Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A9E28ABEBEBB11EF9C099599762E951A.roa
File: A9E28ABEBEBB11EF9C099599762E951A.roa (raw, json)
Hash identifier: qKaeB55EKG0hsZP5ADOUe0qf8hSG3LLZTivbAm369l0=
Subject key identifier: CC:DF:26:7A:46:42:FE:5E:99:F6:77:F3:AF:82:E3:7D:F6:B5:69:13
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 194C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A9E28ABEBEBB11EF9C099599762E951A.roa
Signing time: Fri 20 Dec 2024 10:17:49 +0000
ROA not before: Fri 20 Dec 2024 10:17:45 +0000
ROA not after: Sun 20 Dec 2026 10:17:45 +0000
asID: 834
IP address blocks: 154.16.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6476 (0x194c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Dec 20 10:17:45 2024 GMT
Not After : Dec 20 10:17:45 2026 GMT
Subject: CN=6765444d-219f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:08:11:ed:bd:ab:d0:42:9c:df:b8:ec:0f:
72:9d:25:44:01:40:bb:5e:3b:5d:cb:37:6c:99:e3:
4a:30:0c:45:74:4e:18:a6:42:36:3f:2d:aa:02:5d:
59:2e:1b:99:17:22:de:59:fd:b0:82:1f:b5:0e:1f:
4d:06:7f:cb:c5:36:c4:64:1e:e4:29:12:d3:2e:47:
8d:0e:88:d9:f0:1f:9e:23:5b:68:a6:e4:ef:60:d4:
31:0c:df:0d:3e:d4:2a:b0:4d:2b:35:e2:54:aa:14:
bb:3d:09:3e:1a:cf:2f:47:49:55:f0:12:54:d4:b2:
8a:98:c1:30:a8:fa:cf:20:dc:a4:86:bd:ee:3c:5c:
1a:f0:b5:ac:4a:7c:8e:9c:13:53:bc:97:3d:23:52:
c6:b6:f1:4b:46:d7:6c:16:f6:82:0d:ca:29:1d:04:
76:b0:fd:d7:32:aa:72:c0:d5:3c:ad:f1:57:fc:10:
11:18:b2:7f:85:00:1e:46:fe:eb:6d:6f:e9:0c:81:
c2:b0:90:d5:1d:99:7b:28:0a:a8:13:98:a8:89:fa:
9b:0c:2a:5e:5d:10:c9:91:d3:92:50:ff:58:eb:74:
fe:61:a7:a3:91:e8:c7:e4:c8:dc:e5:8c:c5:96:4c:
9e:20:cd:9e:9b:04:68:ba:2a:e5:f4:62:ae:7e:08:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DF:26:7A:46:42:FE:5E:99:F6:77:F3:AF:82:E3:7D:F6:B5:69:13
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A9E28ABEBEBB11EF9C099599762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.160.0/24
Signature Algorithm: sha256WithRSAEncryption
35:60:36:1c:06:c3:65:df:30:ea:af:39:e7:8b:df:61:a5:50:
9a:a4:46:88:a7:a1:bd:c1:76:6c:80:77:2b:70:a9:57:ab:b9:
e0:9f:9f:0f:b7:a8:9b:2a:71:7f:a3:08:eb:b4:81:dd:61:e9:
7a:4e:cf:83:4e:be:24:c9:cc:55:44:73:90:fd:3c:1c:c6:23:
d0:0a:b8:cf:4d:34:5c:ac:4b:66:8e:7f:6e:96:f4:30:3f:30:
d9:6c:ad:af:56:00:27:f9:c9:fa:63:a7:bf:d4:13:0b:cb:33:
d0:a3:ec:93:77:0d:61:07:18:f5:fd:56:7c:e8:ce:ed:34:2b:
af:cf:f3:5e:90:4b:56:68:04:e5:12:6e:4d:24:af:59:ff:65:
dd:ed:07:9b:aa:b8:25:fa:da:03:05:2e:d0:6f:c4:c5:d6:05:
7b:a9:7b:bc:9f:dd:24:16:ca:a2:6a:3c:61:4d:36:36:2e:d7:
c3:d4:3c:f3:a1:81:7e:99:7e:97:70:c4:08:e2:15:bb:75:11:
a7:08:90:d1:04:0e:7f:1a:21:26:37:26:be:5f:51:03:54:4e:
58:5f:f9:85:fe:2a:41:e5:f3:fb:a8:ac:9a:4f:4e:2a:01:86:
25:3b:47:ca:76:82:65:3b:ee:d5:0d:e5:d5:be:5d:63:4e:77:
a1:1d:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:41:10 2025 by rpki-client