Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F21CCECE297011EFA4272D1F7DDC24C2.roa
File: F21CCECE297011EFA4272D1F7DDC24C2.roa (raw, json)
Hash identifier: dsnbuyEaNyo+eLTB8OobMVXtOvb+lI0KcYar7F8YUC8=
Subject key identifier: 2A:9C:26:B8:53:F9:AB:09:23:BB:C2:06:7C:37:B8:31:71:63:AB:AC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 16EA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F21CCECE297011EFA4272D1F7DDC24C2.roa
Signing time: Thu 13 Jun 2024 10:37:35 +0000
ROA not before: Thu 13 Jun 2024 10:37:31 +0000
ROA not after: Sat 13 Jun 2026 10:37:31 +0000
asID: 9009
IP address blocks: 154.127.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5866 (0x16ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 10:37:31 2024 GMT
Not After : Jun 13 10:37:31 2026 GMT
Subject: CN=666acbef-9df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:fd:c4:bd:b2:60:dc:8e:0e:86:c6:8d:49:
a8:97:40:e9:4a:98:df:7b:f4:72:59:7d:97:43:fb:
0e:87:b9:dd:62:7e:4e:52:c7:f8:d7:cf:cf:ce:60:
a5:db:5c:9b:fe:34:9e:df:a6:c2:ec:16:fd:09:2b:
1b:2e:be:40:37:b1:4c:53:77:fe:f7:25:95:3b:91:
32:53:6f:f4:4d:a5:8c:ce:1e:7b:04:0c:0e:3e:88:
7d:c2:f3:b1:51:ad:7b:18:6a:dd:cb:7a:7f:8f:c3:
64:d6:f2:ca:6c:63:15:fc:ab:4b:b4:f3:47:39:48:
b4:97:7d:ab:81:4a:68:3a:90:b0:0a:fe:18:41:77:
73:34:d1:67:58:b7:b9:bb:4c:41:fe:46:92:b1:5f:
ec:15:1c:25:c4:4d:d9:14:fc:52:01:f1:e7:c5:c2:
30:2c:7f:fd:f6:e8:3a:51:4b:1f:08:4c:83:4f:4f:
0e:93:c6:b1:a3:bc:bf:ba:d6:b1:8a:c7:9b:ba:31:
de:bb:41:fe:37:27:77:c6:06:8c:29:54:60:11:d2:
52:84:6d:57:57:00:9e:9b:32:41:e5:da:ab:31:72:
c3:a9:5b:bb:75:1f:da:ef:be:c4:de:08:86:cb:6f:
96:e1:42:5d:12:3f:11:62:51:47:a2:15:99:8e:4e:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:26:B8:53:F9:AB:09:23:BB:C2:06:7C:37:B8:31:71:63:AB:AC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F21CCECE297011EFA4272D1F7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:71:cd:be:09:f8:9a:92:5e:c3:95:7e:cf:ff:b4:b6:c6:c1:
36:46:c7:37:66:12:e0:cf:04:7f:39:3f:3f:25:6a:03:b5:6a:
0c:86:b7:3c:7d:81:17:bc:77:fc:80:9b:7c:9a:91:a7:93:7a:
37:ce:ca:ea:54:94:98:40:04:38:b2:dc:50:7f:54:65:a3:24:
0a:2c:8a:ba:bb:3e:6b:9e:2e:df:b1:98:3e:43:8e:82:d7:82:
9d:07:0e:e7:73:b8:e1:0a:a6:b0:c1:cf:d6:71:db:33:2d:a1:
da:7b:1a:82:ae:db:2d:e1:95:46:43:14:0e:95:70:0f:2f:4a:
41:4d:b2:d4:b6:00:76:79:c5:ff:30:fc:d4:63:9d:0a:ee:d1:
b8:10:23:d7:65:18:db:18:81:09:68:c5:ff:2b:69:a9:b1:53:
ff:05:9f:e3:01:95:8a:73:74:bc:ee:f5:c0:27:74:d3:dd:0f:
53:b9:14:98:66:3b:6e:a7:bd:8d:f6:6b:d5:64:6a:28:63:94:
cb:04:73:81:0f:31:5e:c4:28:c6:16:8b:08:5c:0d:d7:85:64:
47:a8:fc:e8:ef:98:c7:b4:a5:c0:71:01:2f:65:59:0f:a0:df:
73:3a:3a:94:8b:79:bc:4e:db:92:08:8c:87:5c:a5:fe:cd:73:
b0:44:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:28 2024 by rpki-client on console-ams.rpki-client.org