Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/238CD018A16C11EEB3636D3DD25BE465.roa
File: 238CD018A16C11EEB3636D3DD25BE465.roa (raw, json)
Hash identifier: rnbAL9pxs/sB5o+3ElQzYT+dHxIZxFrkmag84aVsxAI=
Subject key identifier: FA:8F:9A:18:00:5F:8A:08:81:E6:A5:09:05:50:FA:89:F4:25:90:97
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 13F6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/238CD018A16C11EEB3636D3DD25BE465.roa
Signing time: Sat 23 Dec 2023 08:20:32 +0000
ROA not before: Sat 23 Dec 2023 08:20:28 +0000
ROA not after: Sat 20 Dec 2025 08:20:28 +0000
asID: 139989
IP address blocks: 154.127.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5110 (0x13f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 23 08:20:28 2023 GMT
Not After : Dec 20 08:20:28 2025 GMT
Subject: CN=65869850-5237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:e3:51:9b:f3:c8:2b:08:39:86:f1:aa:0d:
b2:c8:2f:9e:b6:7e:e8:22:40:76:6e:52:e5:83:64:
b4:8d:c0:73:7b:8f:b6:22:6c:ec:38:59:74:3c:e2:
6e:42:2c:0a:ec:9c:c2:2b:bd:68:fc:f6:7a:f9:24:
94:7d:f7:19:83:0a:70:80:a4:43:a6:4c:41:50:58:
8b:0c:2b:35:aa:97:34:11:28:2e:15:91:c9:c5:e6:
32:ae:3e:fd:12:6c:c7:02:50:b2:f8:63:06:33:4e:
67:4c:73:db:e5:77:3c:66:e2:53:45:c2:95:c4:d8:
74:3a:58:40:12:31:e3:a3:a3:c8:bc:2b:3f:53:f8:
28:9a:06:14:0e:e3:88:02:d0:6c:79:11:61:a4:f6:
3c:0b:da:17:d3:bb:d6:c7:ff:44:22:90:ee:a9:b0:
b9:8f:12:f3:4d:b4:00:82:d0:3c:05:b1:95:7a:7c:
81:5a:46:36:51:43:2c:99:39:55:84:92:c4:05:26:
d6:e9:47:be:65:8d:fb:05:2c:96:b8:5e:f9:07:f6:
df:3b:e5:e7:e1:86:48:86:ca:85:de:db:14:c7:3e:
f9:f2:7e:c8:0d:7e:ef:ba:61:2e:eb:6c:7c:75:4f:
79:38:65:bd:5f:74:d0:aa:8d:4e:f5:7b:71:92:d0:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:9A:18:00:5F:8A:08:81:E6:A5:09:05:50:FA:89:F4:25:90:97
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/238CD018A16C11EEB3636D3DD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.62.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ac:24:76:a4:9c:15:88:d0:93:16:af:18:9e:d4:cb:7f:3e:
32:de:89:69:83:09:11:cd:23:2b:5b:52:0a:38:c9:46:6d:84:
28:d9:b8:9c:49:02:5f:c1:89:8d:1b:bc:38:6e:6a:fd:2c:46:
a4:52:64:09:b8:59:fb:65:f2:97:96:3a:92:03:bc:f9:ff:a3:
76:ab:e5:e0:bb:dc:75:d2:74:26:93:65:a5:d5:62:47:1f:99:
0a:a8:4b:ac:5f:a7:20:bc:88:52:2e:77:3e:6a:93:80:ec:10:
be:7d:f1:dd:a6:d8:ea:0a:85:12:4e:68:1e:78:45:59:34:ae:
d9:bf:a1:f3:97:f5:60:e4:ee:18:fb:da:20:23:71:74:8c:07:
46:33:ae:1e:29:e0:65:10:87:5d:a6:b0:23:41:de:6c:f6:2b:
a2:a5:ef:8c:3a:cb:de:a2:c2:88:b9:32:c3:46:66:e6:67:f6:
ed:78:cf:e7:84:5e:2c:9f:3b:db:e3:8f:97:e5:a3:b0:d2:e7:
e5:85:fa:1a:46:58:ef:8a:77:46:ee:16:70:21:60:58:7d:f9:
bc:cd:53:7c:83:68:31:06:79:f0:89:f1:5d:a3:e7:30:7d:09:
b4:18:73:07:d9:cf:cb:85:26:dc:d4:ea:09:28:f1:0f:db:4f:
7f:fb:b2:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE/YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzEyMjMwODIwMjhaFw0yNTEyMjAwODIwMjhaMBgxFjAU
BgNVBAMTDTY1ODY5ODUwLTUyMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDld+NRm/PIKwg5hvGqDbLIL562fugiQHZuUuWDZLSNwHN7j7YibOw4WXQ8
4m5CLArsnMIrvWj89nr5JJR99xmDCnCApEOmTEFQWIsMKzWqlzQRKC4VkcnF5jKu
Pv0SbMcCULL4YwYzTmdMc9vldzxm4lNFwpXE2HQ6WEASMeOjo8i8Kz9T+CiaBhQO
44gC0Gx5EWGk9jwL2hfTu9bH/0QikO6psLmPEvNNtACC0DwFsZV6fIFaRjZRQyyZ
OVWEksQFJtbpR75ljfsFLJa4XvkH9t875efhhkiGyoXe2xTHPvnyfsgNfu+6YS7r
bHx1T3k4Zb1fdNCqjU71e3GS0K8JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+o+a
GABfigiB5qUJBVD6ifQlkJcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzIzOENEMDE4QTE2QzExRUVCMzYzNkQzREQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafz4wDQYJKoZIhvcNAQEL
BQADggEBABesJHaknBWI0JMWrxie1Mt/PjLeiWmDCRHNIytbUgo4yUZthCjZuJxJ
Al/BiY0bvDhuav0sRqRSZAm4Wftl8peWOpIDvPn/o3ar5eC73HXSdCaTZaXVYkcf
mQqoS6xfpyC8iFIudz5qk4DsEL598d2m2OoKhRJOaB54RVk0rtm/ofOX9WDk7hj7
2iAjcXSMB0Yzrh4p4GUQh12msCNB3mz2K6Kl74w6y96iwoi5MsNGZuZn9u14z+eE
XiyfO9vjj5flo7DS5+WF+hpGWO+Kd0buFnAhYFh9+bzNU3yDaDEGefCJ8V2j5zB9
CbQYcwfZz8uFJtzU6gko8Q/bT3/7sjk=
-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:11 2024 by rpki-client on console-ams.rpki-client.org