Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E30418D6856211EFA4EF87A3762E951A.roa
File: E30418D6856211EFA4EF87A3762E951A.roa (raw, json)
Hash identifier: sRY49Q/muELuMFI4b3U8glOHCF2ycO3t3NsvTDBGNWI=
Subject key identifier: 79:C3:23:C5:2D:DA:1B:FF:67:30:F4:55:9C:21:D3:0E:C3:C6:C5:8E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1850
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E30418D6856211EFA4EF87A3762E951A.roa
Signing time: Tue 08 Oct 2024 10:48:43 +0000
ROA not before: Tue 08 Oct 2024 10:48:40 +0000
ROA not after: Thu 08 Oct 2026 10:48:40 +0000
asID: 212238
IP address blocks: 154.16.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6224 (0x1850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 8 10:48:40 2024 GMT
Not After : Oct 8 10:48:40 2026 GMT
Subject: CN=67050e0b-5f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:54:bb:07:47:8d:a3:17:b8:2c:47:bb:8b:
70:10:6e:82:d7:f0:fb:ea:83:7a:8c:6a:55:1e:5d:
9d:0c:b4:b3:b5:fe:81:68:10:c5:8f:2b:b4:2a:4f:
0c:6f:01:0b:d2:cf:73:90:df:a9:bd:1b:ca:c1:2a:
61:cb:9d:61:aa:30:2e:ac:52:98:ac:86:c4:a6:f8:
b1:d9:01:d9:d4:b6:69:b6:5a:04:d2:1b:21:2f:fc:
2c:9f:3e:d5:a6:05:8f:cd:f7:0b:5b:09:a4:8e:19:
9f:21:73:22:e0:89:ce:b5:2c:ce:96:c7:11:b8:f9:
cb:b7:e0:62:ff:ee:74:c7:2f:b2:2e:5b:f2:65:96:
74:e3:7f:0e:2e:fa:dd:a2:07:db:05:2b:d6:2f:d2:
df:e3:7a:1d:53:ab:e1:53:b8:90:5a:9b:47:02:72:
04:85:59:0f:ad:37:07:5b:ef:3b:5e:f2:09:95:bd:
87:72:4a:86:6d:81:27:b1:57:f2:6f:ea:7c:a3:8e:
12:4b:c7:bb:38:5b:44:6b:13:b7:93:21:1f:01:1c:
ad:cc:46:20:4d:fe:0e:3f:6a:4a:32:99:15:13:58:
d4:da:5c:0b:69:3f:e6:26:53:9e:be:ea:82:86:ad:
9e:ef:d4:5d:3d:06:b9:d9:c1:5e:66:e0:e4:dd:82:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C3:23:C5:2D:DA:1B:FF:67:30:F4:55:9C:21:D3:0E:C3:C6:C5:8E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E30418D6856211EFA4EF87A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d9:2f:44:2f:a1:51:2f:04:8c:27:7f:22:3f:73:32:76:b8:
cd:d3:fb:a1:6f:ed:a8:47:05:a7:d5:bd:c8:1b:a6:a3:45:42:
88:ee:5f:af:df:6b:79:dc:d7:c6:19:d9:a4:3d:1f:a9:f7:61:
b5:12:f2:d2:4a:68:93:51:7e:4c:f1:5f:f9:ab:3c:0e:ef:76:
04:78:4a:5a:72:df:b4:28:77:9f:3d:7a:16:70:74:f0:52:5b:
11:a0:fe:96:bb:15:3e:ee:98:18:ad:25:d5:8f:1f:91:98:da:
8b:db:a8:05:fb:60:8e:c8:3b:8d:1c:32:69:84:7d:3b:a7:88:
f0:bc:c9:b0:77:d3:bc:37:cf:2b:02:c0:0e:52:89:41:e1:77:
c0:73:42:de:68:10:28:15:65:7d:54:25:b8:1f:25:ea:ad:0c:
00:86:1a:5f:15:a4:b7:ed:12:74:c8:59:02:7f:94:81:4d:c5:
46:2a:64:2e:73:ab:d9:b5:57:c1:01:e1:58:f1:cd:12:a6:96:
29:b6:41:42:66:f8:bb:ff:2b:ef:c5:f4:eb:02:bc:d1:7a:f9:
af:76:e5:68:8d:d1:ae:37:e5:1c:d6:e4:41:0e:47:5e:15:8a:
ca:8a:82:fc:43:ca:8c:35:1b:6d:8d:ac:75:b7:8b:7f:e3:98:
fb:2a:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:47 2024 by rpki-client on console-ams.rpki-client.org