Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B6C9C69E0EB611EFB5A0104F017001B1.roa
File: B6C9C69E0EB611EFB5A0104F017001B1.roa (raw, json)
Hash identifier: 7enUIfY0Wg8j4s04b4NcvkNn3zz8VIT2IQt7I8u81Is=
Subject key identifier: E7:CB:28:44:DF:20:0B:46:C5:F6:34:79:E6:CD:B3:4F:C0:5B:E2:DF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1640
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B6C9C69E0EB611EFB5A0104F017001B1.roa
Signing time: Fri 10 May 2024 10:18:58 +0000
ROA not before: Fri 10 May 2024 10:18:55 +0000
ROA not after: Sat 09 May 2026 10:18:55 +0000
asID: 834
IP address blocks: 154.16.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5696 (0x1640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 10 10:18:55 2024 GMT
Not After : May 9 10:18:55 2026 GMT
Subject: CN=663df492-966c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:04:08:6f:55:e1:7a:4f:e3:7f:ec:f5:cc:
18:71:45:09:51:ae:44:4d:c5:19:9b:d3:e1:24:63:
6d:7f:0b:63:4c:0b:0d:85:ca:37:8a:b2:b4:63:3c:
b0:b8:29:bc:39:59:28:01:79:9b:c2:c6:eb:88:fe:
dd:22:4b:af:fe:69:c6:a8:22:a0:59:cc:cb:8c:83:
39:9b:d7:ab:4a:44:df:91:9f:18:00:56:8c:89:c6:
5c:c5:71:99:f1:41:fd:a2:ac:f9:8b:c9:6c:50:6d:
7b:a0:2e:4a:af:f1:f3:1f:37:61:ce:15:d7:21:01:
52:1c:59:d8:36:96:20:7e:2a:8e:89:9a:9a:01:57:
ee:5d:25:35:ec:54:70:56:f8:ea:3d:08:5d:05:47:
27:5c:a0:3d:f2:37:8c:5e:32:63:b4:8f:f4:e6:0c:
f5:54:8a:15:40:ae:5f:e3:cc:bd:25:ba:4c:d1:07:
d2:8d:6b:47:7e:ac:1c:ba:fa:3c:82:3e:26:a4:b7:
be:45:84:bc:df:cf:ce:82:d7:82:74:ef:5f:76:f8:
be:03:06:85:02:f2:a5:1d:8b:2f:3b:1a:73:6a:f8:
a8:60:bd:67:82:69:33:1c:05:e8:da:ff:1f:0d:3a:
72:47:50:32:7e:b7:1a:9c:e8:f0:e2:74:21:19:46:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CB:28:44:DF:20:0B:46:C5:F6:34:79:E6:CD:B3:4F:C0:5B:E2:DF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B6C9C69E0EB611EFB5A0104F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.181.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ae:b8:12:50:ed:0d:21:72:84:ea:e8:8c:7c:95:df:f1:90:
46:74:89:00:b7:d3:d7:5a:24:16:e8:ce:42:09:14:10:e0:1e:
81:80:5d:74:68:f8:d3:9d:7a:64:0c:8f:ac:58:8e:65:40:19:
78:a8:74:03:58:9e:90:47:42:26:d7:97:c4:2f:d7:53:18:1b:
4c:92:4d:ea:ed:b8:28:ba:fe:b2:fe:5b:6c:d3:dd:bd:bc:3b:
92:6c:7b:c3:68:78:c8:ee:3d:69:42:70:7b:2f:c9:80:e6:62:
8f:36:eb:6e:d8:c0:df:4e:80:d4:6c:db:78:7f:bb:4a:cd:66:
f3:48:e8:43:4b:b3:4e:78:44:c0:d0:3e:7b:b4:7d:a4:72:3e:
f5:14:1b:a1:51:e1:20:36:dc:95:79:e2:de:4c:4f:23:29:b5:
b8:6c:05:6b:85:9f:85:b9:49:fb:bf:42:f1:5f:fa:75:60:cd:
cc:cf:db:7e:85:e8:49:82:8d:12:97:42:65:0f:e0:35:4c:37:
13:14:2b:ed:05:c3:20:5f:e8:1a:65:d7:ee:de:27:e2:1f:54:
e9:8d:3a:1d:34:5c:c2:c7:aa:f5:7b:a8:a8:ab:85:72:ba:eb:
b2:c0:36:0c:80:e2:7c:14:31:bc:b4:39:12:4c:7a:54:b2:55:
dc:be:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:56 2024 by rpki-client on console-fra.rpki-client.org