Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73AD2168B43E11EDADD89FADF1222468.roa
File: 73AD2168B43E11EDADD89FADF1222468.roa (raw, json)
Hash identifier: hrmpeovfn/AP1ifmws7R+Tg6do4AWChC8sE0gp9Ivzc=
Subject key identifier: 2D:EF:20:42:44:03:55:9B:5B:F2:1C:37:92:96:7A:5E:08:FC:6E:50
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C1D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73AD2168B43E11EDADD89FADF1222468.roa
Signing time: Fri 24 Feb 2023 12:26:24 +0000
ROA not before: Fri 24 Feb 2023 12:26:20 +0000
ROA not after: Sat 22 Feb 2025 12:26:20 +0000
asID: 61317
IP address blocks: 154.16.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3101 (0xc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 12:26:20 2023 GMT
Not After : Feb 22 12:26:20 2025 GMT
Subject: CN=63f8acf0-458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ab:13:46:fc:aa:94:3f:12:0c:ee:27:f7:2e:
8c:ee:43:89:b5:db:98:d2:b6:ba:2c:67:b0:ad:c0:
bf:34:ed:43:b4:64:20:3f:05:4e:8b:3b:d5:5a:62:
62:74:b5:71:e8:46:fd:2d:70:ac:87:9b:19:71:2d:
62:c7:87:e5:89:20:11:4a:8d:86:e9:82:7d:0c:a9:
e9:c9:f4:9d:62:4d:48:9a:5f:a2:84:39:d0:49:cd:
be:c1:11:b3:2c:c1:09:ba:43:5c:eb:af:95:ef:b2:
3e:02:bd:81:9d:c6:b0:3f:db:a9:9c:c0:c3:06:c1:
9d:bd:d0:ba:48:57:ae:5a:cb:c1:41:63:b7:6b:75:
20:d7:39:98:2a:06:00:86:50:c8:62:80:ac:69:21:
1c:c9:c3:31:7a:2a:d4:6d:9f:08:8b:ed:22:a1:3f:
70:d0:dd:54:72:98:dd:0e:35:78:8d:ae:46:50:92:
51:92:7c:6e:af:8c:72:a3:0b:64:cc:b1:d8:0a:d2:
e0:60:90:c1:c7:2f:f4:8f:0a:bb:38:ba:49:28:53:
19:bc:4e:d2:e6:3b:dc:8f:7e:bf:a3:62:d7:7b:79:
da:e8:33:38:f6:c7:17:9c:4e:fc:62:c0:70:ea:33:
88:39:80:75:1b:86:7c:92:8b:c6:04:65:34:58:fc:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EF:20:42:44:03:55:9B:5B:F2:1C:37:92:96:7A:5E:08:FC:6E:50
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73AD2168B43E11EDADD89FADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.57.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5a:2f:da:36:62:8e:e0:b7:22:99:82:7b:e9:b8:05:8a:08:
42:09:c1:c2:53:c5:d4:52:10:c3:1d:47:ff:ac:e9:91:39:01:
b3:1b:fc:c0:71:c6:b6:98:e2:6b:32:7e:e1:3f:35:4a:fd:7d:
74:31:5b:8d:39:22:c0:cd:3e:c4:2b:c8:71:1c:83:31:a4:75:
20:70:61:9e:06:9a:4d:3b:d8:6f:92:59:9f:3d:fa:91:25:18:
c1:c1:54:64:a2:e3:81:dd:4f:88:55:0a:4a:4d:3b:11:32:04:
c0:b6:72:b8:62:8d:bf:43:ba:4c:bf:39:25:69:a7:99:50:ea:
17:61:8f:1d:44:63:c6:d2:08:59:79:28:49:8b:7d:56:24:8b:
3a:9c:c3:19:25:c3:4f:a2:b5:ed:c7:24:bf:80:00:84:c4:d9:
93:b3:c5:99:01:ce:cd:4a:a2:85:05:93:4b:04:49:c9:e3:a1:
2c:35:50:f3:26:ff:de:a7:61:f7:ef:be:9f:7a:fa:8b:a8:e2:
e1:e3:03:c1:80:a2:bf:40:12:6a:d1:7f:27:dd:f1:55:28:0d:
59:04:40:e9:ec:ec:86:51:7b:2c:8b:c4:78:16:df:ce:5d:2c:
44:80:61:1a:32:14:89:61:41:07:22:d1:dd:f4:4c:62:04:0e:
6f:52:41:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjQxMjI2MjBaFw0yNTAyMjIxMjI2MjBaMBgxFjAU
BgNVBAMMDTYzZjhhY2YwLTQ1OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgqxNG/KqUPxIM7if3LozuQ4m125jStrosZ7CtwL807UO0ZCA/BU6LO9Va
YmJ0tXHoRv0tcKyHmxlxLWLHh+WJIBFKjYbpgn0MqenJ9J1iTUiaX6KEOdBJzb7B
EbMswQm6Q1zrr5Xvsj4CvYGdxrA/26mcwMMGwZ290LpIV65ay8FBY7drdSDXOZgq
BgCGUMhigKxpIRzJwzF6KtRtnwiL7SKhP3DQ3VRymN0ONXiNrkZQklGSfG6vjHKj
C2TMsdgK0uBgkMHHL/SPCrs4ukkoUxm8TtLmO9yPfr+jYtd7edroMzj2xxecTvxi
wHDqM4g5gHUbhnySi8YEZTRY/BODAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULe8g
QkQDVZtb8hw3kpZ6Xgj8blAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzczQUQyMTY4QjQzRTExRURBREQ4OUZBREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDkwDQYJKoZIhvcNAQEL
BQADggEBAF1aL9o2Yo7gtyKZgnvpuAWKCEIJwcJTxdRSEMMdR/+s6ZE5AbMb/MBx
xraY4msyfuE/NUr9fXQxW405IsDNPsQryHEcgzGkdSBwYZ4Gmk072G+SWZ89+pEl
GMHBVGSi44HdT4hVCkpNOxEyBMC2crhijb9Duky/OSVpp5lQ6hdhjx1EY8bSCFl5
KEmLfVYkizqcwxklw0+ite3HJL+AAITE2ZOzxZkBzs1KooUFk0sEScnjoSw1UPMm
/96nYffvvp96+ouo4uHjA8GAor9AEmrRfyfd8VUoDVkEQOns7IZReyyLxHgW385d
LESAYRoyFIlhQQci0d30TGIEDm9SQSE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org