Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DA0D94CC47EC11EF84A17667762E951A.roa
File: DA0D94CC47EC11EF84A17667762E951A.roa (raw, json)
Hash identifier: RSI6WmNzeO+nfLRWco4Jeu2bHbPUEe/Gn/a4gbDzivs=
Subject key identifier: 66:31:64:0D:41:50:D0:1A:29:8A:0E:F8:B8:82:7F:82:65:CA:80:72
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 174E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DA0D94CC47EC11EF84A17667762E951A.roa
Signing time: Mon 22 Jul 2024 05:40:07 +0000
ROA not before: Mon 22 Jul 2024 05:40:03 +0000
ROA not after: Sat 25 Jul 2026 05:40:03 +0000
asID: 834
IP address blocks: 154.16.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5966 (0x174e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 22 05:40:03 2024 GMT
Not After : Jul 25 05:40:03 2026 GMT
Subject: CN=669df0b7-8853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:ed:29:b8:fe:6b:1c:3d:3c:72:d7:61:f7:
50:c9:fe:5b:48:d4:eb:88:f7:b3:85:4a:bc:bf:c1:
a4:3f:2f:0c:8c:58:68:2d:84:3e:2c:4b:0d:65:ec:
92:06:31:77:0b:84:6b:04:03:a3:f9:4c:9b:ca:4a:
e6:3d:a5:1a:d8:fc:f1:79:dd:a0:12:fa:0a:bb:bc:
6e:80:fa:a5:11:3d:0e:a1:8a:b0:9e:dc:82:a7:df:
77:dc:78:15:03:c5:85:36:bc:45:2a:48:1b:d1:82:
ce:79:fc:21:80:5f:e0:9d:08:af:47:37:2f:ed:cd:
ad:f7:6b:4f:79:f3:8d:f1:65:f9:f7:3a:10:79:b3:
c8:f6:42:2a:e2:f6:9d:d7:27:6a:a2:c3:26:d2:4a:
74:84:a6:7a:be:04:7d:f9:0e:ff:f9:fa:2e:15:5e:
19:c3:40:f5:51:93:0e:32:5d:82:73:3a:4a:4a:98:
25:e8:22:7c:86:23:0f:57:45:41:c5:62:aa:b2:12:
4a:71:6a:dc:fd:82:df:53:bd:61:d8:cc:b1:e3:a2:
df:da:38:1f:f9:30:96:a7:a2:98:e2:a1:e8:f5:dd:
75:6d:04:1a:57:a1:15:ea:3a:d6:aa:1f:dc:2c:19:
86:ef:b3:9b:a2:7e:37:ff:96:3f:82:60:70:a5:2e:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:31:64:0D:41:50:D0:1A:29:8A:0E:F8:B8:82:7F:82:65:CA:80:72
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DA0D94CC47EC11EF84A17667762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c4:c4:99:a8:6e:fd:66:aa:36:bd:fb:d2:5a:8e:36:9f:c6:
fa:00:27:27:d9:96:e6:bf:b8:e9:34:a6:c0:e0:08:4f:10:dc:
17:65:3b:47:a1:a0:dc:73:25:59:ee:b5:54:5a:78:df:8a:c1:
a8:9a:66:95:f3:14:b4:73:da:c0:1e:58:91:99:b4:d2:58:61:
30:6d:6b:a5:8d:ee:c9:de:ac:64:00:36:f6:80:8d:05:e4:68:
bc:63:3a:ae:25:5f:22:bf:63:54:bc:b6:04:59:2e:47:8c:05:
88:f1:1c:f8:75:84:bb:f3:3e:04:6c:aa:41:7a:fe:fc:5f:d7:
a3:17:e4:c4:66:92:85:26:97:ac:bb:58:ee:28:d1:60:13:fe:
20:e5:78:9c:bc:00:68:8e:00:32:b3:e1:70:8b:16:5b:77:51:
7b:69:cb:f0:22:c3:90:87:d0:64:9c:38:29:fc:74:8f:43:07:
90:32:e9:32:d4:bc:4c:3f:d8:58:ea:16:8c:43:9d:f3:74:bd:
c0:aa:d9:bf:82:d0:6b:3e:dc:42:5c:85:a3:d7:d0:43:27:ff:
4d:fc:00:5e:9a:8e:f6:34:9a:79:8a:99:65:14:1a:f2:86:7e:
d4:d7:cc:c4:59:25:4b:0e:27:4b:7f:66:72:ca:8d:2d:df:73:
85:a7:69:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:40:47 2024 by rpki-client on console-ams.rpki-client.org