Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/393FBB12215D11EEB1A0CF4D4AD9E6FC.roa
File: 393FBB12215D11EEB1A0CF4D4AD9E6FC.roa (raw, json)
Hash identifier: kLtGFER80Gcj3BhRunTd0o2es29oVg/x5+z2AedeAeU=
Subject key identifier: 10:DB:0C:27:7F:B7:58:0A:36:E3:6B:E0:FF:4E:22:86:6B:0E:3C:F4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1082
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/393FBB12215D11EEB1A0CF4D4AD9E6FC.roa
Signing time: Thu 13 Jul 2023 09:11:17 +0000
ROA not before: Thu 13 Jul 2023 09:11:13 +0000
ROA not after: Sat 13 Jul 2024 09:11:13 +0000
asID: 212335
IP address blocks: 154.16.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4226 (0x1082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 13 09:11:13 2023 GMT
Not After : Jul 13 09:11:13 2024 GMT
Subject: CN=64afbfb5-ca91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:17:ce:ea:a8:7b:e3:d6:b6:e6:e2:8f:33:
0d:ee:b8:f3:d7:ba:17:c9:55:fd:07:41:a8:40:24:
78:cb:fa:9a:63:e1:59:9d:41:18:ad:1e:f1:f9:85:
ce:2e:94:b9:d5:22:f3:f7:d3:ec:93:6f:b2:f4:bf:
28:77:e8:32:e8:aa:13:64:6e:3a:b8:1a:5e:e7:f7:
74:eb:49:61:4f:9a:90:08:30:05:0f:7e:77:36:59:
e2:ca:ed:d1:20:ae:ac:39:cf:ea:af:9f:22:54:76:
2b:c1:8c:48:f2:3f:9b:69:34:69:7e:a6:b4:af:33:
6e:95:7b:9d:e6:cc:ea:d2:29:be:35:bc:bd:79:c2:
ec:bb:be:55:4f:75:01:b6:67:26:08:0f:8c:ae:9a:
1d:e3:b8:9b:59:a6:9e:00:31:21:44:6b:77:85:49:
55:a5:40:00:f7:51:63:85:0b:42:e5:df:15:76:82:
68:34:30:f9:f8:d2:39:7e:05:c3:46:30:17:b2:22:
c3:e2:d5:b0:45:8d:11:1f:e6:dc:7b:c1:45:99:47:
26:46:c7:6d:42:00:5e:07:b3:04:3f:ca:75:59:1d:
22:be:63:b8:0b:26:4f:74:f5:75:f3:fe:1c:b3:e3:
0f:fc:69:5e:42:7b:66:44:7d:69:62:6c:82:00:04:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:0C:27:7F:B7:58:0A:36:E3:6B:E0:FF:4E:22:86:6B:0E:3C:F4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/393FBB12215D11EEB1A0CF4D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.46.0/24
Signature Algorithm: sha256WithRSAEncryption
06:dc:3a:e6:d3:a2:ae:22:23:c4:d7:17:55:2d:f8:20:6b:23:
e5:e5:c7:b5:c7:9f:16:5d:6d:80:d6:d3:3d:00:3e:2d:7b:c5:
55:bf:5e:a6:96:df:3f:cf:75:8c:f8:c8:ba:b9:07:6d:88:d9:
06:2f:57:1e:08:24:0e:c6:a0:b9:a7:0e:8b:fb:64:4d:6a:7a:
ee:49:32:30:78:3d:71:7f:f6:15:5c:7e:d0:75:17:d8:7a:68:
01:86:b2:f6:e8:8e:66:37:55:e5:8e:a6:9d:9d:82:c5:34:99:
96:fb:35:9d:2b:ff:dd:55:45:24:50:ff:2d:d9:9d:0c:ff:c9:
df:d1:d5:ea:94:fb:8f:27:fd:5f:7a:52:09:09:c4:5a:12:d6:
a2:a9:0d:0e:75:fe:6f:6b:fe:09:e7:b9:8e:7d:a0:3b:69:ad:
e9:47:fe:3f:e8:6e:c0:18:cf:61:44:ab:a7:2a:46:4b:ab:24:
82:e2:79:5d:50:e2:bd:62:55:33:a7:41:8e:69:c6:77:50:f0:
f1:80:1f:8d:09:2d:4a:66:aa:8b:28:fc:20:04:19:66:65:ef:
6a:ea:81:3b:b8:18:db:eb:40:f0:19:c7:d7:02:78:88:37:21:
de:e8:d0:97:0b:07:f6:ad:24:a3:72:21:ad:a3:76:33:0d:ac:
e7:8a:de:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEIIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MTMwOTExMTNaFw0yNDA3MTMwOTExMTNaMBgxFjAU
BgNVBAMTDTY0YWZiZmI1LWNhOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDt2hfO6qh749a25uKPMw3uuPPXuhfJVf0HQahAJHjL+ppj4VmdQRitHvH5
hc4ulLnVIvP30+yTb7L0vyh36DLoqhNkbjq4Gl7n93TrSWFPmpAIMAUPfnc2WeLK
7dEgrqw5z+qvnyJUdivBjEjyP5tpNGl+prSvM26Ve53mzOrSKb41vL15wuy7vlVP
dQG2ZyYID4yumh3juJtZpp4AMSFEa3eFSVWlQAD3UWOFC0Ll3xV2gmg0MPn40jl+
BcNGMBeyIsPi1bBFjREf5tx7wUWZRyZGx21CAF4HswQ/ynVZHSK+Y7gLJk909XXz
/hyz4w/8aV5Ce2ZEfWlibIIABF8HAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUENsM
J3+3WAo242vg/04ihmsOPPQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM5M0ZCQjEyMjE1RDExRUVCMUEwQ0Y0RDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEC4wDQYJKoZIhvcNAQEL
BQADggEBAAbcOubToq4iI8TXF1Ut+CBrI+Xlx7XHnxZdbYDW0z0APi17xVW/XqaW
3z/PdYz4yLq5B22I2QYvVx4IJA7GoLmnDov7ZE1qeu5JMjB4PXF/9hVcftB1F9h6
aAGGsvbojmY3VeWOpp2dgsU0mZb7NZ0r/91VRSRQ/y3ZnQz/yd/R1eqU+48n/V96
UgkJxFoS1qKpDQ51/m9r/gnnuY59oDtprelH/j/obsAYz2FEq6cqRkurJILieV1Q
4r1iVTOnQY5pxndQ8PGAH40JLUpmqoso/CAEGWZl72rqgTu4GNvrQPAZx9cCeIg3
Id7o0JcLB/atJKNyIa2jdjMNrOeK3tM=
-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:11 2024 by rpki-client on console-ams.rpki-client.org