Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73CCC92838EB11EE8CFCBE6E4AD9E6FC.roa
File: 73CCC92838EB11EE8CFCBE6E4AD9E6FC.roa (raw, json)
Hash identifier: eZXjuSe4S4mlt5vqNp9GAjsyoQs7mg70LzhAym7v7Ig=
Subject key identifier: 11:51:C7:4E:0B:F3:10:D5:05:54:96:84:94:B6:71:14:2C:88:EB:37
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1137
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73CCC92838EB11EE8CFCBE6E4AD9E6FC.roa
Signing time: Sat 12 Aug 2023 08:37:21 +0000
ROA not before: Sat 12 Aug 2023 08:37:17 +0000
ROA not after: Wed 14 Aug 2024 08:37:17 +0000
asID: 14670
IP address blocks: 154.16.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4407 (0x1137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 12 08:37:17 2023 GMT
Not After : Aug 14 08:37:17 2024 GMT
Subject: CN=64d744c1-4a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:a7:73:df:34:66:fc:45:6e:6a:05:9e:97:
93:90:61:3b:38:fd:df:45:64:3e:8a:f7:83:18:eb:
84:96:02:fb:ff:dc:d0:bc:8c:d5:38:d6:87:6b:d7:
b4:be:39:78:5a:97:c4:5b:7c:6e:59:75:3a:7a:25:
4a:2e:db:83:38:ad:76:34:34:18:2b:54:38:7b:25:
b1:55:64:44:8a:11:6d:d4:fc:f2:45:40:8e:7f:96:
f7:d9:b5:ca:4d:37:4e:2d:9b:f6:65:a9:85:d1:80:
fa:30:dd:e0:9f:f4:47:f5:71:35:f2:4c:75:dc:80:
e3:c1:b0:8a:78:79:9c:39:b1:bf:69:3c:83:64:7e:
4f:ef:ce:f2:17:39:73:df:24:d3:9d:c6:36:4d:b3:
18:fd:ee:ac:32:38:c1:06:79:a5:1b:31:91:2f:e3:
65:28:de:46:ae:ab:cd:7c:c2:01:96:51:77:01:ff:
46:b3:06:e2:9b:e7:87:c3:4c:71:c6:bb:8c:13:34:
ae:b8:e2:90:bf:b4:44:2d:f2:93:be:ee:56:ae:86:
17:f4:dd:4f:dc:0e:54:39:a6:74:b2:08:4f:3a:f3:
a9:97:94:2a:3d:d3:c0:49:f3:c2:1a:df:08:95:0f:
4e:96:ef:1c:39:4d:17:00:03:e6:24:d8:3f:12:14:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:51:C7:4E:0B:F3:10:D5:05:54:96:84:94:B6:71:14:2C:88:EB:37
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73CCC92838EB11EE8CFCBE6E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5a:18:42:49:0e:3e:78:7e:09:bd:68:b3:26:09:72:b1:d4:
45:08:ee:c4:36:31:73:d9:01:f1:ef:a6:46:e9:a8:09:5f:5c:
c8:22:38:fa:16:b2:b7:fd:8a:5c:7d:7a:e8:96:4b:e6:d4:f5:
20:30:95:4e:59:91:12:23:61:0c:91:b6:a4:97:9b:eb:22:6e:
37:f7:58:96:70:fe:ba:ff:60:f6:5b:f6:22:62:b5:1c:07:20:
3d:aa:8b:95:10:dd:97:45:bb:55:e4:2e:44:b5:e6:04:c8:06:
e0:b8:f3:f9:9f:f8:32:06:e0:73:02:d6:cb:c6:32:93:11:15:
c7:e8:0b:71:da:25:db:db:3e:d7:32:2b:00:76:fa:71:f6:0d:
3f:f1:24:41:fd:f5:c2:78:8b:13:2b:08:e9:93:72:14:07:a0:
6e:7f:90:cf:03:19:9e:b3:91:46:f0:fd:94:10:dd:75:c1:d9:
56:a9:6e:88:d8:c4:60:e8:a7:8f:81:bd:d3:4a:a3:d1:b4:50:
bf:f5:5e:29:a3:8f:3e:fb:7e:c4:4d:27:6f:68:1c:12:48:16:
38:0c:cb:be:5e:fe:a4:cb:c1:7d:4b:2c:7c:d2:8f:38:8c:e6:
20:20:50:46:44:1c:86:3f:4b:aa:2b:03:b0:29:48:e9:37:f8:
28:e6:d4:23
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICETcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MTIwODM3MTdaFw0yNDA4MTQwODM3MTdaMBgxFjAU
BgNVBAMTDTY0ZDc0NGMxLTRhMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCV8qdz3zRm/EVuagWel5OQYTs4/d9FZD6K94MY64SWAvv/3NC8jNU41odr
17S+OXhal8RbfG5ZdTp6JUou24M4rXY0NBgrVDh7JbFVZESKEW3U/PJFQI5/lvfZ
tcpNN04tm/ZlqYXRgPow3eCf9Ef1cTXyTHXcgOPBsIp4eZw5sb9pPINkfk/vzvIX
OXPfJNOdxjZNsxj97qwyOMEGeaUbMZEv42Uo3kauq818wgGWUXcB/0azBuKb54fD
THHGu4wTNK644pC/tEQt8pO+7lauhhf03U/cDlQ5pnSyCE8686mXlCo908BJ88Ia
3wiVD06W7xw5TRcAA+Yk2D8SFJ0ZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEVHH
TgvzENUFVJaElLZxFCyI6zcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzczQ0NDOTI4MzhFQjExRUU4Q0ZDQkU2RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHQwDQYJKoZIhvcNAQEL
BQADggEBAD5aGEJJDj54fgm9aLMmCXKx1EUI7sQ2MXPZAfHvpkbpqAlfXMgiOPoW
srf9ilx9euiWS+bU9SAwlU5ZkRIjYQyRtqSXm+sibjf3WJZw/rr/YPZb9iJitRwH
ID2qi5UQ3ZdFu1XkLkS15gTIBuC48/mf+DIG4HMC1svGMpMRFcfoC3HaJdvbPtcy
KwB2+nH2DT/xJEH99cJ4ixMrCOmTchQHoG5/kM8DGZ6zkUbw/ZQQ3XXB2VapbojY
xGDop4+BvdNKo9G0UL/1Ximjjz77fsRNJ29oHBJIFjgMy75e/qTLwX1LLHzSjziM
5iAgUEZEHIY/S6orA7ApSOk3+Cjm1CM=
-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:12 2024 by rpki-client on console-ams.rpki-client.org