Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD46C4E454A111EFB2DE6C66762E951A.roa
File: DD46C4E454A111EFB2DE6C66762E951A.roa (raw, json)
Hash identifier: 8V5pOKFYrb4a19b03J5mFEBpgzOT23eh/oNyA7gEM10=
Subject key identifier: F1:F7:0F:E1:A8:78:94:D3:16:FE:F8:27:1B:13:76:FF:15:D4:C5:DA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1784
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD46C4E454A111EFB2DE6C66762E951A.roa
Signing time: Wed 07 Aug 2024 09:46:05 +0000
ROA not before: Wed 07 Aug 2024 09:46:02 +0000
ROA not after: Fri 07 Aug 2026 09:46:02 +0000
asID: 14670
IP address blocks: 154.16.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6020 (0x1784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 09:46:02 2024 GMT
Not After : Aug 7 09:46:02 2026 GMT
Subject: CN=66b3425d-e549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:1d:cd:91:ce:af:9f:81:04:d8:56:8d:68:
91:b9:d4:25:0e:3c:a6:32:9b:29:2f:dd:12:8e:75:
7e:68:8b:a0:33:a8:7a:fe:44:4b:70:13:ce:d4:9b:
96:eb:4c:fa:bd:11:9a:0c:86:76:48:ca:3a:20:41:
95:be:fc:81:2c:fe:e3:d0:7c:2d:4f:ef:fe:f8:ec:
40:ca:8e:82:8a:42:83:ce:50:a1:ac:c5:66:8b:14:
ff:b7:f3:84:54:7e:7d:31:af:4a:60:8c:bc:18:37:
ed:95:c9:03:78:26:8a:d0:7c:fa:8d:2e:c4:5e:27:
d8:fc:34:b7:00:82:37:72:31:17:b0:41:1d:52:0e:
0b:d8:18:f3:45:3c:c0:ab:07:94:71:5a:38:55:d1:
76:61:98:4a:80:56:3f:3a:fc:05:ad:49:51:99:52:
08:74:1c:62:ee:ba:fa:7e:2b:a9:8c:4d:03:67:85:
66:66:85:7c:fb:00:ad:95:b9:eb:f5:fa:28:0b:4a:
65:b5:5d:e7:69:30:74:e0:70:52:ee:b8:3b:8a:17:
5c:01:d7:c7:6f:f0:31:5e:3b:a3:1b:2f:0b:30:9c:
c0:8c:24:22:b9:7a:1c:49:c5:4b:03:08:69:c6:0a:
11:32:29:12:24:88:c7:e5:84:b3:9d:36:d5:c5:f4:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:0F:E1:A8:78:94:D3:16:FE:F8:27:1B:13:76:FF:15:D4:C5:DA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD46C4E454A111EFB2DE6C66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.114.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5c:04:47:1c:b7:24:2a:5d:18:74:e5:de:08:18:01:96:10:
9c:e8:99:7c:14:ef:1b:3f:fe:c7:f2:24:d5:57:80:c3:48:65:
74:fd:e4:fb:85:bc:a3:76:c8:02:9e:05:c6:c0:9b:d8:4a:c2:
cf:7d:dd:fa:d6:da:b5:3e:61:60:83:46:ab:d0:be:d5:25:61:
b2:fc:c5:d9:d0:81:30:d0:38:e3:49:bb:f4:9e:f8:a7:a0:e5:
61:f8:ae:a4:ed:f8:ec:d5:ff:60:5c:c8:cd:cc:80:5d:23:a8:
1a:c6:5b:51:de:c3:8c:9e:0c:ec:d8:e7:23:fb:63:ea:7d:33:
de:4d:72:70:7c:f0:44:87:e3:33:11:06:a2:be:9e:ea:a3:85:
df:1c:e8:61:43:25:2a:2a:ab:0d:aa:51:d8:01:6a:b8:96:64:
0e:e1:8e:97:c4:01:57:ab:b6:e1:be:3e:ad:c1:31:d3:92:b6:
d8:91:41:92:88:2d:d8:82:b1:14:4f:2f:a5:3b:25:26:df:cb:
9b:4b:fb:2f:03:09:8f:a6:33:f7:ac:0c:c7:93:e9:f7:0b:c2:
93:b6:2d:70:c7:70:b5:7b:06:ed:eb:86:31:58:b6:a1:0a:ad:
a5:d1:71:39:ff:2a:dc:37:e2:7d:71:46:31:5b:2e:32:a7:8d:
66:81:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:33 2024 by rpki-client on console-fra.rpki-client.org