Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DAD43D2434F11EFA0EE737F762E951A.roa
File: 1DAD43D2434F11EFA0EE737F762E951A.roa (raw, json)
Hash identifier: N7KrnxhxGQMI4srnSgwlSZeiZOOJPieEiCEPUddncag=
Subject key identifier: A8:1D:BC:CC:A7:57:B2:FA:96:77:11:FB:B7:6B:AF:42:EF:F5:19:BC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1734
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DAD43D2434F11EFA0EE737F762E951A.roa
Signing time: Tue 16 Jul 2024 08:40:55 +0000
ROA not before: Tue 16 Jul 2024 08:40:52 +0000
ROA not after: Thu 16 Jul 2026 08:40:52 +0000
asID: 397423
IP address blocks: 154.16.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5940 (0x1734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 16 08:40:52 2024 GMT
Not After : Jul 16 08:40:52 2026 GMT
Subject: CN=66963217-9952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:a0:10:e4:2c:b4:e2:84:85:d2:6d:8e:d8:
a6:40:69:05:ab:27:5a:af:b0:2f:ce:4b:85:23:3e:
91:58:33:63:ba:e5:8c:04:ec:16:7e:70:b0:b2:a3:
d3:b1:83:48:b1:0a:2b:e4:d9:41:0a:1e:ed:df:b0:
38:33:10:f5:49:f5:62:76:36:95:2d:1b:ed:19:f9:
4a:fb:6a:21:90:69:33:30:62:12:e6:7d:bd:2e:1e:
c6:91:4d:92:55:50:83:b6:0a:01:5b:11:c3:2c:77:
7e:d6:11:2a:e2:04:f4:1c:75:42:c3:a0:b1:b4:df:
0b:77:cc:e9:81:23:aa:15:e5:0b:2d:23:5e:c8:69:
5b:f6:9d:54:02:01:a5:3b:95:b0:d2:f0:45:65:3c:
43:41:4e:b2:df:8a:f7:11:76:42:6b:f1:a8:09:fa:
b2:81:5c:b2:e9:44:b8:74:2a:fb:0f:f9:46:ad:44:
a5:e7:e9:5b:c8:63:1c:c5:7f:f3:92:5f:37:3f:87:
87:8d:4c:dc:21:51:06:2b:45:3b:4f:19:dd:17:02:
fc:5b:9c:0b:06:8f:22:2b:31:56:25:db:54:64:01:
0d:5e:e1:8e:24:ef:66:d7:d2:52:37:fd:f3:24:3e:
44:b5:2b:0e:8c:c5:6d:9a:17:7b:77:03:22:e4:3c:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:BC:CC:A7:57:B2:FA:96:77:11:FB:B7:6B:AF:42:EF:F5:19:BC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DAD43D2434F11EFA0EE737F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.200.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:43:75:c7:60:ab:c1:9d:a0:df:8b:53:89:92:c6:2f:f4:b9:
91:55:e9:27:5a:9e:77:bf:5a:ce:34:43:43:21:bc:45:3d:20:
04:b6:a2:4f:c3:86:1b:d8:33:1a:18:7e:9a:e7:66:3d:d9:c3:
49:b8:b4:38:99:ee:14:72:d3:a3:7f:4a:e7:a6:66:e0:1e:03:
50:fa:77:d9:66:30:07:92:a9:94:fb:07:b4:89:e8:89:4f:48:
06:07:2c:3e:db:d7:be:75:27:b6:59:91:7e:39:77:94:d3:17:
b8:01:87:2b:99:ad:98:5f:54:61:69:ad:77:c8:c9:bf:9d:47:
70:24:05:f2:34:da:ae:40:63:f6:6d:0b:4f:31:8a:fa:7a:fe:
a2:e5:39:5c:00:ed:80:2c:99:a0:e7:51:27:d4:9b:92:75:fe:
41:97:7a:d3:d4:15:dc:5b:fd:86:e9:d4:c8:07:9c:2f:82:91:
ca:a0:3a:75:9f:3b:be:c4:e0:36:37:03:fa:8c:ed:4f:3b:d7:
90:6d:8e:a2:7c:ba:d1:82:6a:03:28:48:4d:73:08:d6:fc:89:
eb:af:91:e4:dd:f5:a4:a1:f3:01:ad:19:e8:1f:09:3a:76:ed:
a5:6f:1b:50:99:3b:a4:ba:b9:d6:65:e4:38:85:c0:bf:87:d2:
63:81:4e:24
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA3MTYwODQwNTJaFw0yNjA3MTYwODQwNTJaMBgxFjAU
BgNVBAMTDTY2OTYzMjE3LTk5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuJaAQ5Cy04oSF0m2O2KZAaQWrJ1qvsC/OS4UjPpFYM2O65YwE7BZ+cLCy
o9Oxg0ixCivk2UEKHu3fsDgzEPVJ9WJ2NpUtG+0Z+Ur7aiGQaTMwYhLmfb0uHsaR
TZJVUIO2CgFbEcMsd37WESriBPQcdULDoLG03wt3zOmBI6oV5QstI17IaVv2nVQC
AaU7lbDS8EVlPENBTrLfivcRdkJr8agJ+rKBXLLpRLh0KvsP+UatRKXn6VvIYxzF
f/OSXzc/h4eNTNwhUQYrRTtPGd0XAvxbnAsGjyIrMVYl21RkAQ1e4Y4k72bX0lI3
/fMkPkS1Kw6MxW2aF3t3AyLkPFKpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqB28
zKdXsvqWdxH7t2uvQu/1GbwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzFEQUQ0M0QyNDM0RjExRUZBMEVFNzM3Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMgwDQYJKoZIhvcNAQEL
BQADggEBADtDdcdgq8GdoN+LU4mSxi/0uZFV6Sdanne/Ws40Q0MhvEU9IAS2ok/D
hhvYMxoYfprnZj3Zw0m4tDiZ7hRy06N/SuemZuAeA1D6d9lmMAeSqZT7B7SJ6IlP
SAYHLD7b1751J7ZZkX45d5TTF7gBhyuZrZhfVGFprXfIyb+dR3AkBfI02q5AY/Zt
C08xivp6/qLlOVwA7YAsmaDnUSfUm5J1/kGXetPUFdxb/Ybp1MgHnC+CkcqgOnWf
O77E4DY3A/qM7U8715BtjqJ8utGCagMoSE1zCNb8ieuvkeTd9aSh8wGtGegfCTp2
7aVvG1CZO6S6udZl5DiFwL+H0mOBTiQ=
-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:54 2024 by rpki-client on console-fra.rpki-client.org