Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D68BD4E86811EE83438C9F775412E6.roa
File: B9D68BD4E86811EE83438C9F775412E6.roa (raw, json)
Hash identifier: 07D4wGjhW+gxXVIa/Lge2HxCW7Dc7At9QyRnMgjyqA4=
Subject key identifier: F0:8F:E1:09:64:3D:E9:24:60:D1:BF:4A:0B:70:40:A5:4B:E4:24:AF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 156D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D68BD4E86811EE83438C9F775412E6.roa
Signing time: Fri 22 Mar 2024 16:24:59 +0000
ROA not before: Fri 22 Mar 2024 16:24:55 +0000
ROA not after: Sun 22 Mar 2026 16:24:55 +0000
asID: 29802
IP address blocks: 154.16.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5485 (0x156d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 22 16:24:55 2024 GMT
Not After : Mar 22 16:24:55 2026 GMT
Subject: CN=65fdb0db-3449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:24:50:e7:f8:29:2c:ba:67:2e:45:2d:7d:
a6:31:39:21:e6:25:18:7d:00:6e:74:d8:09:c6:97:
2c:65:44:83:02:da:2b:9e:d4:2c:af:e3:13:6b:08:
90:45:9e:27:18:6c:13:f9:0b:db:48:ad:ae:88:68:
85:b0:2f:d4:be:61:44:53:f5:83:af:eb:ae:57:9a:
90:b1:22:f9:0f:0d:21:5d:75:ce:1c:ac:0e:6c:91:
57:25:c6:5e:95:b1:f7:38:e6:69:1b:e0:56:4d:ec:
10:e8:ea:0f:4e:9b:40:c3:b4:a4:e9:b7:aa:37:f1:
82:de:f2:65:b1:33:27:f9:89:f4:78:aa:cf:cf:8d:
6a:18:03:8c:48:00:ea:4c:e6:f8:31:39:62:ec:0b:
56:14:c8:c8:35:4b:69:7e:8a:8f:70:55:e1:9a:00:
e6:d2:17:3a:97:34:22:ae:e2:9c:59:76:e1:7b:ff:
3b:22:4c:96:12:53:98:a1:29:f1:29:2c:e0:aa:07:
ec:fa:05:51:dd:a8:37:05:92:c1:b0:75:b0:41:2e:
bd:00:f7:58:08:5d:93:f3:df:93:5e:ab:2d:91:da:
de:99:c3:51:d7:b5:56:b7:41:1a:d9:d6:da:8f:53:
89:eb:3b:44:6f:0c:a4:18:31:89:c9:8c:e3:44:7f:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8F:E1:09:64:3D:E9:24:60:D1:BF:4A:0B:70:40:A5:4B:E4:24:AF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D68BD4E86811EE83438C9F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.134.0/23
Signature Algorithm: sha256WithRSAEncryption
27:22:d5:33:89:5e:45:12:1d:21:0a:be:1e:8f:6c:6f:2e:9e:
92:7b:e0:79:6f:2e:17:a9:df:29:db:6d:ef:99:3e:71:b3:04:
84:91:b3:5c:0e:67:dd:50:7e:13:b3:ed:7a:cc:db:86:b7:ee:
d2:e1:e4:5a:e8:08:29:78:5e:19:00:3d:63:3f:65:93:99:a5:
61:38:af:1f:fe:04:ec:2f:b8:8c:43:83:dc:c4:83:65:2a:03:
12:67:81:b7:7d:dc:34:c4:dd:b3:dd:fa:70:82:73:be:9b:96:
f8:34:26:03:92:7a:f7:bc:d7:c4:dd:4c:e8:e5:da:79:bc:7b:
cd:b0:b1:29:e1:ac:b9:1a:ea:91:7a:c0:aa:a0:ab:65:51:26:
d1:cd:5d:4e:af:b3:61:b6:2a:6a:fe:a7:f8:b9:b8:f9:77:5c:
ab:7c:50:52:40:77:0e:e2:88:e3:a9:e5:94:cf:7e:dd:57:84:
57:d1:8b:83:90:2f:b7:cf:b4:55:80:a6:65:81:50:14:89:e4:
0a:c8:a5:03:13:ed:c9:5c:0c:4b:43:59:0f:a9:37:93:55:a9:
b5:ea:77:84:e7:0f:d9:b9:d0:6d:cf:63:c0:2d:66:90:06:db:
4c:b3:81:93:01:b8:3d:9d:3a:ac:93:bf:ed:a2:9f:cc:5c:9c:
6b:8c:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:24 2024 by rpki-client on console-fra.rpki-client.org