Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC0BBD3CD69511EF8F81C28B762E951A.roa
File: AC0BBD3CD69511EF8F81C28B762E951A.roa (raw, json)
Hash identifier: Wk6IHFIVINNu99y4r+I3V6REKvl5///CoYTFYLoJRtw=
Subject key identifier: 1C:02:1F:CD:A7:D7:B9:DC:4E:4B:35:EC:63:AF:65:8B:71:02:D2:16
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19A3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC0BBD3CD69511EF8F81C28B762E951A.roa
Signing time: Sun 19 Jan 2025 18:46:20 +0000
ROA not before: Sun 19 Jan 2025 18:46:16 +0000
ROA not after: Tue 19 Jan 2027 18:46:16 +0000
asID: 29614
IP address blocks: 154.16.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6563 (0x19a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jan 19 18:46:16 2025 GMT
Not After : Jan 19 18:46:16 2027 GMT
Subject: CN=678d487c-6c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:56:eb:53:53:7d:89:c8:77:ed:09:9b:a0:
45:ba:fb:f0:9b:27:56:fb:e7:f5:35:cb:f3:f1:8c:
b9:29:2a:f6:53:5c:bb:c1:b8:17:31:dd:bf:5e:9a:
14:d3:a5:ee:f0:a1:cf:9c:a5:ad:33:2f:32:4b:45:
3f:aa:ee:50:a4:ff:d5:c9:c4:ff:b3:6a:93:a6:7c:
81:ca:19:06:61:89:6e:f1:6b:94:04:7d:77:44:9c:
ab:bb:22:21:32:8b:b0:8c:09:8b:e0:dc:0d:95:9f:
09:7f:e7:f9:bb:a1:07:b1:11:4b:d9:7b:47:dc:e3:
1b:f2:f4:b3:48:33:01:31:dc:03:fd:57:27:39:0c:
54:54:8c:ac:47:cb:be:94:ae:bf:4d:7a:56:04:c1:
42:01:8b:a1:93:8c:c7:80:27:f2:6f:21:98:62:80:
18:d0:66:05:c9:f3:10:f0:30:b0:ec:9d:a3:50:21:
29:cd:60:e6:5b:27:30:ea:dd:40:54:b0:db:d0:5e:
53:03:55:09:b0:ed:4b:15:a7:33:d9:02:32:2d:da:
c5:52:dd:7c:b7:81:2b:d8:c1:00:30:8f:72:02:ac:
55:f4:8c:ec:8e:e7:37:f5:85:6c:75:d4:71:a9:7c:
94:f8:49:e5:cd:f0:3a:74:8a:cf:88:be:c0:99:ff:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:1F:CD:A7:D7:B9:DC:4E:4B:35:EC:63:AF:65:8B:71:02:D2:16
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC0BBD3CD69511EF8F81C28B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.26.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:81:7c:19:37:46:ea:25:07:c3:97:25:9b:4b:db:a3:92:f6:
f2:1f:e0:12:69:71:ad:93:81:2b:d5:cf:98:1e:d8:c4:90:f1:
a1:13:bf:c5:55:fa:6b:4c:b7:c3:cb:58:4c:e6:08:67:49:de:
2f:92:7d:a8:24:0c:db:d2:e1:ce:d0:ed:25:b7:cf:bb:08:66:
14:d7:09:d9:dd:62:35:7b:23:36:53:0b:d3:64:14:e9:aa:3a:
30:30:ae:45:7e:b1:99:98:9e:ea:79:42:f3:4c:0d:e0:0e:46:
cd:73:3a:a6:c7:7b:49:3f:38:9d:be:67:24:7a:c1:fc:43:47:
36:3b:82:28:a9:07:5d:c4:e4:37:8e:94:a0:a1:87:8b:c0:5d:
75:8e:98:57:84:15:56:82:c1:ad:38:1e:61:d3:b3:da:a7:a2:
55:c0:49:53:b0:f9:63:e5:cc:8f:85:90:fd:f4:ea:2d:15:72:
61:a6:fd:7f:40:e3:e4:93:ab:c1:fe:74:e7:e6:58:a3:75:59:
4d:58:04:a3:5d:ea:60:f0:0b:7f:8c:7b:97:23:e7:6d:79:17:
02:6e:d4:c2:48:96:8a:d6:fe:3f:f8:07:54:99:d8:78:65:40:
96:5c:27:54:a1:87:6c:27:35:c3:2f:84:f9:43:a1:a8:58:21:
52:92:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:50:33 2025 by rpki-client