Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D9D7EB2F9B911ED8D8393784AD9E6FC.roa
File: 9D9D7EB2F9B911ED8D8393784AD9E6FC.roa (raw, json)
Hash identifier: VapNKOZksCE+K3ZOrwvPHDo/dTsGx/Q/jtxlm+CUQXA=
Subject key identifier: CA:7E:90:EC:7C:DA:C7:41:0E:D8:B9:78:02:D6:B3:BF:DD:BF:4A:D1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DDC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D9D7EB2F9B911ED8D8393784AD9E6FC.roa
Signing time: Tue 23 May 2023 22:31:53 +0000
ROA not before: Tue 23 May 2023 22:31:49 +0000
ROA not after: Sat 24 May 2025 22:31:49 +0000
asID: 46337
IP address blocks: 154.16.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3548 (0xddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 23 22:31:49 2023 GMT
Not After : May 24 22:31:49 2025 GMT
Subject: CN=646d3ed9-26fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ae:15:09:a4:81:c0:44:b4:35:07:03:11:85:
ca:02:46:59:fa:7b:58:50:82:ec:6a:e3:97:19:1b:
f9:f4:68:87:15:90:52:3e:0a:7d:53:5c:5d:b4:01:
44:2a:3b:d4:ce:76:f7:0e:4d:a6:bb:d0:0c:f6:33:
9e:9c:23:e3:2a:15:0f:45:0e:74:04:17:f7:4d:34:
8d:5e:31:06:50:dc:7b:c4:84:62:1e:a0:ca:59:28:
f4:aa:c6:02:d1:86:e7:2d:52:07:03:82:26:b3:9a:
16:1f:78:c3:84:b1:41:95:b1:b7:89:8d:80:8c:fa:
54:62:ee:f2:1f:ff:d3:57:37:f0:df:08:6d:17:05:
e9:27:a0:fd:60:c0:3b:4e:10:8a:28:2b:5f:cb:d1:
4f:c3:46:b6:e9:14:f9:c2:2f:dc:31:b0:07:56:e5:
44:32:be:c2:b6:54:a3:4f:71:d7:3a:9d:f7:51:5c:
0e:d5:0e:b4:6f:41:00:6e:20:26:7c:0a:85:39:b4:
9c:3f:bb:ed:cc:c6:47:9e:8a:51:c0:6e:cc:b0:69:
54:1e:4e:08:3a:ee:6f:0b:12:d8:c7:5a:5b:48:7a:
ee:72:55:ae:c0:9f:1e:5c:ba:a9:84:f6:2b:c8:97:
9d:c3:a9:66:22:1f:92:ce:e4:d2:18:fd:69:e9:20:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:90:EC:7C:DA:C7:41:0E:D8:B9:78:02:D6:B3:BF:DD:BF:4A:D1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D9D7EB2F9B911ED8D8393784AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:45:f6:f5:9a:9c:ae:d3:04:8e:a6:df:1d:7c:92:67:61:5e:
11:a2:bc:86:a0:97:3b:a3:0f:c5:f9:26:ab:db:1b:47:f9:72:
a0:3c:5d:e4:38:ac:f9:eb:55:06:3a:e4:63:0c:32:13:00:c7:
3e:12:32:5d:ed:19:6d:2c:57:87:4a:86:54:e4:50:f6:74:bd:
00:ca:dd:0f:00:39:2f:93:51:44:72:ae:a3:82:b8:2e:10:51:
0a:9e:ce:d3:3c:b2:13:b3:59:59:91:c7:f6:c4:fc:6f:a6:c9:
57:f2:a0:67:4c:fb:ce:5b:64:af:2f:54:d3:d9:e0:00:75:5e:
18:62:9d:61:19:41:3e:d1:52:5c:60:92:95:29:a6:97:c8:84:
3e:92:98:6e:ed:fa:d4:95:3a:56:7e:e2:25:c5:1c:cb:55:fd:
27:38:e6:5d:63:a8:11:a3:b4:84:f1:d5:3a:c9:a5:4d:68:59:
9f:4a:47:7f:94:03:67:e8:fd:41:21:f4:72:31:72:f0:c4:94:
a7:e9:21:f0:8f:7a:56:3c:cd:9c:c4:41:ec:d7:b7:b8:4e:18:
ac:35:2f:29:e9:85:7f:d3:13:33:53:e0:1c:0a:17:8e:5e:00:
60:f0:a9:bc:85:c6:b4:65:7b:25:c5:07:0e:28:9a:d5:21:01:
ed:41:63:8e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MjMyMjMxNDlaFw0yNTA1MjQyMjMxNDlaMBgxFjAU
BgNVBAMTDTY0NmQzZWQ5LTI2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDirhUJpIHARLQ1BwMRhcoCRln6e1hQguxq45cZG/n0aIcVkFI+Cn1TXF20
AUQqO9TOdvcOTaa70Az2M56cI+MqFQ9FDnQEF/dNNI1eMQZQ3HvEhGIeoMpZKPSq
xgLRhuctUgcDgiazmhYfeMOEsUGVsbeJjYCM+lRi7vIf/9NXN/DfCG0XBeknoP1g
wDtOEIooK1/L0U/DRrbpFPnCL9wxsAdW5UQyvsK2VKNPcdc6nfdRXA7VDrRvQQBu
ICZ8CoU5tJw/u+3MxkeeilHAbsywaVQeTgg67m8LEtjHWltIeu5yVa7Anx5cuqmE
9ivIl53DqWYiH5LO5NIY/WnpIG1ZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUyn6Q
7Hzax0EO2Ll4Atazv92/StEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzlEOUQ3RUIyRjlCOTExRUQ4RDgzOTM3ODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHYwDQYJKoZIhvcNAQEL
BQADggEBAM5F9vWanK7TBI6m3x18kmdhXhGivIaglzujD8X5JqvbG0f5cqA8XeQ4
rPnrVQY65GMMMhMAxz4SMl3tGW0sV4dKhlTkUPZ0vQDK3Q8AOS+TUURyrqOCuC4Q
UQqeztM8shOzWVmRx/bE/G+myVfyoGdM+85bZK8vVNPZ4AB1XhhinWEZQT7RUlxg
kpUpppfIhD6SmG7t+tSVOlZ+4iXFHMtV/Sc45l1jqBGjtITx1TrJpU1oWZ9KR3+U
A2fo/UEh9HIxcvDElKfpIfCPelY8zZzEQezXt7hOGKw1LynphX/TEzNT4BwKF45e
AGDwqbyFxrRleyXFBw4omtUhAe1BY44=
-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:12 2024 by rpki-client on console-ams.rpki-client.org