Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C847B72E8B8411EEBDC7FB154AD9E6FC.roa
File: C847B72E8B8411EEBDC7FB154AD9E6FC.roa (raw, json)
Hash identifier: wg5FtiGoJqfPiB/vKiyuc53a4+5ct9MNi868huC3p1U=
Subject key identifier: 3D:79:8F:71:74:F2:A9:37:E1:90:5E:11:D0:A8:F3:63:4C:43:8D:F1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 135B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C847B72E8B8411EEBDC7FB154AD9E6FC.roa
Signing time: Sat 25 Nov 2023 11:21:31 +0000
ROA not before: Sat 25 Nov 2023 11:21:28 +0000
ROA not after: Tue 25 Nov 2025 11:21:28 +0000
asID: 212238
IP address blocks: 154.16.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4955 (0x135b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 11:21:28 2023 GMT
Not After : Nov 25 11:21:28 2025 GMT
Subject: CN=6561d8bb-9ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:0e:ed:4d:d8:33:28:5e:d9:71:0f:50:a3:
e8:16:f5:9a:97:ee:b0:1f:37:d8:e0:93:5d:0a:da:
b6:2e:b4:55:ce:a0:e1:52:a9:61:6e:76:24:08:8b:
da:af:6c:ce:7b:0e:a3:ad:e5:70:a6:89:ee:10:e5:
d8:b3:32:c1:71:8d:98:cc:c1:31:f1:53:0c:df:f7:
b0:2c:aa:d0:5c:d4:ee:5f:a6:33:2a:2d:84:0b:4e:
6f:ca:7f:51:45:94:da:0b:5f:8d:f5:aa:ec:8d:69:
9e:08:9a:28:e0:76:82:2d:84:33:05:d4:cc:97:c7:
c6:86:28:a9:e8:b6:f4:26:af:73:77:63:bf:ed:66:
b7:b4:71:90:2d:0d:9d:e0:4d:bd:ee:7e:8c:05:46:
9b:98:07:54:62:2e:29:c7:59:b9:cb:b1:93:8a:77:
80:dd:d2:b3:53:5f:5e:ad:af:ea:4b:73:b0:8c:6d:
c5:d0:25:48:da:42:05:0e:c9:d5:88:ec:45:1c:88:
13:a2:d7:45:fa:c9:e5:3a:7f:53:09:d8:38:91:47:
fb:49:1d:17:58:59:ab:a2:9a:32:cc:14:e4:5b:f1:
da:ba:ba:f5:03:43:fc:3e:87:dd:87:9d:59:b9:72:
2f:b5:02:98:11:3b:a9:4c:e3:cb:a7:bf:51:54:dc:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:79:8F:71:74:F2:A9:37:E1:90:5E:11:D0:A8:F3:63:4C:43:8D:F1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C847B72E8B8411EEBDC7FB154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:59:ad:61:f6:46:6a:a5:bc:46:cc:71:03:11:f9:22:b1:f6:
14:57:fc:ab:2c:f3:4b:85:6e:4f:ae:46:7f:4d:3b:86:f6:eb:
a2:28:92:10:ab:48:9e:a0:f6:1c:2d:27:90:70:1a:c1:ba:62:
fd:9b:93:44:c2:88:7a:73:c6:a6:eb:d3:08:63:df:40:b7:23:
bb:65:60:ec:d4:47:e0:1d:8f:95:36:4e:e0:e5:03:1b:82:25:
b8:c0:f3:ac:3b:e4:71:2f:06:fc:f8:a0:42:5d:ad:50:1d:e7:
08:f8:13:93:21:46:32:f2:c6:cf:ed:84:ca:40:46:ce:ab:df:
57:97:6c:96:68:47:89:2e:68:9d:0b:2f:be:06:a6:ce:1f:3e:
4c:3d:71:28:a7:86:bf:4a:d9:e7:d7:53:47:90:c0:bb:25:d4:
1e:ca:8e:47:b4:76:64:5d:1b:94:fb:a9:7a:2c:f4:57:6e:c0:
fd:6b:14:c1:02:ea:57:d3:bd:7a:a8:77:a2:fd:84:bf:ae:a9:
70:45:ca:81:9f:47:10:9f:56:bf:c6:0e:94:17:90:7a:a6:60:
06:8e:d5:11:d9:27:45:52:03:03:2f:e5:cc:0a:4e:2a:a6:ab:
39:32:ea:5a:bf:0f:c1:f6:de:bb:11:c0:2b:c5:a7:36:a0:bd:
a7:31:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org