Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEB4F442434F11EF885B0D84762E951A.roa
File: AEB4F442434F11EF885B0D84762E951A.roa (raw, json)
Hash identifier: DubSL0lvUk8MmC7Q8N/fLsFj7wft/y+4s++0qlMQtQY=
Subject key identifier: 6A:C0:51:15:C1:4E:E3:4D:42:13:43:63:9E:7D:0C:EE:BB:F1:31:21
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 173D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEB4F442434F11EF885B0D84762E951A.roa
Signing time: Tue 16 Jul 2024 08:44:58 +0000
ROA not before: Tue 16 Jul 2024 08:44:55 +0000
ROA not after: Thu 16 Jul 2026 08:44:55 +0000
asID: 46337
IP address blocks: 154.16.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5949 (0x173d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jul 16 08:44:55 2024 GMT
Not After : Jul 16 08:44:55 2026 GMT
Subject: CN=6696330a-4797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:4a:76:a6:d4:31:b9:00:21:6d:4f:15:45:
7a:05:9b:f7:6a:92:bf:6b:6e:9e:83:d5:59:e7:76:
08:55:fc:36:8d:6c:f5:73:69:ee:fb:b4:60:ac:c2:
ca:5f:44:33:92:e6:89:21:b8:e1:5c:7f:1f:98:97:
3b:ea:2a:e8:f0:99:4f:84:a6:bd:7e:f2:2f:40:16:
17:2d:45:5d:42:ad:22:37:be:75:a6:14:b5:38:54:
39:75:9d:68:85:72:99:02:fc:40:bc:0e:cd:ab:48:
36:f1:d6:90:de:8a:a6:fa:7c:6f:ef:ed:fb:b7:a4:
96:55:4d:4b:c3:91:3f:e2:74:71:ae:c8:dc:d5:6a:
bc:45:18:d3:57:a6:54:41:1d:fc:98:10:45:c4:b2:
a0:51:be:0e:82:4a:a7:66:db:59:b6:10:68:e9:95:
45:cc:10:dc:a7:71:13:ff:a8:18:0f:e4:da:a7:72:
29:80:0a:c4:dc:e1:32:2f:a0:40:b9:00:4f:df:e6:
a5:e8:ef:d1:35:2d:b0:09:cd:f5:30:f0:1b:d9:c2:
c7:b7:88:33:1a:94:72:ae:fe:69:e7:ce:f5:c7:18:
57:cc:c6:25:55:b9:dd:d9:31:e1:96:2b:3d:b6:5a:
96:ec:08:ca:60:a3:5b:5b:e2:ff:31:f6:51:07:14:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:51:15:C1:4E:E3:4D:42:13:43:63:9E:7D:0C:EE:BB:F1:31:21
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEB4F442434F11EF885B0D84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:6b:ba:2b:f7:e9:f9:dd:25:07:91:4f:c2:ac:60:2c:23:11:
a2:2c:d5:ba:ff:31:fa:8d:8f:e2:62:07:d5:c6:f3:dc:99:7e:
b5:13:29:c6:b8:6e:d7:db:0f:c4:26:f0:67:2e:77:3b:f4:aa:
28:a3:a5:8a:02:9f:82:96:5e:0d:1b:b0:ca:ad:50:f9:73:f7:
e4:d8:a9:8a:16:78:c7:0a:30:42:1c:27:e5:67:bb:d7:e2:1f:
74:db:b3:6a:ed:5f:d6:d2:a0:dc:83:4a:4f:23:be:22:4a:79:
12:d5:85:45:1e:cb:b8:3b:04:02:8f:7a:af:a7:cf:04:64:98:
d8:71:e6:59:dd:37:a2:c2:ea:3b:84:7d:5e:d5:3c:20:45:c1:
9d:7d:93:ec:63:5a:2e:53:09:ce:3f:d0:80:69:c7:b0:70:fa:
71:91:b0:24:ef:79:b6:55:e2:14:c3:ed:5f:5f:6a:2e:6e:29:
b4:0e:9a:34:4c:2f:c7:be:11:3f:66:d7:cf:ce:55:13:76:e4:
03:d5:93:39:2b:ac:a4:8d:b7:7b:ae:8a:d3:22:e3:ef:65:6f:
37:2c:68:d3:e3:53:8c:37:b0:68:3d:c4:c3:2a:40:07:c6:b2:
18:dd:55:71:34:6d:d0:2b:78:fe:3f:85:c2:d8:25:9b:74:d4:
a8:af:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:50 2025 by rpki-client