Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9F9280C759411EF9191ABAA762E951A.roa
File: F9F9280C759411EF9191ABAA762E951A.roa (raw, json)
Hash identifier: TeOEs+xpdwkNl4klG5wdndyYbDiF6SrNh/aBIbb5zaQ=
Subject key identifier: 4F:4B:B2:60:A1:CC:5A:01:E5:F0:6F:FE:3C:F8:04:90:49:55:D4:0C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1816
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9F9280C759411EF9191ABAA762E951A.roa
Signing time: Wed 18 Sep 2024 08:06:58 +0000
ROA not before: Wed 18 Sep 2024 08:06:55 +0000
ROA not after: Fri 18 Sep 2026 08:06:55 +0000
asID: 212238
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6166 (0x1816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 18 08:06:55 2024 GMT
Not After : Sep 18 08:06:55 2026 GMT
Subject: CN=66ea8a22-a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:f1:9d:e2:3d:9d:08:ad:31:17:12:47:47:
d6:82:f1:10:9b:62:08:0d:04:16:96:89:9b:01:d2:
eb:2c:a2:6b:5f:c0:a7:11:38:04:70:22:db:36:fa:
5a:17:ea:17:2d:b7:25:65:73:34:cb:0a:d2:da:e9:
31:43:c4:84:1e:8e:4b:2b:0e:62:00:83:02:4e:50:
0b:09:8d:9f:b9:1c:5a:5b:91:0c:c4:d5:a2:3c:18:
2d:62:03:90:50:07:3d:1a:37:75:df:2a:ff:e8:f7:
ee:dd:e0:54:25:72:41:56:9e:d7:25:19:46:04:c8:
8e:3f:3f:74:6c:b9:a8:4e:46:a9:c2:f5:24:87:28:
6c:71:f9:a1:d2:60:f0:a9:c4:63:b1:8d:06:01:79:
46:6e:d6:43:96:71:1f:35:15:6b:74:2c:42:8f:34:
7e:04:da:2c:6c:e3:c8:e0:c0:c3:61:60:d0:7e:7e:
40:b0:63:cb:aa:3d:2e:40:ba:4e:91:24:25:a4:0c:
80:17:f3:aa:58:cd:85:10:0f:a4:b1:bf:d8:bf:92:
63:fb:fc:e0:5c:37:fd:08:e5:1d:ea:97:3b:af:85:
08:06:9c:f9:b2:df:f2:74:a6:9f:21:51:40:c6:47:
f9:73:67:27:d3:4f:9b:39:60:2e:5b:87:c9:05:84:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4B:B2:60:A1:CC:5A:01:E5:F0:6F:FE:3C:F8:04:90:49:55:D4:0C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9F9280C759411EF9191ABAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3e:84:dc:08:ea:08:6c:f5:27:b4:f9:ea:71:15:46:13:bd:
38:3f:e8:97:78:4f:8c:6d:ec:87:a6:ef:0d:f9:a2:48:1e:60:
0b:5c:fb:db:f6:6d:59:92:41:e8:cd:a3:cf:9f:95:71:e4:06:
e2:bb:06:34:c8:30:39:11:b2:dc:ac:35:c9:15:36:61:c8:fa:
f1:09:6f:83:60:17:ba:d2:ad:a9:7c:55:48:19:50:c8:53:23:
a8:de:0d:78:e6:36:1b:82:b0:21:57:7b:f7:51:96:d3:e4:0d:
59:be:2d:71:16:3d:14:26:d1:c9:58:ec:06:44:75:37:9c:4f:
95:98:ea:da:ba:57:b9:93:09:67:7d:39:96:f5:7c:b5:b0:1c:
60:f4:a9:54:08:9e:d7:d3:4b:21:b5:64:92:b9:e9:bd:db:d9:
eb:05:a0:10:22:54:d5:2f:08:c7:d0:1e:06:9f:b5:06:66:a6:
80:f9:db:e7:85:60:22:c1:f2:ac:96:d6:11:ab:3b:2a:bd:11:
4b:c2:4f:9e:43:c6:d1:52:7a:ba:30:48:83:f4:d3:9f:6a:95:
24:9a:e1:82:0a:2a:f5:c0:da:e2:88:42:98:ac:b4:a3:41:84:
6c:77:be:fb:0b:b9:5e:9d:4c:f8:48:ab:c4:51:68:76:d9:c9:
f2:38:20:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:47 2024 by rpki-client on console-ams.rpki-client.org