Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8FADC3829FB11EDA8018FB2F1222468.roa
File: B8FADC3829FB11EDA8018FB2F1222468.roa (raw, json)
Hash identifier: JahjzCMVJBigkqmW7qreMuIXAqkD6W3TVV6MNTky3ko=
Subject key identifier: 46:A4:98:20:7D:E4:34:11:F1:55:A9:6E:6D:79:8C:BA:29:EC:40:9D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0965
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8FADC3829FB11EDA8018FB2F1222468.roa
Signing time: Thu 01 Sep 2022 13:41:04 +0000
ROA not before: Thu 01 Sep 2022 13:40:57 +0000
ROA not after: Wed 04 Sep 2024 13:40:57 +0000
asID: 209181
IP address blocks: 154.16.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 May 2024 00:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2405 (0x965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 1 13:40:57 2022 GMT
Not After : Sep 4 13:40:57 2024 GMT
Subject: CN=6310b66f-50d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:96:60:e9:15:38:9a:a9:ad:e2:e3:57:88:
be:e4:6d:de:b0:72:19:2e:ab:98:c0:d2:77:d2:e8:
e9:f5:c0:9c:5b:6e:96:7f:c3:db:ca:ef:c8:9c:a5:
bf:65:07:f3:5b:26:24:48:b6:2a:26:83:50:b8:5a:
f7:af:61:14:a7:20:87:a2:80:e6:3e:b8:ec:2a:47:
20:66:3b:1a:a0:21:31:f7:bb:43:81:cb:50:2d:6e:
32:d3:0d:0e:2a:69:38:1f:02:db:e4:f8:d0:14:25:
e7:1b:05:1f:e6:a8:81:c9:9a:51:7d:d3:2a:13:e5:
79:ea:66:89:5f:ff:40:d6:da:b1:24:f2:cf:23:44:
9c:ae:7a:75:be:10:ba:df:03:8b:2a:c6:fd:73:a1:
e7:6e:15:6c:5c:00:39:a0:dc:b0:f4:f1:87:4c:8c:
c1:c5:82:f4:5a:14:89:f0:d9:8d:5a:70:ca:37:1e:
7d:fb:cd:84:cf:e6:90:c3:76:09:b7:da:db:e2:13:
4e:b1:49:ea:30:d6:93:aa:be:0d:89:ad:64:13:c5:
fe:b0:71:1e:70:79:10:ec:fa:a3:12:fe:8d:61:c9:
ac:16:be:2d:8b:eb:19:60:de:24:35:12:fd:dd:64:
c3:d4:26:df:02:39:bf:55:fe:a7:93:33:1d:52:02:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A4:98:20:7D:E4:34:11:F1:55:A9:6E:6D:79:8C:BA:29:EC:40:9D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8FADC3829FB11EDA8018FB2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.143.0/24
Signature Algorithm: sha256WithRSAEncryption
46:21:cf:87:25:a7:1c:b3:db:15:2b:ca:44:cc:80:eb:b9:0f:
56:be:3d:e6:ae:60:6d:5a:74:2e:46:81:ab:82:e9:d4:d9:2e:
ef:33:14:ad:65:10:40:a0:d5:eb:a4:3a:61:2e:2e:93:04:78:
72:61:b7:d5:66:03:d2:76:28:df:b1:dc:89:97:34:ba:bb:0d:
4d:22:93:bc:39:4a:86:52:e9:8e:de:07:bb:94:00:9a:c0:5f:
75:ab:27:ad:49:79:4e:49:81:76:0d:8c:8d:ad:4a:a7:14:59:
d5:8b:58:11:f2:00:19:17:a7:7c:b2:90:f8:4a:6c:6a:82:61:
dc:1d:97:bf:66:6f:75:58:2d:9c:f2:41:6f:2e:d1:70:24:d5:
d6:5b:14:54:0f:f6:0d:b3:18:41:78:e0:35:e7:5d:21:af:fa:
ea:c8:56:7b:e4:83:6c:0e:f7:df:f3:22:6c:79:e6:9e:ca:d7:
40:83:6a:db:e9:2d:8f:0a:8b:dd:b0:3d:2e:5a:01:eb:01:c7:
e4:4c:09:b7:9e:6c:7f:53:67:51:29:52:6f:48:11:36:e3:cb:
82:f4:38:1e:4a:be:8d:15:0d:11:c8:06:19:e6:34:b4:41:43:
5a:e1:b2:5d:28:cb:4f:e2:fc:f6:93:88:56:53:f4:83:5b:df:
aa:ca:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:38:32 2024 by rpki-client on console-fra.rpki-client.org