Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E66A74FCCCCB11EEA179B09A775412E6.roa
File: E66A74FCCCCB11EEA179B09A775412E6.roa (raw, json)
Hash identifier: z82gEZ6OXUcPxCvcOOXXrF90JJaoEMuverYGRMXslQ4=
Subject key identifier: 9D:C2:8E:5C:17:EA:DB:0F:55:B7:71:6A:FD:5C:54:0F:4C:08:4F:13
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14BF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E66A74FCCCCB11EEA179B09A775412E6.roa
Signing time: Fri 16 Feb 2024 13:04:21 +0000
ROA not before: Fri 16 Feb 2024 13:04:18 +0000
ROA not after: Mon 16 Feb 2026 13:04:18 +0000
asID: 210576
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5311 (0x14bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 16 13:04:18 2024 GMT
Not After : Feb 16 13:04:18 2026 GMT
Subject: CN=65cf5d55-8356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:85:23:18:14:d5:a7:8b:de:3e:60:5b:5d:34:
21:9a:74:3d:f3:f0:2c:20:40:54:dd:f6:28:31:d0:
56:cb:1e:46:85:b7:e0:3d:59:d2:d6:15:b9:d1:77:
8d:a7:63:82:fc:a0:fb:65:5a:6e:74:fc:58:c9:61:
24:ad:be:0a:1d:be:10:c8:79:6d:ec:c5:7e:91:9a:
40:95:c9:86:89:b4:45:c1:04:16:dd:12:97:40:a7:
b9:66:af:8c:a7:c1:fa:2c:3b:2e:5b:7f:66:2f:91:
61:f5:71:b2:57:3d:08:ae:9a:18:84:d2:47:20:24:
1b:7e:df:48:08:bb:04:e3:64:c8:39:58:9b:a3:40:
56:f0:8a:78:31:99:99:44:7e:58:9a:e0:a6:bd:f6:
17:6d:c3:86:46:75:66:9c:d9:eb:ce:59:2c:90:50:
42:7d:0f:a6:8c:3e:95:30:0d:bf:f9:3b:7e:8f:6c:
9a:e3:b5:1c:9a:ef:76:cd:c2:15:01:47:68:50:25:
17:1f:a7:d3:73:9a:27:07:07:52:fd:d7:ec:56:a5:
c2:a6:1a:b1:8c:81:8e:d4:e2:12:5e:e7:9f:7b:4d:
b7:3e:e0:77:de:b6:b2:dd:fd:7f:dd:a2:4a:89:74:
a3:91:52:92:25:ec:e0:7d:7c:9f:10:8b:67:52:16:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C2:8E:5C:17:EA:DB:0F:55:B7:71:6A:FD:5C:54:0F:4C:08:4F:13
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E66A74FCCCCB11EEA179B09A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:51:38:a5:f2:fa:79:8e:fb:02:16:53:07:b4:c7:cc:b8:a5:
e5:09:88:97:c0:cf:1a:11:6e:b2:70:90:15:a3:0d:25:a2:66:
2b:9a:e5:c6:c8:c2:73:ac:13:83:53:dd:00:9a:b5:50:f6:e9:
67:77:ad:c5:88:dc:49:db:9b:e8:54:dc:b9:fe:22:39:20:b0:
f0:6c:c9:60:6f:81:31:65:d4:53:55:12:97:96:66:cc:7e:92:
98:fa:1b:47:28:4c:5d:e6:07:4c:65:50:69:d5:b6:dd:52:75:
8a:9a:28:6b:8c:f4:70:18:72:53:96:22:7c:ca:4c:02:6f:d6:
2e:6f:e0:9b:b9:fe:1d:16:8b:a3:14:fa:24:db:19:dd:18:8e:
af:7d:67:2c:ac:cc:53:db:28:ac:2b:d6:60:60:b1:7c:1b:3a:
88:56:a5:e8:f4:52:ec:77:3c:24:ef:1f:97:6b:71:6d:de:8b:
89:dd:cf:66:29:95:c4:6a:43:bb:42:4c:cb:b3:97:52:4d:a2:
65:c4:af:eb:d1:46:03:d9:32:44:10:3e:01:a4:6f:1f:ed:d2:
0b:c4:e2:e4:09:fd:6e:92:e9:54:ac:23:a3:b9:97:fb:69:ca:
a7:af:c9:4e:b4:c9:dd:da:65:ba:a3:c7:e0:da:56:79:c3:c6:
09:cc:7c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:24 2024 by rpki-client on console-fra.rpki-client.org