Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3D8D80AB43811ED946D999CF1222468.roa
File: B3D8D80AB43811ED946D999CF1222468.roa (raw, json)
Hash identifier: cQkzLISBSD7Wp5TAOlDmRWIbMGd+S4DLLj7Zx8Ju//o=
Subject key identifier: 05:CB:89:C5:CB:9A:FA:2C:9F:CB:9A:47:95:F3:BD:23:D2:E6:D4:37
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BE3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3D8D80AB43811ED946D999CF1222468.roa
Signing time: Fri 24 Feb 2023 11:45:15 +0000
ROA not before: Fri 24 Feb 2023 11:45:11 +0000
ROA not after: Sat 22 Feb 2025 11:45:11 +0000
asID: 61317
IP address blocks: 154.16.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3043 (0xbe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:45:11 2023 GMT
Not After : Feb 22 11:45:11 2025 GMT
Subject: CN=63f8a34b-dd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:db:fe:df:be:91:a3:4e:cb:f6:c6:dd:1e:
a5:25:ed:26:50:c1:84:07:69:67:bb:c1:f5:6c:ba:
7b:33:8c:f9:ad:c6:44:32:75:7a:68:ec:0e:53:ed:
73:4c:63:27:82:d2:0a:7a:8e:0c:2b:6a:87:b2:d6:
3a:ed:11:1d:66:df:b1:b1:89:39:43:80:5e:e9:13:
80:78:7d:5f:a8:0d:23:50:80:4e:1c:da:c4:e9:1a:
93:ed:cc:ed:91:e8:92:8f:40:0a:e6:21:5c:76:16:
96:8d:7c:4a:06:f2:64:bf:91:57:99:6e:02:7b:61:
d7:61:49:fb:26:7a:8e:e9:eb:10:7e:72:c0:ca:63:
c5:ac:6b:be:90:4a:46:61:2f:6c:62:da:33:fa:71:
3f:27:9e:ee:bc:34:a7:3d:03:e5:b3:23:f0:c1:dd:
be:48:4f:ef:5e:4d:5a:f9:6a:de:b1:38:04:b8:c0:
0e:c2:e9:30:a4:0e:b8:b5:d5:97:4e:4f:e5:e5:11:
3f:07:fe:3d:81:1c:a4:a9:0c:ec:6b:f5:5c:6c:72:
76:3c:99:66:5f:13:30:a2:f3:ba:f8:82:c1:72:70:
97:14:08:91:2c:5a:07:3d:81:80:5f:52:0e:98:e9:
0c:ab:68:f8:2d:30:75:e7:ef:9d:e2:c4:ad:b9:8f:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:89:C5:CB:9A:FA:2C:9F:CB:9A:47:95:F3:BD:23:D2:E6:D4:37
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3D8D80AB43811ED946D999CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:35:2f:af:da:9f:9f:c7:e1:0e:08:34:f1:a9:0e:bf:23:9b:
83:c4:44:8f:9e:20:f6:fd:e5:1e:0a:5c:02:2b:17:10:9c:37:
cf:6e:96:4e:60:2b:9a:5b:98:ae:45:33:69:b1:99:da:ab:bd:
b0:8f:1c:5b:2a:24:d4:a9:57:8f:dd:46:90:2a:55:62:e6:6f:
7a:4f:49:62:a9:ca:dd:9a:f7:8c:27:f8:73:cc:de:e5:57:ce:
3c:ec:e9:04:44:d8:eb:1e:5d:0a:1b:ae:ed:cc:f7:51:47:db:
16:c5:6e:a0:fa:10:4f:7d:b0:42:b5:b7:cf:f6:29:68:c9:6e:
88:be:7e:ff:43:87:23:eb:91:b2:19:dc:2d:1b:97:c1:9c:c9:
b4:85:50:08:08:84:2b:72:eb:5a:01:ed:e0:96:68:c3:89:6a:
9d:cf:ff:0e:15:ed:10:e2:8e:00:da:4f:28:0b:76:9a:f8:08:
0b:0e:2c:3f:41:6b:66:65:99:2a:ee:d1:75:be:7c:37:21:dc:
7a:d4:10:bb:cb:97:fc:20:f5:1c:65:1b:2c:10:e8:02:12:a2:
83:50:f0:b0:10:a8:e3:5a:68:92:d1:2e:86:b1:64:a0:53:b7:
d5:1a:27:e5:99:c4:29:4e:46:b8:e2:46:08:14:91:a8:6e:7b:
23:58:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:25:29 2024 by rpki-client on console-fra.rpki-client.org