Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD7CAB454A311EF8BFDF170762E951A.roa
File: 6AD7CAB454A311EF8BFDF170762E951A.roa (raw, json)
Hash identifier: pLcp3Ksopd0K62EQQMlwPcmt9r5nxNhUKRtHwGY5R2s=
Subject key identifier: 34:49:C2:3D:82:23:EF:D3:53:FE:C4:75:9D:F6:E6:52:03:4B:FF:27
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1790
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD7CAB454A311EF8BFDF170762E951A.roa
Signing time: Wed 07 Aug 2024 09:57:12 +0000
ROA not before: Wed 07 Aug 2024 09:57:09 +0000
ROA not after: Fri 07 Aug 2026 09:57:09 +0000
asID: 14670
IP address blocks: 154.16.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6032 (0x1790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 09:57:09 2024 GMT
Not After : Aug 7 09:57:09 2026 GMT
Subject: CN=66b344f8-9e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:87:19:1a:2e:b1:27:48:c7:a6:27:be:e1:
86:23:68:d0:af:78:4d:31:04:30:fe:5f:87:27:e8:
1d:a7:d7:e1:8d:c3:1a:d0:14:05:8f:ca:aa:9f:b9:
40:63:3c:13:93:7f:c5:c5:74:42:d1:f3:14:e4:d1:
41:e8:13:a3:27:4b:fb:5e:72:d6:bf:9d:95:f6:ce:
fc:a8:57:a6:af:4a:48:17:b9:b8:ef:df:3d:3a:3d:
4c:e2:98:3d:80:53:af:d6:d2:3e:15:0e:5a:fa:84:
94:d1:20:41:7b:ff:1e:e8:43:8a:7d:3e:81:cc:59:
e0:cf:21:30:c9:83:c0:8f:8e:f5:60:7c:3b:4a:2e:
58:8e:49:25:70:30:8f:fa:38:51:21:43:d1:d3:f8:
51:ab:d0:89:ed:23:b9:5b:a2:96:33:e2:61:38:81:
b6:e6:0a:c8:90:a7:60:1a:ed:2a:28:89:6f:ca:b7:
85:d1:2d:27:94:c8:23:05:85:1c:de:df:89:e7:a6:
b8:fe:ac:3f:be:e8:53:e8:f3:d5:b4:27:62:eb:ea:
44:20:a1:52:3e:15:f5:95:75:8d:9f:5e:2a:1f:5c:
3d:ad:17:5b:fb:9e:d8:15:5c:86:9f:b3:1c:8b:b0:
a6:c6:f5:36:bd:2c:76:09:11:f2:92:94:5d:a7:d9:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:C2:3D:82:23:EF:D3:53:FE:C4:75:9D:F6:E6:52:03:4B:FF:27
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD7CAB454A311EF8BFDF170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.112.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2c:ef:65:ad:37:ae:f7:24:c4:db:e9:12:41:15:ca:58:c8:
b7:89:fd:70:c1:40:68:15:40:aa:98:2f:b2:a8:62:a8:65:86:
ec:a4:ba:e4:5a:e2:3b:8b:1a:72:e4:2e:61:17:94:ba:49:df:
fa:3b:b7:62:e9:59:35:c7:fb:ae:a8:aa:40:36:96:5d:a2:4f:
d3:12:3d:ed:91:07:ad:f2:16:9d:7b:2e:49:5a:3d:01:65:4e:
80:b1:44:7e:61:cc:25:31:61:0c:dc:94:07:73:0a:cd:7e:8f:
9c:f9:2d:ef:70:f4:cc:f7:e6:90:1e:79:39:80:1f:e1:bd:21:
79:0f:62:39:34:5c:22:aa:12:14:d1:80:b9:9e:9d:aa:6f:ef:
c5:39:dd:f6:72:89:f6:48:10:41:da:7e:43:f8:5c:c7:26:2c:
db:a0:ba:d3:2f:b2:c5:b8:9d:f1:a5:dd:ef:59:13:1f:20:4f:
f6:b8:96:d3:dc:e5:2e:a3:c9:26:a4:67:88:86:ff:e1:48:0b:
c1:45:b1:c8:ab:25:8f:92:55:83:f8:4c:24:7a:cf:94:03:a2:
e2:a7:03:cd:c7:ce:55:bd:c9:22:78:c0:77:7c:c6:74:b4:67:
cf:fb:11:df:0a:2a:f9:aa:63:b2:9d:a4:8f:f6:ff:50:72:33:
55:e5:7a:cd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF5AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA4MDcwOTU3MDlaFw0yNjA4MDcwOTU3MDlaMBgxFjAU
BgNVBAMTDTY2YjM0NGY4LTllNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeqIcZGi6xJ0jHpie+4YYjaNCveE0xBDD+X4cn6B2n1+GNwxrQFAWPyqqf
uUBjPBOTf8XFdELR8xTk0UHoE6MnS/tecta/nZX2zvyoV6avSkgXubjv3z06PUzi
mD2AU6/W0j4VDlr6hJTRIEF7/x7oQ4p9PoHMWeDPITDJg8CPjvVgfDtKLliOSSVw
MI/6OFEhQ9HT+FGr0IntI7lbopYz4mE4gbbmCsiQp2Aa7SooiW/Kt4XRLSeUyCMF
hRze34nnprj+rD++6FPo89W0J2Lr6kQgoVI+FfWVdY2fXiofXD2tF1v7ntgVXIaf
sxyLsKbG9Ta9LHYJEfKSlF2n2d+7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNEnC
PYIj79NT/sR1nfbmUgNL/ycwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzZBRDdDQUI0NTRBMzExRUY4QkZERjE3MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHAwDQYJKoZIhvcNAQEL
BQADggEBAHAs72WtN673JMTb6RJBFcpYyLeJ/XDBQGgVQKqYL7KoYqhlhuykuuRa
4juLGnLkLmEXlLpJ3/o7t2LpWTXH+66oqkA2ll2iT9MSPe2RB63yFp17LklaPQFl
ToCxRH5hzCUxYQzclAdzCs1+j5z5Le9w9Mz35pAeeTmAH+G9IXkPYjk0XCKqEhTR
gLmenapv78U53fZyifZIEEHafkP4XMcmLNugutMvssW4nfGl3e9ZEx8gT/a4ltPc
5S6jySakZ4iG/+FIC8FFscirJY+SVYP4TCR6z5QDouKnA83HzlW9ySJ4wHd8xnS0
Z8/7Ed8KKvmqY7KdpI/2/1ByM1Xles0=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:23 2024 by rpki-client on console-ams.rpki-client.org