Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA6F02CA29FE11ED9F2477BAF1222468.roa
File: CA6F02CA29FE11ED9F2477BAF1222468.roa (raw, json)
Hash identifier: 3nOJMBa+5bvEoRQHV3yu951aFAj+pyMXrxwm/lsQNak=
Subject key identifier: A4:CA:13:66:16:D5:85:D5:DD:E4:9B:C9:BA:9A:FA:92:85:22:B2:87
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 096C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA6F02CA29FE11ED9F2477BAF1222468.roa
Signing time: Thu 01 Sep 2022 14:03:01 +0000
ROA not before: Thu 01 Sep 2022 14:02:58 +0000
ROA not after: Thu 05 Sep 2024 14:02:58 +0000
asID: 399838
IP address blocks: 154.16.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 00:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2412 (0x96c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 1 14:02:58 2022 GMT
Not After : Sep 5 14:02:58 2024 GMT
Subject: CN=6310bb95-ed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:e6:97:2f:1c:75:e4:a8:0a:8d:81:6b:f5:
37:b5:11:94:6e:f2:5e:39:e9:03:f4:fa:f5:fa:ab:
ce:cb:0c:6c:7f:15:50:d0:ba:00:0b:41:52:d4:70:
f9:77:94:ef:db:47:06:1f:3f:66:9d:b0:7d:9f:ba:
b3:63:66:4c:3f:d6:03:39:31:51:3b:07:b2:14:be:
e0:b7:8e:91:11:dd:16:a3:ad:c1:34:4f:76:ad:d2:
bc:96:e6:79:54:0f:72:c7:0c:b5:cb:4e:05:76:1b:
20:62:d7:ca:51:70:85:82:bb:ab:cd:16:a7:d9:ab:
a4:af:65:93:71:9a:8b:f3:e6:77:e6:27:b2:4d:58:
50:20:bd:cd:f8:31:54:71:67:0f:5a:4f:0a:73:25:
b7:4d:60:c2:b1:70:b5:9d:07:df:a7:fc:76:a4:e2:
67:cd:eb:91:de:0d:fd:9b:9d:86:3c:6b:9d:f0:07:
e0:72:f0:9b:1a:51:39:f2:e5:69:49:07:48:8c:da:
4b:81:c4:81:a4:cd:bd:b5:f6:66:73:6e:0c:18:85:
9a:66:0e:b5:58:81:c8:67:3d:c3:09:bc:71:ff:e3:
13:2c:04:f1:56:1f:f6:cf:01:f1:a9:27:db:b2:11:
3c:b6:d7:a4:a0:d9:c7:39:4e:51:9d:1f:4e:31:d7:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CA:13:66:16:D5:85:D5:DD:E4:9B:C9:BA:9A:FA:92:85:22:B2:87
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA6F02CA29FE11ED9F2477BAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.128.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d3:f7:c7:fc:7e:93:69:74:cd:13:c7:62:24:70:4b:98:3a:
22:01:69:5b:f4:c6:35:19:72:b1:e5:4c:d1:47:a0:17:35:bb:
b3:21:18:91:30:ea:be:2a:ac:e6:e8:06:01:b3:a5:81:cf:94:
3a:f6:86:24:d2:9f:81:1a:b4:ab:f2:c5:70:00:a9:48:72:09:
d8:2b:87:f2:ca:c3:bd:43:e7:77:aa:f8:78:8a:5a:b5:c0:40:
b8:2f:dd:69:00:07:d1:54:57:61:1b:29:20:08:6e:52:6d:07:
8e:81:25:c1:3f:4c:26:e4:43:cb:c6:dd:d8:72:e7:6d:7c:c1:
a6:34:10:db:3e:68:cf:1d:bc:e5:22:b5:7b:75:29:41:5d:8c:
d9:da:97:c4:90:a6:e0:e8:3a:8c:5f:bc:ef:14:ed:59:72:5f:
d3:20:6d:86:7f:cc:93:8d:8d:c0:6a:0d:5b:2e:b0:b9:9b:03:
5e:95:f2:38:ee:ed:91:64:d0:47:9a:fe:12:86:cf:c0:75:1c:
85:82:de:9f:58:c1:43:ef:2e:9c:8e:72:f5:7f:48:ff:20:a7:
fa:88:2b:4b:8c:2b:20:52:59:6c:ca:c0:3d:7a:12:17:4f:ad:
67:a4:31:cc:15:cb:43:dd:d6:11:97:ad:18:74:5a:c0:ae:b0:
34:79:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:49:52 2024 by rpki-client on console-fra.rpki-client.org