Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C539F7DAAB0A11EFB46353A2762E951A.roa
File: C539F7DAAB0A11EFB46353A2762E951A.roa (raw, json)
Hash identifier: tBAUDGJ91U47JMNpU6YviETL1f/543UX0Aj2BajiJ34=
Subject key identifier: A1:B9:3E:73:58:C2:8F:16:5E:E3:A4:E7:14:41:1B:2F:51:A2:51:02
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1909
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C539F7DAAB0A11EFB46353A2762E951A.roa
Signing time: Mon 25 Nov 2024 08:53:42 +0000
ROA not before: Mon 25 Nov 2024 08:53:38 +0000
ROA not after: Wed 25 Nov 2026 08:53:38 +0000
asID: 14618
IP address blocks: 154.16.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6409 (0x1909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Nov 25 08:53:38 2024 GMT
Not After : Nov 25 08:53:38 2026 GMT
Subject: CN=67443b16-f870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:32:9c:0f:26:22:a0:2e:f3:b7:14:1e:4a:
5c:45:3e:4d:f1:c9:55:a7:01:e3:a5:0c:f0:7a:a7:
a3:e6:c2:ab:48:7c:25:ac:dc:91:03:47:cc:67:8c:
a1:ce:54:7d:d6:7a:6e:b4:2c:05:d3:44:9c:e8:78:
f0:22:fa:0b:c6:ce:ac:bd:29:8b:7b:18:c6:c8:a4:
04:c4:cb:37:61:c2:b7:e6:60:2e:52:c7:93:19:37:
6a:5f:fb:04:5c:7e:25:5d:a1:47:e2:3d:74:b6:54:
01:0f:73:b5:a6:44:a5:c2:5a:b9:98:2c:ce:5a:52:
46:3c:cd:c3:ab:d5:d9:e6:0a:61:26:ea:21:6b:85:
74:8b:9f:0b:e3:05:da:c5:ed:34:d2:d5:5e:78:70:
b9:8f:99:dd:42:e9:2d:ec:d8:bf:4d:10:bb:16:7d:
d0:23:a3:26:1e:06:05:f2:4a:b9:bf:98:ff:85:6e:
7a:da:17:a6:86:87:f4:e8:bd:a9:08:4a:6a:e1:cb:
db:c3:78:f1:b4:07:6d:da:f8:06:95:0e:55:2c:9c:
de:0c:b4:6e:f0:6e:91:d6:26:7e:d8:1f:9f:4c:ee:
37:46:ef:20:b7:6e:e6:ac:b9:f1:91:87:25:49:4e:
7d:d8:84:ca:af:29:f7:03:11:21:7a:d4:77:24:c4:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:3E:73:58:C2:8F:16:5E:E3:A4:E7:14:41:1B:2F:51:A2:51:02
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C539F7DAAB0A11EFB46353A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:da:a6:b4:f3:6a:b0:5d:b8:4b:7d:7a:07:a0:35:4f:e0:ea:
bf:f8:8e:04:85:64:2c:9f:2c:86:67:eb:90:34:bc:91:45:cc:
b2:b4:ab:2a:22:9a:05:cf:26:7c:30:14:f0:ce:3c:c3:44:5a:
69:d8:29:b6:38:8d:77:fc:eb:41:52:cb:de:e9:28:98:32:cc:
d8:9f:e6:b4:de:0f:8c:15:4f:34:ae:df:7a:83:de:9f:3e:c2:
9c:c0:3c:d8:2c:60:d5:e0:f5:65:62:0a:5d:67:4b:61:48:46:
a0:d2:b0:94:1e:4d:03:45:93:eb:71:d7:26:1a:c5:3b:1f:da:
02:0a:e0:b5:3d:7e:f2:12:7d:8e:c7:d2:77:49:f7:68:99:f4:
38:17:dc:3b:4d:f4:1e:37:71:76:af:37:7e:02:64:cf:71:f7:
a7:82:70:30:63:c0:a9:76:99:87:88:5c:b8:1a:bd:de:53:2b:
f0:27:98:d7:21:d3:8f:52:9c:ed:4e:64:24:d7:79:e4:e6:e4:
18:df:e6:db:b9:2b:2f:6a:d4:2d:31:ea:bc:57:ee:f3:3f:87:
09:0b:08:db:75:f6:1d:15:90:e6:a1:e1:5e:bd:ff:3d:61:9e:
f5:1c:1e:d1:24:4c:ea:1c:eb:43:c8:68:46:5b:1d:30:24:45:
7e:7f:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:24 2025 by rpki-client