Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A6CD9398033F11EE88920E774AD9E6FC.roa
File: A6CD9398033F11EE88920E774AD9E6FC.roa (raw, json)
Hash identifier: rhoNItURRjTDHkTH9kj5h5Xz7b1sBqWPuGBVYQ/GNZ4=
Subject key identifier: 50:B6:52:62:EB:CA:AF:BD:3F:B5:11:54:69:0F:77:27:A0:95:D0:D6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EBA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A6CD9398033F11EE88920E774AD9E6FC.roa
Signing time: Mon 05 Jun 2023 01:24:01 +0000
ROA not before: Mon 05 Jun 2023 01:23:58 +0000
ROA not after: Sat 07 Jun 2025 01:23:58 +0000
asID: 61317
IP address blocks: 154.16.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3770 (0xeba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 5 01:23:58 2023 GMT
Not After : Jun 7 01:23:58 2025 GMT
Subject: CN=647d3931-0a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:c7:aa:07:e9:ff:c3:80:35:0f:50:d4:e9:
16:b7:e6:36:44:37:4a:01:c7:d3:c7:41:d7:f1:8a:
30:f2:d6:97:45:74:09:92:cf:4d:ab:11:76:7b:34:
f8:98:59:08:22:1f:db:c2:58:43:41:58:da:8b:87:
ea:a0:d0:0e:5e:86:b7:89:50:e0:ce:f2:a5:a1:66:
78:2d:64:7f:e3:68:47:ac:a1:ca:1e:44:4c:c7:51:
fd:e0:41:32:a2:42:32:6c:71:7a:4c:5b:ea:48:9b:
89:a9:cb:e3:4d:e0:97:11:de:8e:16:24:9b:0a:0a:
1d:d1:1b:95:38:2e:c6:6a:3a:22:eb:f9:29:59:90:
9c:98:88:e7:64:26:9b:66:4a:b0:78:66:9f:22:25:
9a:9f:e8:58:67:98:dc:fb:ad:50:37:0f:86:87:08:
a3:7b:0b:29:74:5c:90:24:ea:78:59:01:b0:8c:43:
dd:24:e2:1d:98:c1:0b:dd:79:76:1f:4a:b0:59:2a:
d4:fe:05:f2:82:17:52:50:c0:09:e6:94:77:83:f4:
b0:af:b5:11:26:fe:78:06:86:7b:e9:a1:a5:82:f2:
70:d9:66:98:03:a8:f1:83:eb:df:ba:1f:a7:81:67:
5e:76:8e:55:69:2a:4f:0f:a4:1d:ae:c9:3b:d5:57:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B6:52:62:EB:CA:AF:BD:3F:B5:11:54:69:0F:77:27:A0:95:D0:D6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A6CD9398033F11EE88920E774AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
58:8e:8f:52:22:7a:63:c8:72:b4:d4:dc:64:00:5c:3c:11:be:
b8:0b:dc:73:0d:2d:2d:f6:f4:51:12:26:11:f8:3f:64:fc:7d:
a3:2f:74:10:f9:ff:d6:03:b2:4a:6f:17:f7:23:4b:0e:7e:85:
72:83:5d:90:00:18:67:24:37:01:fd:b7:75:9c:76:17:a8:87:
a5:c3:12:e3:42:28:87:4d:0c:51:94:14:90:56:1e:53:c7:1d:
10:8f:19:6a:1f:49:54:0c:c5:ab:a0:3e:9e:b6:11:b3:90:77:
20:ec:33:20:9b:08:4d:c4:a9:e3:4b:ca:36:a0:8a:72:4b:d6:
5a:89:82:7c:54:b8:e1:d1:1d:81:fb:5d:82:fc:e9:bf:c3:d6:
1e:ef:eb:16:6a:03:d7:81:18:ad:77:84:2d:a1:2b:7f:c4:78:
80:53:e7:ce:4d:f9:1c:e6:59:9c:9d:de:9e:65:13:02:03:d8:
fb:9c:3c:5d:de:36:8e:a9:9f:02:4d:a8:88:23:92:b3:a6:ab:
0e:0f:64:00:e1:43:aa:48:25:dc:d0:98:9b:8e:e4:08:52:7b:
39:ab:e0:15:42:5e:99:1e:06:c6:77:87:7e:9c:63:c6:e2:f7:
69:c0:41:e7:73:52:28:91:5f:15:c2:6d:66:08:49:85:d4:53:
bd:e9:50:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 13:16:52 2024 by rpki-client on console-ams.rpki-client.org