Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B185AC589DDF11EFAA1F3A96762E951A.roa
File: B185AC589DDF11EFAA1F3A96762E951A.roa (raw, json)
Hash identifier: HY47Vzt/szSBD8a+HNv6X3NzlsoinzQqMqiRU3Rvr8Q=
Subject key identifier: 59:C2:4F:5D:75:C7:32:41:52:68:0F:00:21:5F:DC:0A:1C:11:AA:AF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18D5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B185AC589DDF11EFAA1F3A96762E951A.roa
Signing time: Fri 08 Nov 2024 14:42:35 +0000
ROA not before: Fri 08 Nov 2024 14:42:32 +0000
ROA not after: Sat 07 Nov 2026 14:42:32 +0000
asID: 212384
IP address blocks: 154.16.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6357 (0x18d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 8 14:42:32 2024 GMT
Not After : Nov 7 14:42:32 2026 GMT
Subject: CN=672e235b-211a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:59:94:b2:c1:e4:60:44:c5:a2:d9:c6:7b:
76:66:fc:b8:db:2f:a0:d3:86:55:e3:a2:57:7d:69:
dd:25:be:fd:d2:b7:9d:48:ad:17:f0:c2:a8:93:95:
34:eb:64:6a:f3:62:b5:e5:bf:52:f4:8c:b6:26:d2:
90:85:6d:88:d2:fe:f1:19:d8:23:4e:06:52:bd:82:
3c:ad:c0:5b:e7:79:f7:fd:c6:30:e4:e6:9c:f8:cd:
ca:f0:66:83:7f:00:30:ba:eb:8f:e8:b0:d8:71:d0:
a6:9b:6d:13:c5:68:f3:e4:ad:11:ec:cf:cd:59:2a:
42:a2:c2:37:57:7b:10:a9:fc:db:ee:e9:aa:b9:dc:
c0:17:87:7f:8b:6e:69:14:dc:ef:9a:5c:27:9c:89:
0f:6f:c0:5f:17:17:44:ed:87:2d:0f:8e:76:e2:74:
64:b2:47:93:dd:29:0c:f2:8c:4d:ed:16:b9:67:a5:
33:68:de:cb:60:ba:a7:ea:70:0d:fb:7c:16:1e:56:
9f:f7:51:9b:2f:73:12:b9:04:3a:37:af:c7:95:ba:
2e:e3:f2:9f:62:f8:5e:8b:7a:b7:d3:06:65:54:23:
9c:cd:43:8e:e7:79:00:ba:2e:bf:b7:6a:b0:68:d8:
22:56:85:4b:a0:0b:88:6b:26:98:b0:6d:08:55:db:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:4F:5D:75:C7:32:41:52:68:0F:00:21:5F:DC:0A:1C:11:AA:AF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B185AC589DDF11EFAA1F3A96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.88.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6a:76:0f:17:95:6e:16:6a:fb:73:28:44:e5:7d:ed:00:d9:
83:69:ad:a3:62:78:1d:a6:59:cf:72:6a:33:a3:6c:85:d6:5b:
94:7e:53:5c:ec:42:a9:60:c9:27:ca:0c:4e:7f:24:e4:67:2e:
84:91:5d:56:a1:56:e0:88:1b:d9:af:09:fe:66:4a:0b:d8:50:
ee:03:10:ef:a5:96:15:8c:be:9b:df:61:3a:7c:f8:48:bf:4e:
88:d2:54:17:1f:13:d2:78:27:76:83:21:7d:a9:bc:74:cd:ee:
b4:f7:db:de:c0:4a:2e:6c:02:9e:2a:0e:04:b6:6a:98:ad:a1:
ab:7b:5d:17:c5:58:63:ca:ac:61:35:e3:04:8c:3c:29:e3:0e:
ae:f0:16:20:4b:58:31:aa:0b:5c:96:e9:1c:39:59:0c:41:a8:
62:16:81:58:21:22:8a:19:25:a9:72:b8:a8:63:be:2e:6d:09:
a2:b5:03:88:ec:d1:a9:36:d5:1f:53:40:42:be:21:16:a2:b4:
54:b9:55:97:5d:e4:44:f2:d0:54:bf:f9:30:16:c2:0c:c7:4a:
fb:14:05:9c:52:cc:99:d4:3c:3a:22:34:2a:e4:57:07:aa:f4:
81:70:06:8b:f9:59:84:3f:d8:2f:04:4e:6d:2a:00:7a:2d:d9:
41:5c:db:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:27 2024 by rpki-client on console-ams.rpki-client.org