Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECB5F032194111EDBC02FAF2F1222468.roa
File: ECB5F032194111EDBC02FAF2F1222468.roa (raw, json)
Hash identifier: xTYIZFBHLjZUcjfer6jGDp+ewHt0VeeJYFhcUR9vh70=
Subject key identifier: CD:DC:B2:29:E0:8A:28:36:44:39:F0:22:86:3A:01:3A:88:39:32:9A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0933
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECB5F032194111EDBC02FAF2F1222468.roa
Signing time: Thu 11 Aug 2022 06:50:45 +0000
ROA not before: Mon 15 Aug 2022 06:50:42 +0000
ROA not after: Thu 15 Aug 2024 06:50:42 +0000
asID: 17216
IP address blocks: 154.16.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355 (0x933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 15 06:50:42 2022 GMT
Not After : Aug 15 06:50:42 2024 GMT
Subject: CN=62f4a6c5-48e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:32:26:ae:57:8b:89:ba:f6:e2:60:c2:91:
68:09:24:e0:19:59:41:f2:7f:16:a1:aa:65:fc:d9:
27:38:14:2b:36:95:72:11:37:67:c0:da:00:0c:2c:
6c:f6:62:35:01:cd:be:9d:d0:2c:35:52:e9:85:31:
f0:13:48:2a:e5:74:2a:b6:a1:c6:96:9d:d0:09:28:
d5:dd:67:c6:30:9f:f4:45:d3:af:ae:6f:f8:d3:b1:
aa:f2:20:b8:a7:69:05:3e:d4:bc:d8:1f:70:0e:a1:
de:e8:12:3a:23:60:62:ca:3f:54:e7:fc:07:2e:d6:
3a:9b:9e:2e:3a:82:30:53:ed:97:86:a8:09:d1:61:
af:82:b9:de:71:49:10:0a:4c:43:55:05:19:3b:84:
da:5d:8b:0d:73:4d:a0:e2:df:35:7d:4b:17:dc:c2:
a0:eb:75:d5:77:15:da:b9:7c:b7:e1:da:43:db:65:
72:3c:e1:fd:b7:32:00:74:ae:53:d5:d1:33:e8:3e:
18:46:f7:1e:af:94:0f:31:c1:28:02:8e:b2:7f:f3:
0a:e9:1a:ef:cd:97:bf:ac:6f:b0:5d:15:81:e8:2e:
89:04:81:fa:33:4d:b7:30:1a:6b:a3:75:22:be:1d:
ea:bb:6e:2d:ec:07:75:4e:a5:18:29:f2:de:4c:ea:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DC:B2:29:E0:8A:28:36:44:39:F0:22:86:3A:01:3A:88:39:32:9A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECB5F032194111EDBC02FAF2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.168.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:1b:c7:ca:b0:11:f9:dc:85:48:73:13:0b:2c:21:ea:3f:4e:
35:08:17:43:88:c8:79:15:3a:fb:f8:04:75:78:b8:ce:cb:8f:
02:07:c2:29:4a:14:7d:6a:60:d6:6c:af:04:52:7a:b1:9e:5e:
18:d0:31:f4:ec:e3:a5:80:92:ac:7c:a9:17:b2:79:1f:14:e5:
cb:7c:ff:77:e3:2b:1c:2f:db:95:4d:32:f8:04:0f:f4:d0:57:
1e:8f:c4:87:1d:ba:47:19:6e:33:b5:be:bc:8b:aa:e4:7e:f0:
a9:d9:7a:98:5f:c8:d2:a3:83:32:32:94:b9:4a:27:80:c6:41:
36:3d:72:90:25:4e:70:31:5b:82:dc:ac:f1:f7:20:2b:1d:0e:
b4:41:61:a7:8d:23:ed:c1:57:a0:b8:8a:22:d7:16:b6:ef:ea:
24:48:7a:f7:2f:f4:ce:7e:9d:ed:f4:b3:46:37:c3:23:d2:e2:
d4:1a:8b:03:df:d1:72:8d:65:98:97:79:fe:be:0f:e0:be:f4:
f9:f5:ac:79:98:d5:8f:65:bc:8b:93:04:df:3e:da:ac:cd:df:
60:8d:60:44:53:a2:db:06:f1:01:58:31:63:44:9f:81:7c:7c:
0e:98:c7:85:c8:f9:43:7e:c6:62:ad:19:b1:a9:59:7a:70:90:
5e:0a:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 11:25:23 2024 by rpki-client on console-fra.rpki-client.org