Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D85CC530F9B911EDB7EE83794AD9E6FC.roa
File: D85CC530F9B911EDB7EE83794AD9E6FC.roa (raw, json)
Hash identifier: ApN8GN/Ll3SSPvUXJ//IEtYu4bP4M6dKEpyXUr24DVY=
Subject key identifier: D7:FA:90:5A:2F:DF:63:36:C5:D2:93:DE:06:BE:AD:5F:8D:13:FF:D5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DDF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D85CC530F9B911EDB7EE83794AD9E6FC.roa
Signing time: Tue 23 May 2023 22:33:31 +0000
ROA not before: Tue 23 May 2023 22:33:28 +0000
ROA not after: Sat 24 May 2025 22:33:28 +0000
asID: 46337
IP address blocks: 154.16.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3551 (0xddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 23 22:33:28 2023 GMT
Not After : May 24 22:33:28 2025 GMT
Subject: CN=646d3f3b-f588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:74:e3:6f:ad:cd:81:63:22:fb:07:31:f7:
bc:ff:36:9a:8d:6d:d6:ef:79:ed:49:f3:6d:a6:ad:
f3:77:73:56:a8:c6:63:a8:03:e7:ee:5e:2f:3b:53:
91:f8:e7:fd:d4:ba:78:a5:5d:52:87:d7:76:8f:45:
b4:ca:cc:fe:31:5f:61:ac:4f:97:0a:39:24:86:93:
23:8f:26:f2:db:06:7e:29:f3:13:7b:d4:74:0e:98:
80:5c:72:20:d1:77:ab:70:26:fb:48:e1:70:6f:b6:
63:7d:c6:44:98:91:3f:10:3e:eb:6b:7c:2d:cd:fc:
ba:64:a7:1d:54:d8:83:e8:27:13:a2:c1:ef:7e:e3:
39:04:7b:04:34:ec:e5:02:73:31:2f:70:d2:ef:06:
17:b1:a6:c3:d3:59:c6:04:f3:25:b4:37:e9:ba:1c:
d5:c5:f4:ca:8f:1f:0a:18:ce:83:2f:40:ca:80:9b:
db:d9:bd:94:87:8c:97:b6:4a:c1:08:6c:a1:0b:5b:
13:94:d1:c4:75:92:8e:53:fe:33:a3:5f:20:e3:1f:
43:a2:ae:31:f1:57:6d:56:df:a2:ba:8b:39:94:82:
4f:97:22:28:82:28:2c:e3:b0:33:5b:49:0a:3c:c6:
7b:26:7f:76:32:51:14:f6:6c:ae:75:5c:e2:ed:bd:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:90:5A:2F:DF:63:36:C5:D2:93:DE:06:BE:AD:5F:8D:13:FF:D5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D85CC530F9B911EDB7EE83794AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.119.0/24
Signature Algorithm: sha256WithRSAEncryption
73:08:50:3d:a9:2f:90:07:a1:b9:6d:bc:72:e7:e2:0f:32:0f:
aa:06:61:e3:6a:e1:bd:0e:b1:42:37:73:21:92:23:39:77:46:
02:fa:89:ca:24:cb:8a:ab:97:93:c7:fb:50:40:33:73:41:7b:
e0:ab:b4:9d:bb:b3:af:da:44:5f:65:fe:f9:32:4f:67:c1:6f:
fc:c5:b9:66:06:b7:c1:3e:fe:d8:f6:fb:82:50:a4:f7:cd:7f:
bb:c1:7e:a5:03:66:ce:bd:61:6d:76:b5:71:bb:c2:0f:15:7a:
c0:1d:a5:22:f2:c8:62:1a:62:39:a2:4d:0a:c2:32:fa:d3:41:
a8:89:78:f2:47:3f:8f:c7:bc:d6:de:ad:3d:06:88:b9:17:24:
59:dc:eb:15:fc:19:7b:fb:e5:fe:14:bb:d0:c7:6d:a6:e4:53:
d5:00:56:d3:91:1f:3f:86:66:9e:f7:f6:75:54:95:5c:d7:10:
f1:69:70:da:ab:dc:11:cd:50:8d:5c:67:05:b6:e4:0b:67:7c:
64:2e:76:7e:4e:f8:12:bb:cb:df:e8:44:6d:c4:78:52:82:e7:
07:d4:64:6e:eb:3f:08:aa:79:d0:5d:29:e1:45:34:21:59:71:
7c:ef:07:ee:84:e9:f8:91:83:71:49:e3:db:ee:de:c2:41:38:
9e:cf:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:13 2024 by rpki-client on console-ams.rpki-client.org