Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/668A3852110F11EF845078F4007001B1.roa
File: 668A3852110F11EF845078F4007001B1.roa (raw, json)
Hash identifier: CewfZa1TaKCdxldMVoOXOjfR7HWV0PRmfYv8nkQr3ag=
Subject key identifier: 7C:DE:EE:7B:71:FC:6B:1D:4D:64:00:48:AD:6C:26:E4:8D:49:97:EE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 164D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/668A3852110F11EF845078F4007001B1.roa
Signing time: Mon 13 May 2024 09:58:51 +0000
ROA not before: Mon 13 May 2024 09:58:48 +0000
ROA not after: Wed 13 May 2026 09:58:48 +0000
asID: 3320
IP address blocks: 154.16.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5709 (0x164d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 13 09:58:48 2024 GMT
Not After : May 13 09:58:48 2026 GMT
Subject: CN=6641e45b-398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:40:51:c3:6c:27:44:da:0e:ba:69:8d:a2:
42:a8:4a:ea:42:66:55:b7:54:5f:1a:90:c6:14:ed:
b9:da:6a:6a:fa:36:dc:7c:0b:c9:ab:bb:aa:9a:d5:
02:c7:7e:e2:d7:86:e1:b0:0c:13:26:5b:8e:0a:20:
dd:f5:3f:03:4a:2b:a1:d6:03:60:72:f5:4c:f8:02:
38:83:47:b5:03:e3:9c:4a:50:84:7f:2b:21:99:bb:
ff:7b:be:1b:69:2f:37:73:a5:71:97:dd:58:da:76:
bf:dd:95:4d:cb:4b:05:c3:c8:d0:1a:fc:b5:f1:ba:
2c:61:f7:c0:f8:12:92:ac:13:7e:34:5c:3d:d8:bf:
1a:c3:fc:10:f1:bc:73:58:c6:b7:4b:68:cf:12:c2:
03:c0:ca:f0:4c:21:9e:1c:12:54:65:b2:4e:02:b4:
c7:7e:c9:b4:55:11:6f:41:c6:44:2e:b0:68:bc:6d:
72:4c:91:87:e3:75:21:32:61:54:db:3f:2a:90:be:
6c:9d:e5:0d:fe:cf:9d:43:4e:88:4e:42:aa:9b:1c:
e3:94:7a:87:3c:70:41:5d:d6:65:de:f5:74:dc:4d:
3e:42:41:b9:af:46:2d:0a:3e:04:75:94:3a:75:3f:
9d:f0:3c:e7:6b:a7:1e:cf:be:76:ab:fd:9d:0f:d3:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DE:EE:7B:71:FC:6B:1D:4D:64:00:48:AD:6C:26:E4:8D:49:97:EE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/668A3852110F11EF845078F4007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.213.0/24
Signature Algorithm: sha256WithRSAEncryption
78:59:2c:85:b4:4f:ac:c8:27:07:13:76:14:9f:fd:4e:99:d1:
f3:5c:a3:8a:4f:ac:4b:d4:9a:b1:ee:1e:ad:f3:f4:b1:22:89:
3f:4f:98:aa:51:73:e2:ac:1a:7f:9e:ca:47:a5:a4:75:e2:d2:
37:b4:a0:68:23:25:25:ff:49:52:bd:23:08:28:80:b0:ba:e8:
6e:ab:48:3b:71:50:ef:d2:9c:8e:83:75:84:70:28:1f:f1:31:
1b:4b:f6:31:a4:52:7c:2b:4e:39:c0:e8:60:b5:44:17:88:a8:
7e:f5:42:25:05:d2:5e:05:e5:fa:b6:74:53:19:19:95:de:f7:
08:86:ce:28:c6:4e:b8:d9:2b:cc:43:b3:28:2e:d5:22:37:23:
30:32:8d:dc:0e:6e:f7:dd:a9:1e:78:7e:6e:60:a5:e8:84:e9:
c8:b2:1a:fc:12:fc:aa:43:98:b3:ef:19:c6:b4:17:ec:92:9d:
10:cc:18:f3:89:05:60:5e:95:42:61:8a:73:10:be:83:8c:c8:
07:80:fa:00:ce:ba:ca:68:22:e2:85:b0:02:92:83:f4:44:e9:
b4:64:e5:8e:f7:31:5a:31:6f:7c:cc:9d:c7:0a:a4:8d:38:3b:
db:48:e6:b9:78:f4:9b:02:d5:01:87:4d:46:51:b1:e0:47:7a:
bd:59:4e:56
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFk0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA1MTMwOTU4NDhaFw0yNjA1MTMwOTU4NDhaMBgxFjAU
BgNVBAMTDTY2NDFlNDViLTM5OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+9UBRw2wnRNoOummNokKoSupCZlW3VF8akMYU7bnaamr6Ntx8C8mru6qa
1QLHfuLXhuGwDBMmW44KIN31PwNKK6HWA2By9Uz4AjiDR7UD45xKUIR/KyGZu/97
vhtpLzdzpXGX3Vjadr/dlU3LSwXDyNAa/LXxuixh98D4EpKsE340XD3YvxrD/BDx
vHNYxrdLaM8SwgPAyvBMIZ4cElRlsk4CtMd+ybRVEW9BxkQusGi8bXJMkYfjdSEy
YVTbPyqQvmyd5Q3+z51DTohOQqqbHOOUeoc8cEFd1mXe9XTcTT5CQbmvRi0KPgR1
lDp1P53wPOdrpx7Pvnar/Z0P02gZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfN7u
e3H8ax1NZABIrWwm5I1Jl+4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY2OEEzODUyMTEwRjExRUY4NDUwNzhGNDAwNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENUwDQYJKoZIhvcNAQEL
BQADggEBAHhZLIW0T6zIJwcTdhSf/U6Z0fNco4pPrEvUmrHuHq3z9LEiiT9PmKpR
c+KsGn+eykelpHXi0je0oGgjJSX/SVK9IwgogLC66G6rSDtxUO/SnI6DdYRwKB/x
MRtL9jGkUnwrTjnA6GC1RBeIqH71QiUF0l4F5fq2dFMZGZXe9wiGzijGTrjZK8xD
sygu1SI3IzAyjdwObvfdqR54fm5gpeiE6ciyGvwS/KpDmLPvGca0F+ySnRDMGPOJ
BWBelUJhinMQvoOMyAeA+gDOuspoIuKFsAKSg/RE6bRk5Y73MVoxb3zMnccKpI04
O9tI5rl49JsC1QGHTUZRseBHer1ZTlY=
-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:55 2024 by rpki-client on console-fra.rpki-client.org