Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED98E71AB8F711EDA7F3B0F3F1222468.roa
File: ED98E71AB8F711EDA7F3B0F3F1222468.roa (raw, json)
Hash identifier: Unzzx1cdMJbqSGFdBGCeNI2vR3D58HmzT9GQu7K6Wt8=
Subject key identifier: 04:63:68:84:78:82:BA:21:22:04:A1:91:2E:D9:7F:B4:0A:A9:C4:54
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CB0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED98E71AB8F711EDA7F3B0F3F1222468.roa
Signing time: Thu 02 Mar 2023 12:44:10 +0000
ROA not before: Thu 02 Mar 2023 12:44:06 +0000
ROA not after: Sat 01 Mar 2025 12:44:06 +0000
asID: 61317
IP address blocks: 154.16.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3248 (0xcb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 12:44:06 2023 GMT
Not After : Mar 1 12:44:06 2025 GMT
Subject: CN=64009a1a-8bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:fb:43:7b:7a:c9:b7:f7:1b:dd:4e:27:9f:
23:e2:bd:05:e2:47:a8:75:ff:a4:70:d4:46:1d:6f:
77:65:8a:b2:50:a0:3e:a1:64:ec:42:b5:dd:d2:ac:
30:85:0f:4e:28:bb:ad:4d:67:98:0b:54:5c:92:7b:
ab:80:09:c2:a6:7c:28:30:69:01:af:c7:5c:0f:4d:
ff:3a:3f:23:fa:99:61:7d:80:3d:c1:2c:06:3f:05:
50:02:ce:de:fa:6a:32:f7:b5:f6:ad:90:10:ff:f9:
e6:d6:36:74:ba:5f:99:c6:11:35:2b:96:65:04:e4:
91:01:f4:6b:c9:35:39:8b:ef:19:e5:ea:8f:c4:51:
4e:46:72:aa:72:86:f5:76:0a:65:5c:0e:1f:db:19:
e3:e3:4a:d1:38:73:a6:b2:66:5a:71:fe:90:f0:8d:
13:be:09:2a:fd:73:b4:f5:d7:d2:85:c5:cd:af:2e:
73:78:37:3c:9f:6e:61:13:2b:d0:3a:eb:92:f4:dc:
4b:d1:2a:76:8c:4a:2d:e3:22:96:a1:32:f8:25:d3:
ff:6a:71:1e:da:7b:91:73:19:9a:87:f8:d4:43:13:
80:65:ed:20:d5:49:0b:fa:ee:c5:aa:7b:9d:75:a3:
d6:8e:2e:24:94:cd:26:aa:0b:06:b1:21:86:92:b5:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:68:84:78:82:BA:21:22:04:A1:91:2E:D9:7F:B4:0A:A9:C4:54
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED98E71AB8F711EDA7F3B0F3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.227.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ea:c2:2a:8d:92:1d:7f:36:53:f0:6f:73:e1:f8:ba:5e:14:
f5:96:f6:e0:fd:4a:d1:f6:87:49:26:c4:64:5b:b7:a4:74:83:
28:e5:73:c5:03:c1:cb:fe:64:7f:37:c8:9a:ba:62:39:dc:60:
7d:0f:45:e8:f7:c4:3a:50:44:d0:14:0f:84:97:e8:6c:f9:fe:
67:fb:08:43:3d:f5:0e:65:22:8c:a4:0b:7a:10:91:bb:36:9e:
29:25:c2:f6:69:1c:9e:01:67:3a:fc:7b:48:aa:3c:7c:17:79:
61:98:0f:55:06:d9:48:50:29:aa:1e:cf:db:fc:42:2b:2d:71:
ec:75:3d:4c:db:11:78:a3:45:35:69:c2:6d:cd:91:47:6a:d7:
ad:05:d9:a5:b9:19:88:29:11:1b:32:b9:4f:6c:ef:0b:d5:64:
f5:49:31:4c:4e:41:a6:34:c6:66:01:5d:6c:bd:79:8f:be:45:
87:16:5d:21:1c:c5:48:2e:bc:fb:0e:b9:d4:88:7e:ee:5c:23:
d9:41:89:4c:d6:7d:28:2f:d1:32:9c:7c:00:a3:24:75:15:7c:
cd:66:d6:80:16:b1:2d:65:f7:fb:71:22:f4:34:fa:74:2c:04:
37:2f:a2:48:69:b0:6b:b7:ff:d6:e9:7a:e6:48:b7:f3:0c:08:
ee:37:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:38:53 2024 by rpki-client on console-ams.rpki-client.org