Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AA61D88759411EFA6D1F2A6762E951A.roa
File: 4AA61D88759411EFA6D1F2A6762E951A.roa (raw, json)
Hash identifier: 3H0krJWp80TiTYDt6nqb4Pl+/USctj93sW+qj3d0Q4k=
Subject key identifier: 37:EE:0E:8B:62:56:AD:89:30:F5:A5:F4:89:EF:C5:0D:42:B1:65:1D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1810
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AA61D88759411EFA6D1F2A6762E951A.roa
Signing time: Wed 18 Sep 2024 08:02:04 +0000
ROA not before: Wed 18 Sep 2024 08:02:01 +0000
ROA not after: Fri 18 Sep 2026 08:02:01 +0000
asID: 212238
IP address blocks: 154.16.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6160 (0x1810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 18 08:02:01 2024 GMT
Not After : Sep 18 08:02:01 2026 GMT
Subject: CN=66ea88fc-2126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:69:4a:59:79:e0:b5:5f:73:bd:d3:c3:54:
23:db:6b:45:1c:76:8b:3b:43:6e:df:f5:ce:cc:e1:
8a:78:05:d1:1c:dd:71:20:47:99:11:df:7d:45:9b:
fe:ca:9c:c2:1a:17:c8:15:c7:06:7e:70:6b:fe:ab:
77:ee:cd:79:6f:02:83:e6:ef:57:24:4d:2d:9b:6a:
30:cf:4f:26:39:e0:a1:c0:00:c1:0d:57:d2:e8:de:
c7:7d:14:37:e4:70:02:b1:6c:bd:6c:c5:81:62:37:
ed:55:c3:47:cb:77:aa:1e:fb:c1:ea:2f:6a:80:a7:
dc:47:d0:c4:97:96:2b:73:db:9a:e6:51:84:29:f9:
9c:c7:e9:e2:0c:e9:0b:c4:7d:55:3d:9a:cd:b8:dd:
08:ef:90:08:d0:bc:6d:dd:8a:35:e3:7a:93:51:62:
b8:8d:bb:06:c1:2d:14:c3:b7:fd:80:46:d5:84:3f:
7e:d7:8a:81:22:83:c5:53:af:0d:d8:52:d7:96:ee:
a2:be:3d:81:11:a6:0d:b8:da:32:6f:c3:a2:43:ca:
d1:8d:86:3f:64:0f:b9:ab:50:01:46:ff:68:dd:98:
3a:7a:f1:d8:61:95:07:95:a1:f4:1c:54:a1:19:59:
19:ea:a7:74:6a:93:35:2d:ed:53:3b:d9:60:d0:99:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EE:0E:8B:62:56:AD:89:30:F5:A5:F4:89:EF:C5:0D:42:B1:65:1D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AA61D88759411EFA6D1F2A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.77.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e5:c4:17:62:9e:38:7e:a3:18:62:f6:8d:62:9f:f2:22:57:
15:e5:75:47:37:fa:c4:b4:00:a2:d5:16:40:98:e4:1d:1a:29:
5e:78:ff:9d:f9:03:b7:8a:eb:b8:07:a8:1d:52:98:32:7e:c0:
21:19:91:f6:dc:eb:44:cd:4c:3d:0e:79:6f:c4:c0:14:38:5b:
7f:cd:fc:9c:50:d7:cc:da:eb:ea:fc:37:4d:ac:6e:9c:f7:50:
a6:70:4b:53:5d:cc:9c:32:49:ac:62:86:8f:54:89:a2:dc:55:
f1:66:2f:77:ff:7c:ac:4a:6e:85:a6:e7:cc:ed:92:91:c8:cb:
45:2b:9e:69:f0:ff:72:14:5a:12:c9:b3:3f:10:75:c0:0d:e0:
0f:79:ea:87:84:92:92:aa:99:ff:c5:1b:04:72:04:1e:ad:8f:
0e:11:03:1f:9d:9a:b2:f8:d5:97:1d:be:41:2a:9e:09:a4:cf:
1e:d6:c0:ab:16:2a:85:6f:f1:90:a7:2a:ab:89:7e:52:0c:3e:
3a:25:13:70:47:b5:3b:eb:f1:da:30:1a:ab:f1:4b:65:e1:f8:
e2:db:c7:9f:4d:9b:a5:e5:e7:16:e0:b8:95:ce:34:3d:3c:1c:
1c:5e:0d:34:2e:05:04:00:48:d0:29:e9:81:af:3c:f3:3b:d4:
14:6c:f0:67
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGBAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA5MTgwODAyMDFaFw0yNjA5MTgwODAyMDFaMBgxFjAU
BgNVBAMTDTY2ZWE4OGZjLTIxMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCx9mlKWXngtV9zvdPDVCPba0Ucdos7Q27f9c7M4Yp4BdEc3XEgR5kR331F
m/7KnMIaF8gVxwZ+cGv+q3fuzXlvAoPm71ckTS2bajDPTyY54KHAAMENV9Lo3sd9
FDfkcAKxbL1sxYFiN+1Vw0fLd6oe+8HqL2qAp9xH0MSXlitz25rmUYQp+ZzH6eIM
6QvEfVU9ms243QjvkAjQvG3dijXjepNRYriNuwbBLRTDt/2ARtWEP37XioEig8VT
rw3YUteW7qK+PYERpg242jJvw6JDytGNhj9kD7mrUAFG/2jdmDp68dhhlQeVofQc
VKEZWRnqp3RqkzUt7VM72WDQmUdVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUN+4O
i2JWrYkw9aX0ie/FDUKxZR0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzRBQTYxRDg4NzU5NDExRUZBNkQxRjJBNjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEE0wDQYJKoZIhvcNAQEL
BQADggEBAILlxBdinjh+oxhi9o1in/IiVxXldUc3+sS0AKLVFkCY5B0aKV54/535
A7eK67gHqB1SmDJ+wCEZkfbc60TNTD0OeW/EwBQ4W3/N/JxQ18za6+r8N02sbpz3
UKZwS1NdzJwySaxiho9UiaLcVfFmL3f/fKxKboWm58ztkpHIy0Urnmnw/3IUWhLJ
sz8QdcAN4A956oeEkpKqmf/FGwRyBB6tjw4RAx+dmrL41ZcdvkEqngmkzx7WwKsW
KoVv8ZCnKquJflIMPjolE3BHtTvr8dowGqvxS2Xh+OLbx59Nm6Xl5xbguJXOND08
HBxeDTQuBQQASNAp6YGvPPM71BRs8Gc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:55 2024 by rpki-client on console-fra.rpki-client.org