Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0325F4DE891D11ED8BC31FF4F1222468.roa
File: 0325F4DE891D11ED8BC31FF4F1222468.roa (raw, json)
Hash identifier: aO6WiZgubm4Jf8R6GR4scMeUd6nO8MAQ3s0JdlhcimE=
Subject key identifier: 4C:27:2C:CD:B0:09:43:4A:3F:DE:7B:41:93:AF:B7:56:C8:15:11:EF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B21
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0325F4DE891D11ED8BC31FF4F1222468.roa
Signing time: Sat 31 Dec 2022 15:08:42 +0000
ROA not before: Sat 31 Dec 2022 15:08:37 +0000
ROA not after: Tue 31 Dec 2024 15:08:37 +0000
asID: 397423
IP address blocks: 154.16.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 31 15:08:37 2022 GMT
Not After : Dec 31 15:08:37 2024 GMT
Subject: CN=63b0507a-3d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:42:52:ff:2e:3c:59:e5:24:64:f8:66:9b:
39:ff:ad:d0:10:38:4e:7a:8a:c2:50:1d:ec:df:22:
18:51:86:96:98:5e:4f:0b:fa:07:64:90:31:2c:5d:
33:c4:23:61:ff:29:a3:d1:38:26:96:37:df:2e:c8:
c3:d4:bf:d1:95:4d:34:3d:75:bd:28:2d:20:16:bd:
5f:94:57:e2:e3:c0:eb:40:66:14:2e:dc:93:25:d0:
49:b6:46:15:5b:88:dd:03:55:80:b2:3c:f8:07:2f:
dc:75:95:7c:14:9f:d2:1d:e6:81:a0:56:c5:e7:d5:
c3:8c:61:5c:39:7c:3b:7a:dd:c0:3f:9c:80:05:4a:
e0:aa:fc:e6:dd:4f:8e:e9:cc:c4:6e:77:77:4e:71:
96:d1:4b:d9:98:0f:5e:60:59:c5:c6:ab:a6:0e:e5:
bb:97:ca:c0:e0:ef:fd:52:14:86:54:57:45:67:8f:
e2:28:c8:67:c3:4a:80:e4:36:a1:96:5b:91:71:ca:
71:fb:10:82:fc:44:08:65:0d:a4:d7:cd:18:ca:c6:
48:35:b5:06:f3:d5:ca:cb:31:0d:8f:a6:96:c0:6c:
46:60:62:13:20:94:db:92:68:04:01:e8:1d:3d:31:
76:65:b0:06:ac:07:7e:50:66:7f:2e:50:e6:f4:e1:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:27:2C:CD:B0:09:43:4A:3F:DE:7B:41:93:AF:B7:56:C8:15:11:EF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0325F4DE891D11ED8BC31FF4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:21:9c:6e:24:de:f6:b4:e5:53:30:da:6d:3f:f3:19:b6:e0:
30:23:4d:a4:31:d0:c4:02:f7:ea:a1:8b:af:9e:b9:56:53:a5:
e5:00:17:b0:21:d7:68:21:e6:d2:b5:9e:3c:03:d2:ad:31:d2:
10:53:0e:8f:15:21:9a:55:b6:c4:1b:95:31:66:5d:93:78:6a:
0d:71:54:03:dd:3b:8e:91:c7:3e:44:db:21:74:37:87:53:87:
56:92:dd:68:9d:5d:d2:2c:49:3d:93:f5:54:b4:76:a5:5f:e2:
08:c4:27:6f:89:43:c2:9b:a7:e0:1c:ad:3b:6e:64:d1:f2:6c:
7d:bd:bc:58:2a:4e:65:4f:0a:b8:bd:01:b5:b0:62:fa:35:ff:
1a:11:67:7b:5c:8d:a8:d8:03:8c:fe:0d:10:c2:96:05:d9:f9:
36:b5:b2:07:27:12:5a:a7:5e:30:5e:9d:d4:ab:7b:c6:0b:b0:
62:71:c6:19:88:ed:cd:8a:5e:66:84:9d:6a:fe:dc:95:bf:ff:
4a:b3:c7:3f:48:4a:aa:e1:67:ba:b0:b8:21:a1:8e:b8:42:e0:
43:67:c5:7f:77:74:fc:8e:b5:7e:6b:b8:bf:15:d4:f7:51:38:
ae:81:0e:29:f5:5d:80:64:af:de:c0:3d:97:4f:38:e0:55:b0:
48:29:79:80
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjEyMzExNTA4MzdaFw0yNDEyMzExNTA4MzdaMBgxFjAU
BgNVBAMMDTYzYjA1MDdhLTNkOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpBUJS/y48WeUkZPhmmzn/rdAQOE56isJQHezfIhhRhpaYXk8L+gdkkDEs
XTPEI2H/KaPROCaWN98uyMPUv9GVTTQ9db0oLSAWvV+UV+LjwOtAZhQu3JMl0Em2
RhVbiN0DVYCyPPgHL9x1lXwUn9Id5oGgVsXn1cOMYVw5fDt63cA/nIAFSuCq/Obd
T47pzMRud3dOcZbRS9mYD15gWcXGq6YO5buXysDg7/1SFIZUV0Vnj+IoyGfDSoDk
NqGWW5FxynH7EIL8RAhlDaTXzRjKxkg1tQbz1crLMQ2PppbAbEZgYhMglNuSaAQB
6B09MXZlsAasB35QZn8uUOb04SH1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTCcs
zbAJQ0o/3ntBk6+3VsgVEe8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzAzMjVGNERFODkxRDExRUQ4QkMzMUZGNEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEEMwDQYJKoZIhvcNAQEL
BQADggEBAHwhnG4k3va05VMw2m0/8xm24DAjTaQx0MQC9+qhi6+euVZTpeUAF7Ah
12gh5tK1njwD0q0x0hBTDo8VIZpVtsQblTFmXZN4ag1xVAPdO46Rxz5E2yF0N4dT
h1aS3WidXdIsST2T9VS0dqVf4gjEJ2+JQ8Kbp+AcrTtuZNHybH29vFgqTmVPCri9
AbWwYvo1/xoRZ3tcjajYA4z+DRDClgXZ+Ta1sgcnElqnXjBendSre8YLsGJxxhmI
7c2KXmaEnWr+3JW//0qzxz9ISqrhZ7qwuCGhjrhC4ENnxX93dPyOtX5ruL8V1PdR
OK6BDin1XYBkr97APZdPOOBVsEgpeYA=
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:12 2024 by rpki-client on console-fra.rpki-client.org