Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8508FF4110F11EF910708F6007001B1.roa
File: D8508FF4110F11EF910708F6007001B1.roa (raw, json)
Hash identifier: BoVB822ESNze6dRb0yioEu7VMchHyBAEoTKRYMlh5X0=
Subject key identifier: F0:D0:C1:C4:41:CA:2A:3A:51:DA:91:32:43:91:E6:85:A2:EF:73:5A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1651
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8508FF4110F11EF910708F6007001B1.roa
Signing time: Mon 13 May 2024 10:02:02 +0000
ROA not before: Mon 13 May 2024 10:01:59 +0000
ROA not after: Wed 13 May 2026 10:01:59 +0000
asID: 3320
IP address blocks: 154.16.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5713 (0x1651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 13 10:01:59 2024 GMT
Not After : May 13 10:01:59 2026 GMT
Subject: CN=6641e51a-fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:25:c1:ba:5b:24:1c:db:1c:29:8a:61:82:
2d:24:7d:57:f3:e3:58:1d:99:8b:02:67:69:ce:30:
90:18:97:65:05:10:cc:83:88:71:46:9e:3c:07:fd:
72:91:6a:8e:18:5f:77:15:6b:e2:7c:31:46:38:d0:
b3:24:1f:cd:46:79:09:fd:97:b2:3a:8a:df:47:d1:
fa:9d:67:56:40:42:3a:bf:02:2a:1d:e2:33:48:d4:
2e:9b:8e:03:0a:24:03:70:c5:6a:69:ae:a7:43:ee:
0f:cf:19:4b:7e:b0:2b:23:71:be:8b:bb:6a:ff:ec:
bf:83:bf:a3:1a:2e:e5:45:cb:23:10:99:18:aa:1a:
87:0d:c6:62:41:5b:f7:dd:4d:5e:d6:73:bc:fc:6d:
d2:87:99:96:62:82:5f:b4:f0:c9:ca:57:db:72:33:
c5:11:85:2c:7c:59:d0:ad:7d:98:d4:c8:37:2c:ae:
5f:8a:d3:9b:6b:55:78:b2:b9:f5:fe:7d:e4:c6:88:
20:fd:97:a8:32:a6:54:07:d4:71:09:b9:74:5f:a6:
b7:41:7c:21:d8:6b:cd:fa:a8:d4:10:23:15:d5:8e:
b1:91:56:fc:90:49:ac:5f:b9:8c:67:8d:96:e3:e7:
de:17:49:53:46:e4:ab:5d:8f:83:de:5b:d8:3c:39:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D0:C1:C4:41:CA:2A:3A:51:DA:91:32:43:91:E6:85:A2:EF:73:5A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8508FF4110F11EF910708F6007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
77:18:91:3f:08:ad:5c:c5:6e:3a:46:e1:de:fd:0d:17:b1:eb:
36:48:a6:03:8c:c5:4e:55:41:03:a5:16:bc:38:b8:9a:2e:c5:
b3:c5:c7:6c:5a:2a:a0:7e:1e:dd:4e:65:cd:24:96:a8:2d:a6:
0a:e5:93:6c:50:22:dc:ad:95:df:93:89:f2:74:e8:39:0b:8d:
55:e4:36:64:aa:1b:ef:e0:d9:5d:e2:a1:4d:c4:9b:e3:8a:91:
d0:0f:5d:b3:18:4a:c1:7e:b6:ae:62:17:bb:ac:4a:e9:8e:69:
81:b9:74:b5:dc:94:2a:ce:9e:85:2b:00:86:bf:7c:79:2f:82:
7a:1a:13:59:75:1e:4d:53:d4:f6:14:84:45:22:5e:0c:26:e4:
9c:0a:f6:78:2a:7b:eb:6f:e4:eb:8d:3a:89:99:ea:2b:5e:8c:
54:80:07:0d:a0:29:fc:ac:90:bd:63:af:1a:7a:8f:88:2b:b0:
7d:7f:ce:58:26:ba:89:4e:1c:0c:15:56:7c:f8:e2:c8:68:ff:
a1:a7:e5:3e:49:c7:71:cb:12:ce:ac:73:18:72:61:62:1b:f8:
13:01:d3:76:56:48:cd:e6:65:b7:b0:47:69:36:48:ff:fb:fa:
86:b1:3e:97:2c:99:e8:3f:c2:d5:9b:f1:a8:31:66:4d:55:04:
d1:44:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:33 2024 by rpki-client on console-fra.rpki-client.org