Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC5DE674904111EFAA21C644762E951A.roa
File: AC5DE674904111EFAA21C644762E951A.roa (raw, json)
Hash identifier: xuZAG7/kKAcEO30VY/kUufcDwdhCzo7CpWYnrNT3zxY=
Subject key identifier: A1:79:5B:4D:5E:59:D4:A5:DE:06:45:DA:53:49:BD:EC:17:9B:FE:B6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18A8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC5DE674904111EFAA21C644762E951A.roa
Signing time: Tue 22 Oct 2024 06:48:41 +0000
ROA not before: Tue 22 Oct 2024 06:48:37 +0000
ROA not after: Thu 22 Oct 2026 06:48:37 +0000
asID: 36352
IP address blocks: 154.16.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6312 (0x18a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 06:48:37 2024 GMT
Not After : Oct 22 06:48:37 2026 GMT
Subject: CN=67174ac9-154a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:c6:d2:3d:a2:c9:a9:5d:ff:29:f3:57:45:
15:57:ad:05:57:ee:80:10:3e:29:59:1b:b9:fe:c8:
63:d1:e2:88:5f:3a:b3:bc:66:f2:e5:74:68:3d:6a:
2e:db:1c:5e:02:72:f9:33:c9:71:0b:c6:c6:c1:0c:
98:fc:43:0e:82:57:8c:0e:b3:e3:0c:7b:dc:f2:0a:
a2:69:9f:2e:a3:23:20:bc:d8:71:09:46:5a:70:e9:
20:6e:ed:00:c3:39:23:8a:f3:e6:9d:26:5c:86:d3:
39:57:9c:75:31:5c:89:6e:b9:5e:04:0f:e5:df:d0:
82:86:22:b9:d6:75:87:bf:c2:fe:fa:76:55:e0:5b:
da:fe:7b:56:1a:15:d7:77:0d:09:30:a2:2e:e1:fc:
03:90:7e:2c:78:70:ab:05:72:d8:c4:3e:ac:27:4c:
ad:74:56:cc:f6:3f:c3:78:06:d7:04:a6:89:72:33:
75:e8:14:d6:77:0a:7f:77:6a:81:2d:14:31:37:36:
d5:ec:66:43:42:d3:f1:f5:1c:97:32:0b:c2:da:18:
34:42:bf:96:86:42:47:50:6c:b8:61:98:70:05:84:
5f:c4:75:78:33:7b:24:c9:97:50:10:cd:51:04:03:
df:62:3d:d8:b2:b4:39:b6:c7:30:8e:cb:99:f0:5f:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:5B:4D:5E:59:D4:A5:DE:06:45:DA:53:49:BD:EC:17:9B:FE:B6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC5DE674904111EFAA21C644762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.144.0/22
Signature Algorithm: sha256WithRSAEncryption
38:f9:94:cf:59:78:31:4b:b1:be:98:58:49:67:cf:1b:61:28:
5b:e3:cd:fe:69:7f:c5:d3:d7:fb:86:86:46:0f:b9:7b:fb:78:
d2:f1:01:cc:0e:48:86:fd:67:14:6a:06:ac:79:1c:ce:8d:31:
af:6f:76:0b:29:13:fc:e9:5b:f2:f3:cc:29:fe:95:c3:f7:23:
33:5d:d6:24:6e:f2:a9:a3:50:98:6d:92:0e:72:9f:90:64:ae:
67:70:fe:88:b1:4b:3a:52:5b:f5:26:4e:6d:2a:c4:e5:2e:41:
f9:f4:2e:08:77:71:d1:ad:07:90:4b:1c:7a:29:ca:95:8e:86:
b2:1d:5f:2e:b2:a1:cc:53:a9:bd:c0:e9:34:e2:4a:67:c8:12:
f4:ee:05:4d:67:11:6a:6f:dc:7b:b7:1e:04:4d:4b:8b:08:ec:
51:43:10:c8:6c:f1:a1:ee:cb:c7:ca:2b:30:35:ee:a7:d2:60:
96:cc:99:c5:71:73:ca:05:d1:b1:5e:30:20:2a:fa:90:87:04:
1b:e4:01:35:69:60:e1:85:37:f2:55:ee:b8:d9:18:13:17:cc:
85:8f:95:f6:32:d5:51:53:4d:db:0d:c8:c5:13:54:49:92:0d:
7e:97:75:d2:43:53:37:52:d8:4d:b4:fb:be:9b:2c:08:6d:f4:
47:9c:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:32 2024 by rpki-client on console-fra.rpki-client.org