Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C800338C551011EDA9A635E0F1222468.roa
File: C800338C551011EDA9A635E0F1222468.roa (raw, json)
Hash identifier: dmDnX2OLskZyLi4Jc+pCD9euR4vrKuvWxkQXPPmvgeY=
Subject key identifier: 4A:30:F8:D3:AC:01:01:19:C3:4F:64:02:83:2E:DC:3A:3B:98:48:19
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A2B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C800338C551011EDA9A635E0F1222468.roa
Signing time: Wed 26 Oct 2022 09:30:08 +0000
ROA not before: Wed 26 Oct 2022 09:30:03 +0000
ROA not after: Sun 27 Oct 2024 09:30:03 +0000
asID: 11426
IP address blocks: 154.16.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603 (0xa2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 26 09:30:03 2022 GMT
Not After : Oct 27 09:30:03 2024 GMT
Subject: CN=6358fe20-c35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:40:4a:4b:f5:2b:bb:9c:2a:02:0d:c1:8c:
bf:3f:38:9d:8e:1d:4a:0e:9c:31:ac:11:e5:87:5f:
ef:4a:26:ea:4f:d1:93:3a:ec:d8:28:da:dc:dd:d6:
e2:8b:c5:c0:6d:eb:64:2e:ac:57:cc:fb:d7:96:fe:
a2:53:72:e7:19:a8:8e:96:7f:d3:00:da:28:11:48:
09:6a:a4:af:31:a1:8b:37:d1:fa:9d:3d:7c:53:50:
92:fc:89:77:5e:32:02:2a:e0:45:97:e8:b0:f8:2c:
e2:ad:44:8b:be:70:33:0c:0d:30:de:f8:38:37:c6:
23:f8:91:13:90:24:fe:02:41:b2:9f:58:00:ca:6d:
37:80:04:f5:fa:8e:8e:af:43:58:0d:26:00:93:96:
fd:0b:b4:0c:23:42:d8:76:34:e0:fd:b2:78:73:ce:
e7:60:9a:98:6a:41:0d:7f:4b:c5:67:6c:0d:41:6e:
80:03:15:8d:67:82:be:a0:09:19:35:26:95:18:29:
35:07:3a:1b:a1:95:b6:0d:18:aa:3c:ab:69:f4:b0:
81:2e:6e:5a:d3:6b:7c:48:c3:f9:57:19:46:ae:83:
62:4c:00:81:87:75:64:0b:f2:4a:74:10:67:b8:2d:
73:1c:16:8a:28:12:04:a7:2b:e0:d4:50:c5:be:62:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:F8:D3:AC:01:01:19:C3:4F:64:02:83:2E:DC:3A:3B:98:48:19
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C800338C551011EDA9A635E0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.173.0/24
Signature Algorithm: sha256WithRSAEncryption
56:37:d7:08:bc:05:2d:31:f6:a6:ce:02:d4:c1:8e:aa:8f:95:
4e:bb:19:54:64:70:f6:1f:57:65:c8:3b:ee:35:c4:13:68:53:
54:4e:48:40:c6:c7:1d:d6:74:43:ce:f2:cd:f8:3c:6f:a9:ab:
7b:19:55:a4:6a:f4:69:b0:35:d5:9f:c6:9c:6c:e1:6e:ec:f3:
de:6e:8e:48:6e:50:39:f9:ce:6b:ba:cc:2a:63:16:00:01:15:
b3:90:6a:79:14:64:4b:2b:c3:40:41:b2:04:46:69:04:2a:c6:
7d:86:11:83:69:6e:93:9f:5d:dd:35:f4:b8:6e:82:0a:92:95:
4c:3d:4a:f8:c0:b0:d6:56:93:82:96:59:47:a0:8a:98:1f:7b:
b0:0c:9a:12:ce:af:a7:4a:eb:7c:eb:45:a8:02:3c:cd:92:91:
5f:cb:c0:1f:4c:87:8a:48:97:e1:a6:d9:9e:2d:36:49:3c:04:
ce:49:e5:6c:3e:d0:57:c9:bd:b5:a4:98:b5:f4:a5:17:d6:b9:
35:4d:82:fc:94:87:2f:e2:27:6a:77:c7:74:4f:49:38:97:fa:
f8:23:ba:e0:64:c2:5f:cd:04:b4:fe:47:48:f6:23:36:dd:d1:
de:bd:cb:d3:fc:75:6c:8b:86:bd:26:14:88:cc:e2:75:a0:fc:
23:5a:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:26:55 2024 by rpki-client on console-ams.rpki-client.org