Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D3DB3122D1E11EEBC9825284AD9E6FC.roa
File: 0D3DB3122D1E11EEBC9825284AD9E6FC.roa (raw, json)
Hash identifier: rPtWokB9wk4WLpZ5jgsqoV2C+vauTeSSyXxYcC5MGqA=
Subject key identifier: DA:FA:FC:84:D4:A8:CD:C9:B4:B5:CB:1C:C0:9D:D3:C1:51:A8:3F:B6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10E8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D3DB3122D1E11EEBC9825284AD9E6FC.roa
Signing time: Fri 28 Jul 2023 08:09:19 +0000
ROA not before: Fri 28 Jul 2023 08:09:15 +0000
ROA not after: Mon 28 Jul 2025 08:09:15 +0000
asID: 29802
IP address blocks: 154.16.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 11:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4328 (0x10e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 28 08:09:15 2023 GMT
Not After : Jul 28 08:09:15 2025 GMT
Subject: CN=64c377af-4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:c7:b0:c0:2d:32:c6:ef:40:5d:90:ec:db:
f0:dd:1a:83:0d:ff:b2:e9:e6:6a:bc:b4:74:f3:39:
c5:e9:dc:ab:5f:d8:9c:21:91:f6:11:28:0c:48:c5:
83:5b:3b:3b:20:4d:0d:fe:b4:b1:1f:80:d5:37:a1:
65:9c:7a:0d:f5:ac:02:24:96:ef:f0:c1:fd:e9:a6:
7a:be:f4:e5:8c:2c:95:74:80:bf:65:79:53:13:ec:
75:d9:4d:e5:58:3f:41:f3:82:34:8f:76:9a:f7:d3:
c6:dc:58:b5:71:ca:cc:69:0c:bc:32:94:70:bf:b7:
d0:1e:74:45:ea:61:7c:6b:de:b7:20:d9:22:fc:d4:
36:b8:cc:f8:64:bd:46:14:96:8a:fb:9b:0e:25:12:
b2:ed:48:46:91:e9:a7:32:d1:b5:29:55:b4:95:48:
a2:0d:4f:45:bb:b6:69:d8:34:6a:ed:8c:41:c8:58:
4c:bd:64:d8:2d:20:1b:eb:2d:53:b3:75:c4:62:54:
2f:28:d0:2d:73:1d:5d:b2:45:30:7c:d4:35:9e:2f:
bb:a7:81:a9:19:60:1f:58:89:1e:fa:80:da:5f:b2:
36:18:7d:fc:a5:8f:89:f4:e8:c0:1a:ab:59:11:3b:
57:17:50:7e:d0:f0:21:da:28:65:42:2a:93:80:94:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FA:FC:84:D4:A8:CD:C9:B4:B5:CB:1C:C0:9D:D3:C1:51:A8:3F:B6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D3DB3122D1E11EEBC9825284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a1:33:e8:f5:a5:04:ba:36:ff:d9:99:47:54:d1:06:50:90:
e5:dd:d9:4d:6d:ab:80:72:96:3b:04:4b:94:17:06:fa:9e:26:
30:04:46:bf:ad:c7:96:7a:24:e6:ae:6f:f5:6f:b3:84:0f:95:
50:65:f4:c9:24:ba:58:d0:c9:8e:04:1d:d4:08:0c:65:f7:4c:
22:b5:36:d8:96:a8:af:96:db:ab:bc:a5:77:63:60:ec:8a:81:
98:17:4f:f1:f0:d4:6b:67:7e:4a:59:cc:04:99:43:ac:f7:93:
49:d7:ed:70:14:8e:47:5f:53:ed:3b:60:1e:c2:4d:4b:a8:b5:
96:db:f0:49:67:17:4d:65:cd:00:fa:f0:48:39:5a:54:cc:b2:
1a:02:3f:99:6b:88:77:96:04:24:a9:64:7b:b4:31:21:d8:79:
db:0c:1d:5b:d7:e1:b1:f3:b6:66:4f:42:5d:9d:08:b6:73:a0:
17:98:4c:e7:e2:d0:fc:9b:1b:41:1d:49:56:a3:98:4d:f2:90:
4b:0c:3a:a3:5a:c1:65:33:01:28:04:17:be:dc:74:d6:34:9f:
ad:d6:bc:a7:8b:22:44:88:26:9a:92:81:42:1e:ea:7d:24:a6:
69:25:b8:19:e5:fe:78:94:57:a9:9c:ef:01:40:29:d0:f8:26:
99:e9:fc:ec
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEOgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MjgwODA5MTVaFw0yNTA3MjgwODA5MTVaMBgxFjAU
BgNVBAMTDTY0YzM3N2FmLTQ2NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5JMewwC0yxu9AXZDs2/DdGoMN/7Lp5mq8tHTzOcXp3Ktf2JwhkfYRKAxI
xYNbOzsgTQ3+tLEfgNU3oWWceg31rAIklu/wwf3ppnq+9OWMLJV0gL9leVMT7HXZ
TeVYP0HzgjSPdpr308bcWLVxysxpDLwylHC/t9AedEXqYXxr3rcg2SL81Da4zPhk
vUYUlor7mw4lErLtSEaR6acy0bUpVbSVSKINT0W7tmnYNGrtjEHIWEy9ZNgtIBvr
LVOzdcRiVC8o0C1zHV2yRTB81DWeL7ungakZYB9YiR76gNpfsjYYffylj4n06MAa
q1kRO1cXUH7Q8CHaKGVCKpOAlPJ1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2vr8
hNSozcm0tcscwJ3TwVGoP7YwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzBEM0RCMzEyMkQxRTExRUVCQzk4MjUyODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFIwDQYJKoZIhvcNAQEL
BQADggEBAE2hM+j1pQS6Nv/ZmUdU0QZQkOXd2U1tq4ByljsES5QXBvqeJjAERr+t
x5Z6JOaub/Vvs4QPlVBl9MkkuljQyY4EHdQIDGX3TCK1NtiWqK+W26u8pXdjYOyK
gZgXT/Hw1GtnfkpZzASZQ6z3k0nX7XAUjkdfU+07YB7CTUuotZbb8ElnF01lzQD6
8Eg5WlTMshoCP5lriHeWBCSpZHu0MSHYedsMHVvX4bHztmZPQl2dCLZzoBeYTOfi
0PybG0EdSVajmE3ykEsMOqNawWUzASgEF77cdNY0n63WvKeLIkSIJpqSgUIe6n0k
pmkluBnl/niUV6mc7wFAKdD4Jpnp/Ow=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:36 2024 by rpki-client on console-ams.rpki-client.org