Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/681D825238B011EDA391BAD7F1222468.roa
File: 681D825238B011EDA391BAD7F1222468.roa (raw, json)
Hash identifier: +wUKJ99fjVJ2NQqG9Gl8hbSrj8VIy/6d+Knk4evUrv4=
Subject key identifier: 63:C1:D4:46:64:43:42:96:E4:A3:75:A3:44:A3:A9:4D:3D:FB:32:7C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09AD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/681D825238B011EDA391BAD7F1222468.roa
Signing time: Tue 20 Sep 2022 06:49:43 +0000
ROA not before: Tue 20 Sep 2022 06:49:38 +0000
ROA not after: Fri 20 Sep 2024 06:49:38 +0000
asID: 212238
IP address blocks: 154.16.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477 (0x9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 20 06:49:38 2022 GMT
Not After : Sep 20 06:49:38 2024 GMT
Subject: CN=63296287-4509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:93:ed:7a:f8:9b:5e:0c:5b:61:0a:66:6c:
a3:9d:63:b0:c8:95:4d:e7:cf:e5:73:b6:21:0f:bb:
4b:a9:b0:5e:1d:a8:06:5c:96:78:83:b9:bf:ff:3e:
0d:4c:08:de:4e:42:c6:07:d8:28:5c:a4:53:bf:22:
f9:93:98:bb:50:a3:47:9d:28:68:58:11:32:2e:2f:
06:f3:5d:df:8c:57:d4:5d:b7:8b:22:e7:26:d4:69:
cb:de:0d:20:ea:6f:5f:a6:a0:1a:07:2b:81:86:eb:
f7:10:43:34:cb:f4:10:32:fe:8d:e5:41:b7:a8:64:
4c:b6:fd:b5:ce:4c:40:57:79:4a:e5:75:6f:ff:8b:
eb:dd:41:13:ad:d1:97:6e:ef:25:6a:29:45:6d:84:
d3:2b:a8:66:2a:06:ec:67:9f:9e:79:db:5a:67:a2:
99:b8:f8:6e:98:fc:74:b9:7c:f4:c8:41:93:c5:56:
65:94:0f:66:55:22:f2:d8:81:08:46:65:8d:c2:37:
2f:1b:4b:b5:f5:7d:f4:9c:99:04:9d:10:c5:30:6b:
85:77:5b:4c:94:76:ae:bc:2f:f6:ae:1f:f8:fb:a6:
6b:0c:2a:c3:4e:e0:14:bb:00:c2:4b:fb:4e:84:d7:
2b:9c:22:12:08:c6:0a:08:f6:2d:cb:a3:f1:04:2f:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C1:D4:46:64:43:42:96:E4:A3:75:A3:44:A3:A9:4D:3D:FB:32:7C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/681D825238B011EDA391BAD7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.17.0/24
Signature Algorithm: sha256WithRSAEncryption
43:21:4d:b3:83:0f:28:6d:f8:14:eb:18:2a:75:ee:67:2f:d8:
5d:5f:69:b2:81:29:76:c7:9c:0c:61:56:2d:4f:62:f2:77:58:
76:b3:e7:53:59:79:f6:65:3e:cf:38:07:41:fc:7a:8e:5b:3a:
c8:77:d3:db:01:2f:01:60:2e:d0:a5:6a:fa:76:08:89:97:c9:
2f:b7:d3:4a:69:4e:46:af:1e:27:76:9d:49:74:9d:ac:e0:9b:
81:68:bd:20:ac:a1:7a:e1:f9:17:29:8f:4e:7f:a6:b5:eb:8b:
85:8b:e4:e3:7b:1d:75:2f:bd:45:16:d5:d2:21:f8:96:0a:5e:
a6:db:2a:d0:93:9c:e3:35:f3:3e:9f:ca:54:54:6c:43:20:22:
54:47:27:fc:c8:da:ce:cc:92:24:eb:cc:9f:97:fb:61:ca:0a:
4f:75:ef:96:c2:b1:26:be:4c:fa:22:dd:2e:0f:23:ef:f0:0f:
9e:0e:6b:3d:fb:7c:00:40:19:49:34:96:c3:25:81:2b:31:97:
2c:c7:15:d5:e6:39:27:82:5c:60:ed:44:a0:b8:4f:ed:f6:e1:
e2:57:eb:fc:ce:c2:63:f1:ca:72:6b:ca:2a:52:9d:c2:65:d5:
d5:a9:ee:01:ab:59:aa:ad:74:1c:31:bd:7c:d6:60:d5:27:e1:
ea:af:a0:5e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA5MjAwNjQ5MzhaFw0yNDA5MjAwNjQ5MzhaMBgxFjAU
BgNVBAMMDTYzMjk2Mjg3LTQ1MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsg5PtevibXgxbYQpmbKOdY7DIlU3nz+VztiEPu0upsF4dqAZclniDub//
Pg1MCN5OQsYH2ChcpFO/IvmTmLtQo0edKGhYETIuLwbzXd+MV9Rdt4si5ybUacve
DSDqb1+moBoHK4GG6/cQQzTL9BAy/o3lQbeoZEy2/bXOTEBXeUrldW//i+vdQROt
0Zdu7yVqKUVthNMrqGYqBuxnn55521pnopm4+G6Y/HS5fPTIQZPFVmWUD2ZVIvLY
gQhGZY3CNy8bS7X1ffScmQSdEMUwa4V3W0yUdq68L/auH/j7pmsMKsNO4BS7AMJL
+06E1yucIhIIxgoI9i3Lo/EEL24bAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY8HU
RmRDQpbko3WjRKOpTT37MnwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY4MUQ4MjUyMzhCMDExRURBMzkxQkFEN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBEwDQYJKoZIhvcNAQEL
BQADggEBAEMhTbODDyht+BTrGCp17mcv2F1fabKBKXbHnAxhVi1PYvJ3WHaz51NZ
efZlPs84B0H8eo5bOsh309sBLwFgLtClavp2CImXyS+300ppTkavHid2nUl0nazg
m4FovSCsoXrh+Rcpj05/prXri4WL5ON7HXUvvUUW1dIh+JYKXqbbKtCTnOM18z6f
ylRUbEMgIlRHJ/zI2s7MkiTrzJ+X+2HKCk9175bCsSa+TPoi3S4PI+/wD54Oaz37
fABAGUk0lsMlgSsxlyzHFdXmOSeCXGDtRKC4T+324eJX6/zOwmPxynJryipSncJl
1dWp7gGrWaqtdBwxvXzWYNUn4eqvoF4=
-----END CERTIFICATE-----
Generated at Fri Apr 19 13:16:52 2024 by rpki-client on console-ams.rpki-client.org