Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB11176D54811EE8291EE8C775412E6.roa
File: 7CB11176D54811EE8291EE8C775412E6.roa (raw, json)
Hash identifier: /vQlUE+8sfncq7+5nfhEKvv2xpWI6zQG2XYdhWB4vIQ=
Subject key identifier: 4D:19:F0:39:F1:40:2D:4D:81:F9:15:72:63:95:92:59:30:8E:49:56
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14EA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB11176D54811EE8291EE8C775412E6.roa
Signing time: Tue 27 Feb 2024 08:16:20 +0000
ROA not before: Tue 27 Feb 2024 08:16:17 +0000
ROA not after: Fri 27 Feb 2026 08:16:17 +0000
asID: 201341
IP address blocks: 154.16.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5354 (0x14ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 08:16:17 2024 GMT
Not After : Feb 27 08:16:17 2026 GMT
Subject: CN=65dd9a54-3b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:76:b9:f1:e1:81:59:ef:10:16:b8:06:fc:
f6:25:93:66:b4:f3:68:44:36:d7:57:68:48:e8:88:
cf:50:b2:61:a0:b3:6d:10:5a:fe:be:b3:c0:1b:b0:
b1:0e:94:74:a8:90:17:43:2a:af:ef:43:51:3b:c8:
a3:d1:f9:90:46:40:9d:99:b2:38:39:ce:03:7f:0c:
1f:e4:b2:59:32:24:79:f4:74:64:12:51:66:b0:c6:
a6:a4:bd:b6:9a:fd:63:fa:ef:48:c0:a2:1b:48:d9:
38:87:1e:7c:4d:eb:b3:fa:38:d9:0a:64:8f:aa:16:
78:3b:0f:41:ed:76:95:52:73:e7:e7:c8:93:d1:f6:
93:c9:b2:e9:c7:59:0f:ed:f7:40:fd:0a:77:17:ae:
dd:70:10:de:19:7b:5d:e2:fa:c5:65:93:43:93:bc:
27:57:33:5d:3a:8b:5d:9c:fa:67:60:1c:8c:ae:2b:
29:1b:d6:5a:b3:e3:1d:28:d2:23:2b:06:fa:b2:45:
a7:c6:14:34:8f:74:ad:24:47:1c:07:6d:2f:15:cb:
2b:f6:d7:20:76:ff:82:8b:b4:02:0c:42:7c:3b:ae:
44:0b:cb:77:b5:04:b4:f6:c9:ce:14:98:69:76:69:
39:1c:0b:43:37:1c:54:51:a3:ac:59:b3:50:cf:88:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:19:F0:39:F1:40:2D:4D:81:F9:15:72:63:95:92:59:30:8E:49:56
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB11176D54811EE8291EE8C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e5:79:d6:8c:96:04:0b:0a:eb:80:9d:82:70:32:13:94:a0:
49:a1:a6:fe:8b:4a:d6:39:db:8f:28:d2:1a:4d:e7:16:66:bc:
eb:97:37:9e:a7:d6:3c:64:4e:27:36:80:ae:02:ab:63:12:85:
46:bd:29:9b:59:22:9f:de:87:57:1d:76:77:b3:09:83:1d:44:
a9:c3:18:66:e0:c0:78:02:32:2f:69:d0:09:2a:51:88:f2:26:
b8:18:1f:9b:52:b4:36:8c:64:42:89:02:d6:03:98:a3:eb:f3:
a7:7b:44:d0:3e:b5:2c:c0:d4:19:2c:23:75:1c:db:5f:40:a8:
f2:67:07:15:83:80:ac:66:98:a9:d8:67:02:46:6a:33:3e:bf:
cf:be:33:14:21:f8:d1:f6:e9:1c:1b:c3:8d:f6:ab:b5:6b:d4:
bc:b4:08:4b:fa:51:de:9e:ec:b3:10:f8:67:71:08:0b:da:4d:
8b:1c:65:6e:17:89:ad:e8:f8:83:c7:29:4b:18:cb:e8:cf:c0:
98:12:36:48:f7:3f:51:e1:ad:61:09:b9:2c:ed:0c:39:de:9d:
2d:1f:6c:68:6b:00:33:be:09:b4:95:e7:08:6a:a0:88:73:0f:
b7:03:6e:f0:d2:ca:14:d2:44:85:63:ec:90:a0:41:18:89:72:
e3:72:62:f5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFOowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDAyMjcwODE2MTdaFw0yNjAyMjcwODE2MTdaMBgxFjAU
BgNVBAMTDTY1ZGQ5YTU0LTNiNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxuHa58eGBWe8QFrgG/PYlk2a082hENtdXaEjoiM9QsmGgs20QWv6+s8Ab
sLEOlHSokBdDKq/vQ1E7yKPR+ZBGQJ2Zsjg5zgN/DB/kslkyJHn0dGQSUWawxqak
vbaa/WP670jAohtI2TiHHnxN67P6ONkKZI+qFng7D0HtdpVSc+fnyJPR9pPJsunH
WQ/t90D9CncXrt1wEN4Ze13i+sVlk0OTvCdXM106i12c+mdgHIyuKykb1lqz4x0o
0iMrBvqyRafGFDSPdK0kRxwHbS8Vyyv21yB2/4KLtAIMQnw7rkQLy3e1BLT2yc4U
mGl2aTkcC0M3HFRRo6xZs1DPiCfdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTRnw
OfFALU2B+RVyY5WSWTCOSVYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzdDQjExMTc2RDU0ODExRUU4MjkxRUU4Qzc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEC0wDQYJKoZIhvcNAQEL
BQADggEBAHLledaMlgQLCuuAnYJwMhOUoEmhpv6LStY5248o0hpN5xZmvOuXN56n
1jxkTic2gK4Cq2MShUa9KZtZIp/eh1cddnezCYMdRKnDGGbgwHgCMi9p0AkqUYjy
JrgYH5tStDaMZEKJAtYDmKPr86d7RNA+tSzA1BksI3Uc219AqPJnBxWDgKxmmKnY
ZwJGajM+v8++MxQh+NH26Rwbw432q7Vr1Ly0CEv6Ud6e7LMQ+GdxCAvaTYscZW4X
ia3o+IPHKUsYy+jPwJgSNkj3P1HhrWEJuSztDDnenS0fbGhrADO+CbSV5whqoIhz
D7cDbvDSyhTSRIVj7JCgQRiJcuNyYvU=
-----END CERTIFICATE-----
Generated at Tue May 21 01:46:36 2024 by rpki-client on console-fra.rpki-client.org