Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F20891D6551711EDB04DCFF0F1222468.roa
File: F20891D6551711EDB04DCFF0F1222468.roa (raw, json)
Hash identifier: AVRvQgAk+/NC16Y16XmrrVm3WjkHECKhZTwnFKrbRDI=
Subject key identifier: C5:CA:23:4F:A9:EE:07:3A:B1:9C:E3:24:B9:99:4C:3E:C6:D4:EA:E7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A35
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F20891D6551711EDB04DCFF0F1222468.roa
Signing time: Wed 26 Oct 2022 10:21:25 +0000
ROA not before: Wed 26 Oct 2022 10:21:22 +0000
ROA not after: Sun 27 Oct 2024 10:21:22 +0000
asID: 212238
IP address blocks: 154.16.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 26 10:21:22 2022 GMT
Not After : Oct 27 10:21:22 2024 GMT
Subject: CN=63590a25-016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:1b:28:46:84:e9:75:a8:20:50:36:db:e0:
32:f6:ca:9c:55:93:0e:d3:50:ba:46:ee:d0:dc:89:
cc:f2:51:a7:ab:e5:3f:5a:14:07:0c:2e:ba:02:63:
8b:66:53:03:c7:f1:f5:cd:0b:dc:47:3c:cb:c4:52:
37:f4:2b:dd:bb:5a:db:84:eb:b1:ed:13:a6:c3:c9:
c3:f2:03:9b:d5:f2:4b:62:b3:19:bd:d6:13:18:84:
07:b3:2b:94:d3:9a:8b:be:81:3b:db:34:24:e1:62:
16:5f:0d:7c:8c:01:c4:b7:2b:18:e2:10:d2:9d:ae:
93:cd:76:cf:a1:16:a5:09:35:e0:fd:e2:39:e4:cb:
bd:a3:97:bb:fd:32:a3:d2:59:ad:7e:bf:2a:1c:05:
8d:de:46:03:13:16:e6:05:74:54:68:59:28:3d:15:
5c:cf:92:6e:ec:f4:e4:1e:17:81:04:41:5b:0d:0e:
89:d0:95:e9:a4:8c:e7:97:48:f0:09:8c:e9:69:28:
c1:97:de:9a:0b:4f:83:94:ed:f9:9c:ba:ea:ab:52:
33:dd:5f:8b:62:dd:f0:d0:f2:06:34:38:12:7f:bc:
c5:7d:14:c8:17:6c:12:b8:37:ae:68:07:6a:78:7c:
9e:b1:28:f1:62:10:9a:92:d5:73:79:bc:38:4f:9b:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:23:4F:A9:EE:07:3A:B1:9C:E3:24:B9:99:4C:3E:C6:D4:EA:E7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F20891D6551711EDB04DCFF0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.174.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ff:a1:38:24:b8:7f:11:b5:12:24:8d:39:bb:99:02:42:01:
54:9a:6f:79:d2:98:10:52:a2:be:db:a6:ad:77:b2:4a:f5:80:
66:16:ff:28:1c:c0:c8:fb:e6:26:43:8c:63:95:1c:6c:a7:13:
84:2d:20:09:22:19:58:9d:91:a4:54:87:89:16:e7:a3:ee:c7:
d9:fc:a5:2d:94:13:64:c4:e3:ad:59:04:20:6b:98:08:3d:7a:
57:b0:8c:cd:59:a6:fb:53:43:95:ff:85:73:e1:94:0e:04:c5:
6d:74:f8:00:50:e5:a5:fc:c6:a1:c6:8e:d3:a9:ee:6c:59:4a:
77:5c:4d:4c:03:9d:f5:5c:5c:53:af:8d:1c:29:b4:d3:f8:72:
dc:a4:e1:f5:49:20:5a:31:ea:c2:01:e1:a1:1d:44:32:f5:d9:
e0:9c:f0:3b:36:51:c4:e3:3f:0a:da:73:48:de:af:7b:47:a1:
90:15:94:83:b7:3e:a2:ac:62:ea:22:b5:6f:6c:9a:16:a2:63:
73:a5:92:be:a7:a0:96:5c:ad:42:31:ef:d7:5a:e2:d1:5d:8f:
fd:0d:69:a5:42:96:66:69:1a:07:58:59:5f:34:02:93:08:cd:
e4:58:7a:e0:2b:40:eb:d7:db:a3:2a:37:c2:41:50:b4:41:97:
4a:18:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 18:16:00 2024 by rpki-client on console-fra.rpki-client.org