Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F7391FD0FA7111EEA488C711017001B1.roa
File: F7391FD0FA7111EEA488C711017001B1.roa (raw, json)
Hash identifier: 53R9Og1oZ413LR0tv/fnRobFikQb+RfucOWBD5gA+/g=
Subject key identifier: 70:65:5D:D3:6F:6D:D5:1A:5F:0F:59:85:DD:8A:B0:49:E8:32:07:B6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 15B5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F7391FD0FA7111EEA488C711017001B1.roa
Signing time: Sun 14 Apr 2024 15:16:28 +0000
ROA not before: Sun 14 Apr 2024 15:16:25 +0000
ROA not after: Wed 15 Apr 2026 15:16:25 +0000
asID: 7018
IP address blocks: 154.16.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5557 (0x15b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 14 15:16:25 2024 GMT
Not After : Apr 15 15:16:25 2026 GMT
Subject: CN=661bf34c-01e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:66:c6:fb:4a:61:f7:e3:56:97:44:fd:99:
61:3d:62:72:de:95:93:7c:30:be:b5:69:f1:b0:20:
ae:6f:97:2d:c4:17:63:c4:6b:7a:0e:44:98:c1:5e:
20:54:f6:40:32:76:a5:d4:de:83:eb:13:95:6c:21:
18:07:e9:4c:48:43:db:32:4c:c2:81:72:a1:e4:a6:
aa:57:6b:6a:15:c5:f8:43:7d:d9:09:e2:18:2d:89:
5d:09:84:80:27:4e:63:4e:31:5b:81:95:93:a1:e6:
3d:d0:82:77:0e:31:79:22:0b:58:91:6b:3d:46:8e:
92:a5:73:c9:f9:13:1f:9e:02:a8:82:1d:42:ac:3d:
5e:a6:44:f2:28:a5:9a:08:ec:52:c4:7d:a2:a4:0d:
0f:14:78:55:55:9f:09:12:e9:36:20:d6:db:fb:01:
05:06:43:5a:22:4d:09:a7:81:75:f1:d4:f4:ee:5a:
68:ce:45:61:ce:72:95:05:9d:9e:50:01:40:f4:39:
52:8d:2a:66:73:d6:d1:01:53:14:b0:02:26:d1:d9:
50:15:88:0c:02:0e:79:9f:a7:89:16:26:0c:70:a7:
d4:c4:9d:56:32:f1:42:c3:b2:88:ba:d1:e5:1f:9e:
b4:59:bf:b1:ed:f2:f1:76:0c:f0:af:5f:f9:1b:ee:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:5D:D3:6F:6D:D5:1A:5F:0F:59:85:DD:8A:B0:49:E8:32:07:B6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F7391FD0FA7111EEA488C711017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.26.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1c:15:a9:7d:3f:7f:f2:f8:99:a9:a2:9c:66:c3:b3:19:ac:
cb:fe:9f:e5:ad:9f:1b:3e:f4:0a:86:ee:91:fe:de:79:cf:b1:
74:4f:d0:57:b1:e7:28:fe:91:7a:17:6c:a2:6d:19:8f:7b:ca:
67:5b:6d:bb:eb:ba:30:bf:ba:05:f8:e4:21:0e:15:7b:4d:31:
2d:71:d4:a1:89:ac:0c:68:05:82:89:94:78:05:5f:bf:55:2a:
e7:a5:bb:d6:7a:2d:13:b4:b1:07:67:33:63:d5:6f:d8:ab:64:
62:69:cc:63:6d:48:62:72:dd:70:d2:3c:6b:82:77:a2:51:5e:
f1:e9:45:1a:69:9d:ff:e7:93:13:ed:ff:ff:66:cc:20:9e:e2:
6f:bb:75:10:c0:fc:55:a1:b3:97:e5:2c:a1:d9:77:0b:b8:11:
a3:75:74:5e:a7:1e:78:f6:18:62:37:e4:17:99:7f:c6:59:53:
5d:cd:be:13:fa:2b:92:cd:92:e8:17:65:d9:47:75:9d:9b:bd:
80:57:1a:4b:69:af:de:fc:47:97:2c:49:46:3e:60:9e:16:ae:
a7:2f:ac:34:08:bd:ab:b3:f8:d6:a0:8d:a2:0e:40:98:1a:02:
b8:19:9d:6b:23:88:ac:b7:7c:ab:83:fd:c8:ac:31:3d:d7:a8:
6a:e9:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:19 2024 by rpki-client on console-fra.rpki-client.org