Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A575FD64903811EFBBA8DF8B762E951A.roa
File: A575FD64903811EFBBA8DF8B762E951A.roa (raw, json)
Hash identifier: o+G3DVXBMtDkc4bxN2psKagdhHnoJFeaKuTJBs0ojIw=
Subject key identifier: FA:2E:00:8D:CC:CF:06:EC:C0:7D:22:F2:DF:C1:F9:5F:AA:0B:1F:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1884
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A575FD64903811EFBBA8DF8B762E951A.roa
Signing time: Tue 22 Oct 2024 05:44:04 +0000
ROA not before: Tue 22 Oct 2024 05:44:00 +0000
ROA not after: Thu 22 Oct 2026 05:44:00 +0000
asID: 212238
IP address blocks: 154.16.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6276 (0x1884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 05:44:00 2024 GMT
Not After : Oct 22 05:44:00 2026 GMT
Subject: CN=67173ba4-a485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:79:7f:b1:36:a0:40:a6:75:48:e3:09:af:9b:
dd:30:9c:85:dc:87:cb:d4:5d:18:44:5e:43:66:bb:
ac:22:fe:77:05:a2:63:d7:bc:60:e5:c7:f0:4d:91:
3e:65:54:d7:0a:ed:af:0e:66:2e:9d:b1:15:dc:ce:
e6:c9:55:4f:b0:6a:2e:72:ff:1b:ee:bf:21:b1:ca:
5e:33:53:e6:95:ed:29:4a:2a:87:d5:4d:75:4c:29:
90:90:44:e2:fb:29:fd:b3:29:84:c3:bc:22:0b:d1:
57:07:e8:e2:c8:d9:ef:57:69:90:cc:4e:89:ef:48:
97:86:16:3a:63:f6:f7:f1:c9:18:35:16:75:4d:ef:
78:42:79:4a:5a:ac:c4:bb:45:bb:bd:46:ae:78:bd:
66:60:a7:6f:ff:91:35:c7:44:b9:ab:a6:1a:56:2a:
cd:3d:9c:90:ee:62:e5:30:25:b2:2a:68:28:82:61:
8c:38:34:3f:42:aa:a8:04:b2:58:ae:c2:43:10:af:
6b:f8:85:00:26:6d:cc:b6:08:b4:98:07:7d:96:8a:
5b:f4:95:38:34:cd:37:0c:e8:c8:e8:f8:9b:16:be:
83:12:99:97:00:49:ca:8e:f5:95:08:77:1d:73:d9:
16:a0:ec:8b:bf:57:3d:96:a6:c2:68:05:2a:c1:e0:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:00:8D:CC:CF:06:EC:C0:7D:22:F2:DF:C1:F9:5F:AA:0B:1F:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A575FD64903811EFBBA8DF8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.165.0/24
Signature Algorithm: sha256WithRSAEncryption
85:85:57:6e:40:16:1f:57:f0:9f:9d:76:97:66:bd:9d:f8:99:
2a:24:bb:13:cd:c2:8f:a5:0d:af:54:1d:22:0c:fb:e7:ec:8b:
ec:5c:82:85:33:c2:0b:da:f6:20:5a:64:ce:f1:8f:35:08:33:
7b:2a:67:d2:17:ac:23:e6:87:24:b6:70:47:6a:98:70:d0:37:
f6:13:8d:c0:72:e1:fd:06:3e:27:e0:4f:8a:e2:39:39:3d:e7:
28:02:b8:a8:7b:01:e4:85:07:ec:d9:83:f6:1c:f5:0c:e8:19:
95:8a:1a:36:a8:80:9d:7d:f8:0b:0a:28:c8:29:5b:04:bd:49:
08:06:0a:b0:a2:27:8d:e9:a6:66:d8:e2:fa:85:88:d6:ef:b6:
09:a7:54:66:c2:37:02:13:20:2a:bd:ca:7e:12:8d:76:22:f4:
38:f8:0a:17:69:4e:54:69:ca:0a:50:07:d0:a9:e1:37:29:b9:
d1:4e:13:0e:23:20:54:a0:1d:5e:d6:1d:fe:ed:19:cd:1f:49:
46:a5:03:4f:ff:f2:3b:22:b2:fa:8f:d6:cb:4c:5d:40:02:14:
49:af:93:68:17:2a:27:81:a0:ed:bb:4e:b8:98:78:ac:bd:dd:
26:f2:57:4f:fc:ee:54:81:44:47:41:19:4b:c3:33:0b:b7:a0:
bf:66:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org