Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3AEFA46FCE711EE957EC720017001B1.roa
File: B3AEFA46FCE711EE957EC720017001B1.roa (raw, json)
Hash identifier: 1ogQN4prIrTdS1DnJnHjAQWlAmEPGSZ0LvYTwLFq8WI=
Subject key identifier: C2:DE:2D:79:0C:02:0B:8B:CB:F5:92:C4:0A:70:E5:86:F9:54:C9:BA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 15D7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3AEFA46FCE711EE957EC720017001B1.roa
Signing time: Wed 17 Apr 2024 18:24:18 +0000
ROA not before: Wed 17 Apr 2024 18:24:14 +0000
ROA not after: Sat 18 Apr 2026 18:24:14 +0000
asID: 29802
IP address blocks: 154.16.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5591 (0x15d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 17 18:24:14 2024 GMT
Not After : Apr 18 18:24:14 2026 GMT
Subject: CN=662013d2-74c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:0a:28:15:6e:ff:89:8b:c5:91:8e:5f:01:
a8:c4:66:60:06:fd:81:02:8a:f5:9e:39:69:de:cb:
7d:d7:00:1b:4c:7c:ce:50:7f:c2:19:09:d5:fd:cc:
e9:05:6a:c0:65:83:50:73:67:84:32:92:e3:46:11:
37:9e:59:34:38:70:21:51:5c:63:08:17:89:1d:07:
a9:1e:5e:d0:b6:9d:52:af:ca:18:04:8f:16:a2:35:
65:8f:01:b9:78:c8:28:c2:33:08:ba:c1:5d:b9:78:
e9:04:57:43:e7:ca:04:0b:01:2b:f6:16:8c:39:c6:
45:60:35:de:c5:6f:39:6a:a6:01:d4:64:66:e9:d0:
4e:98:4a:c4:06:bf:bc:05:e6:b1:e2:dd:f5:e8:d7:
63:13:5f:6c:c0:43:67:ef:d2:06:a6:d8:3e:49:7a:
50:0e:0b:a4:c5:ba:83:fc:85:da:5a:8e:d5:b5:7a:
9e:63:31:5a:08:f9:c9:a2:80:73:bc:25:3e:4d:85:
75:63:84:6e:fb:d4:a6:59:8b:93:cc:c8:9d:3e:fa:
5e:8b:ef:bf:a9:73:fe:89:80:35:b9:3a:9d:7f:87:
bb:e7:48:3e:ba:36:06:1e:4e:4d:12:7d:06:42:57:
16:3a:cd:af:67:b5:7d:d7:89:a0:5a:34:74:bd:46:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:2D:79:0C:02:0B:8B:CB:F5:92:C4:0A:70:E5:86:F9:54:C9:BA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3AEFA46FCE711EE957EC720017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.234.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9b:84:ee:d7:49:97:51:a7:a7:5a:32:47:4d:8e:be:00:d4:
99:87:2e:c9:61:bb:e9:64:cc:9e:90:3d:ed:9f:e1:82:34:19:
e8:24:64:a3:25:b7:48:3d:62:72:c2:a4:e7:a0:66:07:89:f4:
5d:13:df:26:f5:b2:b0:b7:f7:ef:a9:c1:ae:fa:a6:07:90:04:
7c:68:6e:ac:10:33:90:e5:83:1e:8a:93:c4:f7:0d:93:20:e6:
1d:26:a6:f7:85:1a:b1:86:4a:9b:50:b1:7f:95:d7:b0:24:d9:
97:0e:5e:2c:c3:a6:5e:75:e3:14:50:ae:e1:2d:ad:d1:2d:0b:
6e:39:87:93:d5:4b:31:ac:e7:57:6b:23:1d:8d:69:18:7d:b9:
93:70:c2:76:ef:6c:9f:46:b9:3c:51:55:72:b4:27:51:e7:42:
38:5b:bb:b5:5d:77:16:68:8d:27:29:a3:f8:a9:f1:1e:86:4e:
e6:8b:51:d8:68:a0:a9:a1:98:d4:81:56:c3:c2:5f:0f:88:00:
b7:9f:5e:4d:ad:aa:34:49:44:41:10:d2:44:00:a1:8e:e1:0c:
31:85:ca:40:4c:ce:59:fb:15:21:97:f9:5d:40:aa:fd:9e:75:
cd:55:7f:87:21:b3:4e:5a:2c:63:ce:6f:b2:09:87:6a:4f:68:
56:0c:84:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:12 2024 by rpki-client on console-ams.rpki-client.org