Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2AE8DD20EB611EFBBB2434F017001B1.roa
File: C2AE8DD20EB611EFBBB2434F017001B1.roa (raw, json)
Hash identifier: Ogr+yqzFxrAn7UlvD+ZIhm3Cix8hctDt6BWHJ+NwWpM=
Subject key identifier: 66:B6:2C:AC:8B:30:C2:23:73:8F:93:33:B4:AD:71:78:E1:D9:46:20
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1642
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2AE8DD20EB611EFBBB2434F017001B1.roa
Signing time: Fri 10 May 2024 10:19:18 +0000
ROA not before: Fri 10 May 2024 10:19:15 +0000
ROA not after: Sat 09 May 2026 10:19:15 +0000
asID: 834
IP address blocks: 154.16.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5698 (0x1642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 10 10:19:15 2024 GMT
Not After : May 9 10:19:15 2026 GMT
Subject: CN=663df4a6-22f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:98:52:c8:0a:3d:f8:52:34:94:fc:59:2c:
8a:89:c1:d3:ba:c2:73:11:80:f1:75:03:1f:cd:df:
84:26:5d:60:f5:c1:c9:34:2a:48:aa:b9:0a:e0:f5:
e6:e2:e5:38:8c:25:71:2b:1a:2e:36:37:44:9f:15:
d1:cf:87:7a:f8:2d:6f:fd:a0:29:25:8c:d0:30:a5:
c5:08:fb:a3:dc:03:a5:9a:0b:c6:dc:08:9a:b9:72:
6b:33:99:a0:f6:5e:73:2e:cf:d7:88:41:2b:c8:5e:
f1:bb:c0:1d:73:73:28:78:82:f0:c5:0f:b7:d1:57:
7a:26:f0:53:36:e8:3b:ca:82:f9:a1:54:d3:cb:65:
2e:1f:ed:d6:9e:8a:98:24:49:20:29:97:63:20:cf:
80:78:09:db:c3:54:85:fb:b9:53:92:ac:30:cc:e3:
b4:02:2f:c2:bf:25:e9:b5:58:12:5e:bd:eb:c0:0c:
c2:a4:98:61:0b:37:56:5a:3a:34:ee:a2:f5:72:21:
3a:2d:1a:d9:9d:cf:35:a8:35:70:6f:8b:f8:ab:bc:
d8:05:41:91:26:c9:7c:1e:3f:6e:f1:97:e1:8b:5b:
03:76:fb:1a:fb:de:4a:16:d9:bc:3a:06:36:44:97:
e5:4c:94:b8:1a:bb:cf:77:b6:2f:45:aa:ce:6a:71:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:2C:AC:8B:30:C2:23:73:8F:93:33:B4:AD:71:78:E1:D9:46:20
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2AE8DD20EB611EFBBB2434F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a0:a6:7f:85:70:da:f5:27:77:df:29:84:d7:92:f7:55:d9:
10:8c:80:49:d3:85:20:5f:7a:2a:6e:f6:e0:e8:09:7c:4e:16:
03:eb:3c:5b:f5:22:e1:12:d1:99:8f:9a:36:14:10:ee:ed:0f:
cc:12:68:53:8a:36:ac:37:eb:53:a7:28:22:06:73:10:82:01:
80:e2:79:7c:65:22:aa:e5:85:d7:6d:27:52:6e:50:12:26:75:
31:5b:78:0a:7e:02:9d:36:59:8c:78:2c:0f:11:02:e8:5d:c9:
0f:eb:01:56:da:e9:11:ca:8e:f7:5b:67:63:82:89:35:8c:83:
df:3c:93:b1:8c:2d:f6:8b:f7:a4:68:6b:5f:fd:d8:82:08:b9:
3b:9f:54:fc:a5:ee:c9:a6:e9:80:87:22:33:e0:09:e2:4f:b4:
68:89:fd:53:b0:99:df:63:b7:1a:0f:c0:d6:bf:01:42:f6:76:
8f:ad:61:9b:d8:c9:e3:1e:a4:b4:b9:b1:1e:e3:ed:11:f4:82:
ca:16:8f:c3:98:53:1e:95:da:49:4b:d0:8e:88:19:c8:8b:8b:
b8:74:28:e8:d6:80:36:a4:97:45:91:b6:6e:dc:90:29:e4:e7:
80:3c:da:5b:3d:9e:02:95:80:79:e8:eb:fa:d2:31:b5:cc:5e:
98:95:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:56 2024 by rpki-client on console-fra.rpki-client.org