Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747D86D08C1D11EDA7F835BDF1222468.roa
File: 747D86D08C1D11EDA7F835BDF1222468.roa (raw, json)
Hash identifier: KH12TfvbbTA4sJkCU1Ol3KqypcCv5qezkZJRammjfr4=
Subject key identifier: BE:7F:7E:C9:A1:AB:07:0D:B6:0C:83:6F:3A:B6:99:02:23:03:99:39
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B4C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747D86D08C1D11EDA7F835BDF1222468.roa
Signing time: Wed 04 Jan 2023 10:49:25 +0000
ROA not before: Wed 04 Jan 2023 10:49:22 +0000
ROA not after: Sat 04 Jan 2025 10:49:22 +0000
asID: 212238
IP address blocks: 154.16.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2892 (0xb4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 4 10:49:22 2023 GMT
Not After : Jan 4 10:49:22 2025 GMT
Subject: CN=63b559b5-e704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:9d:27:4f:1e:dd:dd:a5:ca:cb:8b:62:75:
db:bc:87:4d:df:16:6e:68:c1:e1:1f:bb:ff:31:54:
a7:29:f8:51:65:ef:62:73:d9:58:2d:59:8d:ae:78:
85:ba:24:a5:9c:76:ad:56:88:31:7b:d9:be:8b:82:
76:4e:ab:e5:cd:59:61:83:c5:60:06:ad:69:6c:ec:
48:13:ce:ae:1d:2f:c0:18:71:bd:58:8f:33:a8:7b:
c0:17:ce:1f:79:d2:ba:f0:6b:79:4e:0d:03:42:95:
c1:5f:22:d2:c2:bf:2a:af:13:e5:76:50:3b:88:65:
c3:1d:b4:32:1f:60:24:d4:40:37:b1:64:38:a0:55:
2d:cd:af:ee:1f:9e:85:e9:6d:1e:9c:3c:87:a9:e8:
21:e3:06:aa:c7:73:b7:dc:f4:85:1f:14:fe:ed:85:
7d:25:5d:3e:d2:c6:bd:90:22:47:2c:ea:0c:6a:c5:
09:81:bf:dd:97:64:6e:02:a3:ea:28:dd:13:7a:e2:
63:46:78:16:e5:ec:f2:9a:9f:08:55:5c:6b:a0:91:
72:14:4f:3d:64:76:90:48:94:14:d4:9e:4b:54:2c:
91:43:01:1f:ef:1e:bc:e0:51:9f:ad:8b:24:bf:7d:
14:4a:71:0f:23:81:1f:fc:1d:8e:35:ab:92:7c:4b:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:7E:C9:A1:AB:07:0D:B6:0C:83:6F:3A:B6:99:02:23:03:99:39
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747D86D08C1D11EDA7F835BDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:3b:50:ac:ce:c6:4c:57:02:ba:2a:75:bb:ad:7b:d4:2e:a3:
03:2b:3c:86:0b:51:70:32:22:72:12:e6:55:19:3d:77:67:7d:
fe:d3:4b:29:c9:a2:26:26:33:46:4d:f7:52:33:cd:37:02:fe:
d2:bb:06:20:75:9a:f5:31:eb:31:44:3c:1a:c2:16:c8:c8:77:
2c:33:15:88:91:80:d5:99:b7:7e:ae:b2:fa:51:a8:1e:ed:bf:
e7:ac:eb:7b:3b:3c:1c:cd:f6:c9:3d:37:cf:c9:e0:7f:da:4a:
79:d8:50:0b:d0:21:8a:d1:0f:24:8f:08:ad:3a:03:c2:87:c4:
6e:21:4c:56:47:69:e6:ff:6d:d0:f6:fa:ab:bc:dd:93:43:33:
1a:5c:5a:39:14:25:f3:f5:b5:23:3a:29:57:b4:7f:ff:25:1b:
c3:ac:da:d3:a5:17:c6:8f:f1:72:31:e0:2c:d8:8a:74:23:eb:
f4:72:69:38:b9:c3:69:e2:05:f6:90:53:7f:84:7a:8d:1a:c5:
d8:c9:fb:26:a3:09:aa:5b:f3:ec:bb:20:02:b3:e4:f4:fb:03:
4a:2f:c6:0d:84:cc:04:40:92:4d:9c:5f:3d:ed:7b:64:bc:64:
38:f7:a6:48:50:9f:07:6f:76:26:69:ee:07:07:cf:46:88:90:
e7:cb:d8:a9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAxMDQxMDQ5MjJaFw0yNTAxMDQxMDQ5MjJaMBgxFjAU
BgNVBAMMDTYzYjU1OWI1LWU3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZr50nTx7d3aXKy4tiddu8h03fFm5oweEfu/8xVKcp+FFl72Jz2VgtWY2u
eIW6JKWcdq1WiDF72b6LgnZOq+XNWWGDxWAGrWls7EgTzq4dL8AYcb1YjzOoe8AX
zh950rrwa3lODQNClcFfItLCvyqvE+V2UDuIZcMdtDIfYCTUQDexZDigVS3Nr+4f
noXpbR6cPIep6CHjBqrHc7fc9IUfFP7thX0lXT7Sxr2QIkcs6gxqxQmBv92XZG4C
o+oo3RN64mNGeBbl7PKanwhVXGugkXIUTz1kdpBIlBTUnktULJFDAR/vHrzgUZ+t
iyS/fRRKcQ8jgR/8HY41q5J8S2HtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvn9+
yaGrBw22DINvOraZAiMDmTkwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzc0N0Q4NkQwOEMxRDExRURBN0Y4MzVCREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEJUwDQYJKoZIhvcNAQEL
BQADggEBAH87UKzOxkxXAroqdbute9QuowMrPIYLUXAyInIS5lUZPXdnff7TSynJ
oiYmM0ZN91IzzTcC/tK7BiB1mvUx6zFEPBrCFsjIdywzFYiRgNWZt36usvpRqB7t
v+es63s7PBzN9sk9N8/J4H/aSnnYUAvQIYrRDySPCK06A8KHxG4hTFZHaeb/bdD2
+qu83ZNDMxpcWjkUJfP1tSM6KVe0f/8lG8Os2tOlF8aP8XIx4CzYinQj6/RyaTi5
w2niBfaQU3+Eeo0axdjJ+yajCapb8+y7IAKz5PT7A0ovxg2EzARAkk2cXz3te2S8
ZDj3pkhQnwdvdiZp7gcHz0aIkOfL2Kk=
-----END CERTIFICATE-----
Generated at Wed May 8 01:49:52 2024 by rpki-client on console-fra.rpki-client.org