Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D606CB34644611EFA7999D7E762E951A.roa
File: D606CB34644611EFA7999D7E762E951A.roa (raw, json)
Hash identifier: Crg4GbgNRKrn3v5hxF008saFtBDyzkpBVuWHpLE4WEc=
Subject key identifier: 49:2B:0A:1E:C2:50:90:36:7E:37:F5:69:45:F6:F2:17:AB:11:E3:31
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17C0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D606CB34644611EFA7999D7E762E951A.roa
Signing time: Tue 27 Aug 2024 07:34:47 +0000
ROA not before: Tue 27 Aug 2024 07:34:44 +0000
ROA not after: Thu 27 Aug 2026 07:34:44 +0000
asID: 5065
IP address blocks: 154.16.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6080 (0x17c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 27 07:34:44 2024 GMT
Not After : Aug 27 07:34:44 2026 GMT
Subject: CN=66cd8197-af39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:28:a4:aa:04:f7:b2:9a:d3:34:90:18:65:
f0:f7:cb:fa:e1:92:98:58:ec:90:49:29:9e:c8:a8:
2c:b2:df:07:a6:79:c7:1c:f9:1c:01:c4:75:7a:e1:
20:08:cc:c9:23:1e:b5:4f:96:58:c2:0b:12:ff:f8:
5c:bd:fd:6e:5c:55:ed:ea:84:52:f3:f0:93:12:69:
0e:ec:a0:3c:7c:70:7a:5a:fe:cf:d3:8b:75:77:09:
c1:15:fc:82:b1:1e:96:38:02:11:f9:c8:bf:c0:be:
45:81:c0:9c:23:ea:4a:88:94:f7:a1:6e:4d:8c:6a:
9e:87:2d:c9:e6:f5:26:4b:5d:89:25:55:63:af:01:
83:fa:a1:2f:71:b5:c4:16:3b:39:ae:8e:e7:6a:49:
f7:63:47:86:04:21:03:dc:d3:06:60:4e:e9:38:26:
e6:36:ac:96:41:72:be:5a:5e:49:1d:47:64:2a:25:
12:30:e7:f1:a0:24:c8:2d:cc:44:15:e1:5d:71:f8:
e5:8c:66:c3:03:a3:31:0a:e1:c8:cd:e9:f5:06:29:
39:bd:8b:88:fa:e1:d1:84:51:20:7c:05:8c:83:f3:
a0:a3:20:7c:d6:13:e0:0a:80:11:69:51:f9:a7:f6:
fb:aa:e6:35:6f:8c:d2:67:2d:83:da:72:8d:48:e7:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:0A:1E:C2:50:90:36:7E:37:F5:69:45:F6:F2:17:AB:11:E3:31
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D606CB34644611EFA7999D7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7c:61:ca:67:87:d0:50:3a:1d:7e:b9:db:f4:4c:c5:0a:b1:
fd:29:55:cb:e4:86:32:b2:28:c3:60:80:63:27:b1:c9:9d:02:
41:27:63:67:e9:5a:d1:a8:6e:a1:86:50:27:7b:f6:92:0d:cd:
dc:ba:13:6e:fb:89:a9:1d:3a:b7:b1:9c:7b:52:90:b7:a1:54:
79:38:4e:d5:19:94:1c:22:a8:53:4b:dd:cd:4a:8d:f6:7c:b9:
88:5c:bf:6a:43:be:13:e0:a4:43:19:46:01:9a:4b:ce:c4:d8:
86:ae:71:ec:f1:45:46:0a:35:ad:d8:68:22:99:30:fc:03:04:
e1:00:3f:74:8a:22:60:91:74:ac:45:65:ae:e8:15:27:52:92:
67:81:6b:0d:8e:5d:32:eb:4e:76:b5:17:bc:b4:02:dc:a9:b5:
58:4a:97:6f:85:4b:83:a6:f4:0f:f6:19:8d:13:18:a2:6f:f0:
71:fc:10:91:f8:3b:65:ca:6b:fd:c1:8a:6a:d0:fc:c9:01:00:
2e:6f:69:08:53:89:1d:3c:94:de:09:a2:9b:30:c4:b2:76:c5:
bf:3e:4d:19:41:79:43:ba:05:8a:b3:c9:2e:4e:d8:9d:99:c0:
b8:d7:b8:71:50:4c:d0:ee:4a:6a:64:be:47:8f:b3:c9:99:15:
7b:36:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:34 2024 by rpki-client on console-fra.rpki-client.org