Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA05A9B0552011EDA6656886F1222468.roa
File: AA05A9B0552011EDA6656886F1222468.roa (raw, json)
Hash identifier: 15YIFm8zzjjv2D7fV6A6bx8KsdgIPTq6hMQw9OnVf/8=
Subject key identifier: 60:CF:B3:E5:D7:6A:23:7F:C8:9C:BE:D3:D6:EC:8D:31:B9:A5:FD:27
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A60
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA05A9B0552011EDA6656886F1222468.roa
Signing time: Wed 26 Oct 2022 11:23:50 +0000
ROA not before: Wed 26 Oct 2022 11:23:47 +0000
ROA not after: Sun 27 Oct 2024 11:23:47 +0000
asID: 212238
IP address blocks: 154.16.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2656 (0xa60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 26 11:23:47 2022 GMT
Not After : Oct 27 11:23:47 2024 GMT
Subject: CN=635918c6-0320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:33:87:7e:29:0b:31:79:cc:9a:60:99:af:
93:58:ac:8a:1b:8a:1c:cd:7e:44:da:3b:55:90:ae:
8f:28:8e:b0:d4:f2:cf:2e:fb:6c:a6:ff:c9:e4:27:
90:88:b3:92:85:3d:bc:52:9e:2c:16:bc:96:b7:68:
fa:6b:b0:71:12:ef:0f:4f:25:e0:fb:5e:da:ee:05:
c1:93:21:64:12:97:45:db:fd:ee:e7:02:9d:b6:ef:
eb:95:1d:29:fe:6f:f5:58:b6:17:fb:af:88:03:c0:
ea:99:c9:86:e1:89:ec:c4:05:c6:c1:c6:fc:42:83:
66:12:5c:87:3f:e7:4c:aa:96:cd:62:40:19:db:ff:
46:1b:38:5d:1d:56:fb:89:38:bd:ba:69:c6:1f:01:
98:40:2b:50:7c:ff:cf:ff:79:8c:ad:36:26:fb:00:
e0:55:98:75:4b:1b:75:2d:18:0c:62:7b:c8:6a:ca:
14:c9:13:69:12:7b:e2:da:ab:b9:5d:22:c4:f2:ce:
5b:1b:1c:91:a6:f2:02:9d:e6:e4:07:59:4c:90:55:
f1:1b:3c:6c:6c:cd:ea:cd:49:bb:ef:f5:83:65:c1:
d5:be:59:1b:9e:5c:6d:ac:c1:60:89:78:6f:7f:18:
11:ff:f0:79:a1:1a:70:8d:26:0f:12:81:86:f8:8b:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:B3:E5:D7:6A:23:7F:C8:9C:BE:D3:D6:EC:8D:31:B9:A5:FD:27
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA05A9B0552011EDA6656886F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.198.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0f:b7:f8:01:49:c1:a7:20:83:47:55:b5:f3:4f:db:31:3c:
78:95:8c:ff:70:81:b3:5e:9f:26:7e:32:c2:5e:8f:c2:1d:a4:
80:be:37:14:f8:d3:15:04:db:ea:72:a0:88:59:fb:3c:76:e6:
66:d4:3b:25:1f:ec:eb:4c:24:11:9a:74:fb:0f:11:2b:9c:59:
ac:10:ab:79:59:4e:44:ea:3b:45:b1:3d:e3:cd:df:37:4b:83:
dc:7f:78:e0:1f:74:a9:32:d6:f3:73:b4:89:31:de:b6:14:ed:
f8:f4:71:d6:ab:9b:14:bb:36:78:e3:5f:fe:ae:52:be:22:de:
08:3a:a0:0b:2c:fd:22:fa:de:16:f4:10:96:ce:19:45:3a:ff:
6c:1f:dc:57:8e:5e:b7:f8:f3:80:38:d6:df:32:47:f5:6a:7c:
8a:8d:59:c5:a3:79:2e:e2:13:1b:83:11:b7:a8:3c:f5:43:b7:
c6:37:f2:62:78:a4:b3:27:b8:49:91:c3:86:81:fd:2e:5b:b2:
1a:fa:3b:87:16:a5:99:9d:4a:8d:3a:ac:fe:b1:df:bf:11:70:
91:ee:fd:2e:b1:6a:58:de:c8:b9:7b:d2:7d:d0:23:ff:b1:a3:
c2:09:5f:6a:94:ac:fb:f8:ab:96:63:3f:4d:78:48:b8:50:30:
61:4d:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:44:20 2024 by rpki-client on console-ams.rpki-client.org