Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AB90AFE6904211EF99CD2E4D762E951A.roa
File: AB90AFE6904211EF99CD2E4D762E951A.roa (raw, json)
Hash identifier: ywFOmqRwuYyOmviwiTxKUKjHI2F110Bp2BTdwLW5vxk=
Subject key identifier: 31:71:B8:DB:54:C6:EB:05:4C:DF:CE:A0:32:5F:CE:88:68:1F:EA:BB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18AB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AB90AFE6904211EF99CD2E4D762E951A.roa
Signing time: Tue 22 Oct 2024 06:55:49 +0000
ROA not before: Tue 22 Oct 2024 06:55:45 +0000
ROA not after: Thu 22 Oct 2026 06:55:45 +0000
asID: 212238
IP address blocks: 154.16.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6315 (0x18ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 06:55:45 2024 GMT
Not After : Oct 22 06:55:45 2026 GMT
Subject: CN=67174c75-b5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:36:5f:20:09:a1:03:bb:57:8d:fe:fb:ea:6d:
24:e0:61:7c:f9:57:2e:d7:a9:cc:4e:b8:2e:d2:57:
6b:e6:16:1c:73:7d:77:15:01:a6:f8:67:6d:31:73:
88:d6:74:c7:82:2c:fe:8a:96:e6:82:f2:f3:83:66:
e7:b6:04:0e:32:5f:fc:80:c5:88:7e:2d:79:c5:3b:
a0:94:e2:ed:23:51:ce:6c:e9:7e:f7:e2:74:09:61:
f1:52:e8:96:09:0e:0f:89:16:f3:ac:17:17:ce:bb:
76:2f:8c:a6:55:91:ba:44:87:c6:b6:8f:17:95:ed:
7f:af:cb:dd:0e:9f:1e:87:e8:3f:83:f4:95:64:88:
e9:3e:3c:c8:96:c0:de:f4:81:0a:1e:ff:ef:5e:14:
3a:50:3b:d4:9f:9a:ac:a4:f0:bd:41:ac:3e:24:87:
e6:26:2b:fb:22:7b:0b:fb:a5:ed:4f:4d:f4:20:c9:
90:6e:48:f2:83:c1:e0:d4:2a:d9:fb:3e:0c:41:24:
00:8f:14:70:8f:1d:00:16:cf:1d:2e:8c:10:70:a2:
2d:de:3d:27:f7:80:a2:b2:48:f9:23:1f:27:ee:f5:
64:36:19:56:0a:63:59:ec:a9:3e:0f:48:ca:0d:88:
37:b6:27:81:96:8e:2a:5d:5d:b2:62:f6:94:f8:b9:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:B8:DB:54:C6:EB:05:4C:DF:CE:A0:32:5F:CE:88:68:1F:EA:BB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AB90AFE6904211EF99CD2E4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a5:15:14:5b:85:d2:8b:e9:84:cb:cf:05:14:10:25:74:07:
c1:a5:6a:59:42:ac:87:2d:2b:02:d9:80:1e:97:cb:ba:29:eb:
46:a1:97:5a:39:7b:c2:d0:2d:28:32:4e:ee:39:51:ba:44:45:
b1:d0:42:58:6f:26:a3:8f:a9:53:14:82:75:3e:5c:e2:60:07:
c2:0b:14:07:30:2b:b1:f1:84:88:f5:95:a4:6b:84:2d:f9:b6:
dd:ca:ff:c2:59:d7:2d:c0:07:f1:63:cf:2a:c5:03:6c:1d:43:
26:19:b1:d9:8d:d7:64:52:b5:1f:c6:44:c8:c1:ce:7b:38:8b:
76:15:4b:f0:a7:f8:01:59:f3:1b:ff:12:1b:e5:b0:21:04:76:
7c:09:de:c6:d5:c1:39:d3:ce:c2:43:13:cb:1d:0d:ba:dd:ec:
69:18:74:a0:32:e9:08:e6:71:55:ef:c8:a9:e5:92:50:7d:38:
37:1e:a2:a1:ed:4f:07:71:cd:84:86:d1:ea:49:b9:b5:85:8b:
9f:92:11:48:f3:9e:79:66:cb:ce:4f:bb:6b:de:a5:f2:d2:60:
9b:12:86:b3:c6:2b:4d:c8:fa:7d:7e:cb:51:9b:8b:00:d2:16:
01:a8:5e:bb:2b:a3:d9:e2:59:dd:63:05:30:77:0c:8c:8b:15:
de:b8:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org