Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFE52D64219811EF8AB4D5FD7CDC24C2.roa
File: BFE52D64219811EF8AB4D5FD7CDC24C2.roa (raw, json)
Hash identifier: wCLyaSIRga11UE8SdMFdsh+7TCARTS10/oiBLefUEh4=
Subject key identifier: FC:1C:DC:C4:54:87:94:2B:54:DD:1A:07:6A:C3:82:BC:5C:4D:48:77
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 16B6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFE52D64219811EF8AB4D5FD7CDC24C2.roa
Signing time: Mon 03 Jun 2024 11:02:21 +0000
ROA not before: Mon 03 Jun 2024 11:02:18 +0000
ROA not after: Wed 03 Jun 2026 11:02:18 +0000
asID: 13213
IP address blocks: 154.16.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5814 (0x16b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 3 11:02:18 2024 GMT
Not After : Jun 3 11:02:18 2026 GMT
Subject: CN=665da2bd-fec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:52:56:40:62:6f:63:83:85:8d:bf:b7:bb:
b5:f5:7c:f0:89:9a:19:45:0b:d1:22:52:98:89:68:
c4:7b:82:b1:22:d4:c7:e6:17:2d:8b:fd:c1:3f:cb:
cb:81:fc:a9:1a:0c:45:a3:6d:73:ec:5a:3e:28:49:
ff:af:d3:20:e8:96:bb:e9:f7:30:f8:28:7d:51:f2:
73:a8:5b:29:51:b8:b6:41:69:a6:16:f9:0a:c2:3f:
ba:0d:68:12:65:cb:b4:e3:04:74:9a:4d:7d:78:7f:
27:17:3f:e9:3c:30:d3:db:59:a1:50:6d:e7:08:8e:
c6:47:63:72:6d:5c:b8:1e:86:fd:10:51:8a:b7:ca:
0e:4e:b6:fd:97:19:d5:58:21:ca:42:68:90:7c:63:
e3:61:fa:e6:db:19:9e:c6:3e:35:01:94:3f:c5:0c:
ab:d1:33:70:f1:9e:2b:15:58:57:b1:cc:a9:fb:7b:
fc:9e:6c:c1:49:01:46:7e:cf:c8:5e:48:1e:89:0a:
92:30:14:dd:11:ef:7c:b8:05:f9:91:28:b4:73:9c:
44:78:8d:78:fb:26:ee:8b:85:21:e5:0c:69:f2:04:
c6:06:c1:75:33:dc:f4:3b:fd:a6:65:ab:54:d9:cf:
fe:26:2b:47:b7:ba:d9:df:d4:0e:fa:30:bb:60:67:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:DC:C4:54:87:94:2B:54:DD:1A:07:6A:C3:82:BC:5C:4D:48:77
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFE52D64219811EF8AB4D5FD7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.8.0/24
Signature Algorithm: sha256WithRSAEncryption
74:39:8e:3c:2f:81:86:1e:68:b9:de:d5:c8:36:d9:c9:10:3c:
c0:ec:20:b1:dc:19:07:3b:51:80:20:ff:37:b1:4c:3c:0a:d0:
6f:ec:4e:bd:e3:62:a7:cf:b7:63:d6:3f:3d:99:71:34:30:55:
0b:69:53:c0:91:b2:d1:62:1d:c7:8d:2d:aa:f5:87:8b:5a:2b:
94:6c:1a:de:0a:d2:c5:b7:70:22:42:21:9a:88:19:d9:93:59:
d8:d6:5c:56:24:06:f6:e8:59:4e:63:07:12:eb:63:c9:d8:1c:
e8:4d:a2:50:94:6e:11:04:04:46:62:0d:0e:14:4a:ea:5f:6d:
1a:12:93:cc:4f:3c:d3:52:1d:b7:f7:d1:c0:35:27:1e:a6:d6:
f2:31:03:bb:f6:27:df:8f:43:51:83:82:fc:84:47:0f:02:f3:
b6:e8:b3:4c:d2:fc:5b:d9:39:8d:b7:08:94:0e:db:3b:60:11:
30:11:88:f9:15:1e:66:bb:5f:44:52:73:0f:04:75:da:67:f8:
e4:cc:74:45:fe:3e:c1:81:54:ea:96:0f:5d:de:2a:e9:69:83:
78:be:47:0e:37:d3:01:a2:38:d4:45:aa:81:32:09:11:9c:a7:
a9:44:14:88:60:9d:c3:a2:6c:44:c0:8f:4c:63:06:bb:6e:9e:
74:e1:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org