Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3DE9D08A64E11EFBEFBC453762E951A.roa
File: B3DE9D08A64E11EFBEFBC453762E951A.roa (raw, json)
Hash identifier: CmDvK9oFswi9fhtZEjk50/pntF3AxK+IO4fzKmGU4UQ=
Subject key identifier: 8B:3D:86:F8:26:44:5F:2F:EA:8B:A8:93:5A:8B:BD:8A:10:B1:B4:14
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18EA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3DE9D08A64E11EFBEFBC453762E951A.roa
Signing time: Tue 19 Nov 2024 08:17:23 +0000
ROA not before: Tue 19 Nov 2024 08:17:19 +0000
ROA not after: Thu 19 Nov 2026 08:17:19 +0000
asID: 61317
IP address blocks: 154.16.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6378 (0x18ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 19 08:17:19 2024 GMT
Not After : Nov 19 08:17:19 2026 GMT
Subject: CN=673c4993-f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:5f:db:e2:66:14:1f:6e:28:93:59:ae:a0:
97:e0:36:64:5d:37:31:5b:71:c6:66:fa:7f:16:63:
c1:37:fd:ca:18:f6:58:be:44:be:db:89:2b:f4:44:
8d:c5:d5:80:51:6e:16:e1:0a:82:53:13:1b:45:c2:
4a:3b:b6:87:51:75:28:81:ac:0c:3e:a7:bf:46:d5:
e6:9f:ff:64:d2:b7:b3:de:92:e8:46:8f:f3:fc:96:
72:e0:1f:4e:47:17:b4:2f:12:18:0e:2f:12:ef:29:
df:0e:b9:4a:46:dd:e4:b9:af:a5:50:1a:13:98:6c:
90:14:87:a4:4a:95:6f:d1:e6:bb:17:55:0f:88:de:
f9:bc:91:4a:a6:64:5c:46:32:e5:66:0f:44:23:b4:
db:dd:2e:cc:44:b5:6e:74:f8:ad:b5:4e:fb:1b:d3:
13:c9:8d:d6:f7:f2:cc:67:79:f0:30:e7:a1:84:97:
e4:99:c3:df:9b:0f:65:a6:2b:9e:f0:57:c4:1b:89:
9f:79:8a:b6:84:4f:ca:3f:cf:ef:2e:a1:c3:82:07:
27:92:c3:20:36:a0:c1:c2:32:1d:3f:fb:56:75:7f:
96:8d:85:07:b9:63:88:4e:3e:27:2d:e8:4d:da:37:
cf:eb:09:84:66:75:f9:1e:44:81:b4:45:8f:cc:ca:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:86:F8:26:44:5F:2F:EA:8B:A8:93:5A:8B:BD:8A:10:B1:B4:14
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3DE9D08A64E11EFBEFBC453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e9:2e:2e:10:6a:23:21:85:5a:c6:36:03:cd:66:78:09:82:
e7:e3:9c:fc:4b:15:f3:4d:39:d8:4d:c4:6b:5f:35:12:bb:d7:
2b:92:25:f2:fa:57:da:4e:cb:29:ce:e0:e8:28:4d:3f:b4:12:
41:3c:b5:2f:b5:7e:41:e4:c4:9c:5d:dd:0f:1f:67:ab:29:c8:
38:f3:40:d1:dd:e1:9c:34:ea:6b:ea:cf:9f:72:67:a1:f8:6e:
6b:0a:f1:6e:54:17:c0:99:11:cb:49:6b:05:40:82:dd:cc:64:
fd:d5:98:91:77:90:58:be:e7:d2:2a:48:69:9a:93:db:3c:0f:
1f:a2:73:66:62:82:31:fe:dc:9e:33:fb:dd:b4:e6:64:84:a5:
07:e6:d7:d2:9c:f9:4a:fc:06:43:1a:50:c8:47:12:f5:eb:22:
b9:e0:05:44:58:49:8e:c5:14:fe:37:db:2e:18:f8:00:cf:67:
0f:ba:6d:35:d2:ff:ea:b2:12:93:a7:ae:56:90:93:db:78:27:
c2:ac:df:39:10:98:bf:f3:d9:29:bf:dc:a6:df:f1:ad:5f:da:
be:55:01:4c:ae:8a:bd:ed:f7:c2:95:58:f0:c4:a0:50:6d:7a:
e6:08:07:1a:5a:3c:5b:0e:ee:b1:02:88:ea:a6:8e:3e:b7:e1:
13:f0:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org