Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A58A5B4E6B4C11EF9D56A9A4762E951A.roa
File: A58A5B4E6B4C11EF9D56A9A4762E951A.roa (raw, json)
Hash identifier: ePSaaO+9ixp/FZsS6dv36DcU3nep6f8ZArRxKVxrhEg=
Subject key identifier: 17:18:B3:41:0C:26:3A:38:E5:EF:91:0B:C4:C6:E4:F1:14:B3:2B:91
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17F0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A58A5B4E6B4C11EF9D56A9A4762E951A.roa
Signing time: Thu 05 Sep 2024 06:04:01 +0000
ROA not before: Thu 05 Sep 2024 06:03:58 +0000
ROA not after: Sat 05 Sep 2026 06:03:58 +0000
asID: 834
IP address blocks: 154.16.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6128 (0x17f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 5 06:03:58 2024 GMT
Not After : Sep 5 06:03:58 2026 GMT
Subject: CN=66d949d1-d6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:6a:2a:b0:c5:2d:b2:72:98:40:93:41:a7:
ae:26:2d:fd:62:8e:69:9f:93:c8:e3:c2:2c:7c:b9:
01:60:26:a8:d5:62:ae:c0:88:2b:71:7e:68:7b:27:
9c:7f:27:6c:99:9f:b1:3b:9e:4a:7a:8c:d2:b0:b9:
77:4a:e1:c7:48:e9:95:fa:ad:0d:c1:9b:cb:58:00:
88:27:56:90:0c:fa:08:27:75:44:c5:f5:a8:1b:45:
41:b9:39:f1:bd:73:b8:31:85:bd:8c:be:9b:22:58:
2d:06:13:be:04:bb:fc:e6:09:44:e7:c2:b2:36:6f:
e9:db:3f:b1:a8:92:06:9a:38:e8:41:f4:e3:12:d4:
bc:80:41:46:8e:b9:83:6b:07:f7:80:4f:f7:e3:e7:
89:e9:61:68:3b:dc:67:9b:8c:a8:9c:30:d6:32:10:
8c:0b:8f:15:ee:ea:48:0d:db:0e:35:75:6e:48:66:
a1:ce:2b:b3:c9:ec:99:52:c1:10:92:df:3e:88:19:
6e:f6:c3:f3:ff:2b:b3:ca:b4:70:c0:07:c1:dd:78:
73:6a:d5:20:23:c5:8a:cb:04:5a:49:79:0c:a6:7f:
c2:2c:ba:88:e5:b9:eb:2d:a8:4c:2b:2f:53:44:36:
06:af:d3:37:c5:4f:44:89:bf:3a:2c:dd:dc:ca:28:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:B3:41:0C:26:3A:38:E5:EF:91:0B:C4:C6:E4:F1:14:B3:2B:91
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A58A5B4E6B4C11EF9D56A9A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6e:6b:6b:a2:e2:a4:53:90:2c:1f:89:f5:73:bb:b5:58:3b:
1c:07:0c:1c:ed:47:58:4b:94:5b:f6:95:ee:d1:79:e2:fd:27:
6f:f5:54:da:a0:58:c5:b5:41:24:bc:ad:6e:9b:d6:a7:f5:a3:
4d:a0:b0:9a:1e:73:81:de:49:86:11:05:a7:99:4b:f3:b7:2f:
bb:50:69:ab:ad:5b:61:49:30:91:68:26:5a:9a:c6:fe:36:fe:
4d:ef:2d:2a:da:ea:95:be:8d:28:cc:77:5d:a8:73:81:3c:2f:
ce:e0:77:58:50:4a:90:7b:76:d1:d6:0b:66:3f:c1:1e:1b:1e:
ec:01:b6:a4:d6:de:f9:c9:fc:2b:0a:a2:b9:63:66:77:e7:a1:
d2:67:3a:e7:75:e4:7a:10:d4:26:fe:c8:6e:82:9f:6f:23:3c:
2d:9c:b6:a1:29:fa:a7:60:c0:c3:66:af:c3:d7:17:14:43:3e:
9c:79:77:18:7d:b3:93:76:ad:1b:d8:a2:39:c0:03:d5:7c:cc:
f3:22:be:b7:86:92:f5:35:a6:87:7f:bf:74:bb:21:7d:9c:7d:
38:ab:e3:e6:db:8f:22:0f:2d:e2:d5:1c:30:a7:9d:b8:b8:2b:
ea:ea:0b:62:52:3f:19:df:98:7b:64:1d:f0:d8:5e:74:e1:3c:
5d:0c:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:27 2024 by rpki-client on console-ams.rpki-client.org