Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F88D3E7EB2D211EF99AEA2B3762E951A.roa
File: F88D3E7EB2D211EF99AEA2B3762E951A.roa (raw, json)
Hash identifier: WoB8QanNEHc3ZpNSqGDN0jqQeD1PWd/8Z8N7te1b34Y=
Subject key identifier: B7:2E:16:CC:77:BF:84:BC:79:E0:98:31:E4:AE:CE:47:97:8E:E9:F3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 192E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F88D3E7EB2D211EF99AEA2B3762E951A.roa
Signing time: Thu 05 Dec 2024 06:34:25 +0000
ROA not before: Thu 05 Dec 2024 06:34:22 +0000
ROA not after: Sat 05 Dec 2026 06:34:22 +0000
asID: 262287
IP address blocks: 154.16.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6446 (0x192e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Dec 5 06:34:22 2024 GMT
Not After : Dec 5 06:34:22 2026 GMT
Subject: CN=67514971-2498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:26:f6:81:ce:68:d3:a6:da:64:d8:f9:ee:
6c:93:d1:3c:2b:67:c2:b5:b1:b6:49:96:fa:79:e1:
1d:02:d1:29:7a:46:b6:ba:7b:5b:74:09:04:22:63:
9b:24:35:2b:00:68:9c:b3:1f:9a:65:d0:82:16:e5:
91:a4:c9:b4:6a:cf:6b:f7:f6:6a:c4:27:b7:ac:c9:
df:05:06:8f:1a:cf:be:6b:22:fe:2a:df:a1:55:f5:
70:0d:0c:26:d1:36:e9:43:a7:c1:7e:c3:12:bf:8d:
29:d2:27:64:84:cc:09:83:d2:6d:83:44:20:0e:37:
65:ff:7d:16:11:15:60:f1:32:85:85:d1:e8:f1:ff:
df:c1:a3:6c:6b:1f:e3:fd:9a:cd:4c:4d:65:d7:4d:
81:41:41:1d:48:7c:b9:d9:d3:16:64:31:0f:5c:8b:
31:d5:9e:9b:46:bf:ea:ce:2e:85:1c:2e:f2:3b:c5:
ae:d1:0c:41:3e:5c:c4:cc:e2:42:37:20:e1:9b:e9:
7f:77:33:89:87:da:d6:b9:8a:37:c0:c2:da:46:6b:
d5:29:5b:c5:09:10:9e:90:ab:12:f6:4f:82:f4:bf:
69:96:74:d8:54:1d:2f:18:17:1e:69:a0:6d:c0:9c:
bc:49:2c:7c:d0:d8:51:42:a3:f8:bd:e4:22:c4:fb:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:16:CC:77:BF:84:BC:79:E0:98:31:E4:AE:CE:47:97:8E:E9:F3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F88D3E7EB2D211EF99AEA2B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.59.0/24
Signature Algorithm: sha256WithRSAEncryption
39:61:4f:2c:61:e5:c7:7c:9f:30:fb:dd:09:9e:28:69:a2:af:
96:1c:24:5b:7c:e2:b8:4d:aa:ff:1c:9b:c7:9a:cd:8e:91:43:
65:7e:dc:62:27:55:7a:4b:84:d9:22:4b:61:6a:0e:23:be:19:
2c:44:c2:3f:10:b0:d6:07:cf:51:fc:b6:be:26:b7:e3:b6:1b:
8c:62:b6:ed:7d:8f:f0:88:d4:55:a8:89:21:d2:9a:49:c4:fe:
41:e7:41:77:e0:0e:96:42:9f:5c:a5:70:2a:dc:aa:92:81:dd:
1c:d6:8c:87:b1:4d:0b:39:be:e0:24:5b:7d:36:13:5b:3e:56:
9f:e7:39:d4:17:58:e6:e3:93:12:2c:16:b0:ea:65:3e:c1:ea:
06:66:a6:3d:4e:8f:ca:e2:ae:f3:ad:06:c4:f4:b2:da:43:fb:
c1:b2:cf:2b:84:db:3b:5d:cd:23:50:c5:d8:23:f5:23:6a:d7:
32:be:26:b2:11:06:a2:77:77:48:aa:9a:a3:4e:4d:ad:65:54:
2c:9a:6c:61:4d:17:2f:d4:b6:3d:b5:1f:01:c2:41:31:f2:23:
12:36:5f:81:32:ed:04:0c:1c:2a:66:2f:c0:75:6a:62:6c:15:
81:a7:e6:09:99:6e:a7:d6:37:01:05:ee:e8:51:b0:7e:fd:6d:
7d:6b:a4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:54:26 2025 by rpki-client