:9F:D9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ABF9BCCF7FF11EE90348628017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.70.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:d2:10:11:e2:2c:bc:ab:fc:ab:3d:0d:59:87:99:92:44:c0:
7e:82:f6:24:6f:fb:14:d6:e8:d1:e5:04:3c:54:e6:3c:7f:6b:
26:00:5d:85:a5:a7:a2:a5:40:90:21:01:4d:b1:9b:ec:d1:31:
ee:d6:0f:18:b5:39:f4:db:1a:ba:d5:ac:8d:e8:18:ef:ab:55:
3e:a8:eb:15:74:36:9a:14:91:52:50:c2:65:79:60:e8:26:46:
46:ef:d8:33:9f:22:a6:11:ee:09:4f:29:9a:37:94:31:4c:f5:
a3:48:db:1e:2c:be:de:eb:b7:f1:dc:da:d1:fe:34:19:d2:c7:
9b:de:f6:52:29:1b:9c:d7:f7:bc:cb:95:65:01:91:9c:d3:6e:
12:c4:89:ba:81:16:8c:ea:39:70:c6:27:8c:08:d7:e2:61:84:
b2:de:be:0e:18:40:d6:95:a9:4a:d3:5a:ba:1d:a7:69:f3:f2:
1c:80:8d:ea:9c:0e:43:52:ce:68:6d:50:ed:75:8d:18:5c:bd:
88:af:ff:c8:b4:d8:33:60:62:11:3f:4a:a3:f0:b5:76:dc:5f:
3c:0f:2d:5e:5a:a6:fb:5c:9d:9e:5d:bc:03:b0:01:3d:cf:0d:
d8:3c:31:a2:c6:dd:62:52:b7:65:ff:a1:82:b0:ec:5f:32:70:
b9:45:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:32:46 2024 by rpki-client on console-fra.rpki-client.org