Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC914350E77411EEBBC579AB775412E6.roa
File: AC914350E77411EEBBC579AB775412E6.roa (raw, json)
Hash identifier: h+vV4Vay+uhMemwanamqYB0/vK+9HAbpcjI6X85tCcA=
Subject key identifier: B4:41:D9:7F:CF:A3:E8:F9:7E:A3:81:DA:81:3F:0F:FF:84:12:90:52
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 155E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC914350E77411EEBBC579AB775412E6.roa
Signing time: Thu 21 Mar 2024 11:17:59 +0000
ROA not before: Thu 21 Mar 2024 11:17:56 +0000
ROA not after: Sat 21 Mar 2026 11:17:56 +0000
asID: 19338
IP address blocks: 154.16.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5470 (0x155e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 21 11:17:56 2024 GMT
Not After : Mar 21 11:17:56 2026 GMT
Subject: CN=65fc1767-cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:47:89:7f:81:dd:9d:be:fc:fe:b9:dc:50:
50:5c:1b:02:11:be:81:7f:aa:85:56:68:51:c5:8f:
8c:1b:9e:8f:2f:88:1c:80:c8:15:fb:87:6b:be:68:
32:f0:4e:43:57:4a:de:45:72:ca:7c:65:23:f6:31:
e4:d9:d9:14:d5:87:a1:58:5d:b4:9a:a0:87:e4:9d:
54:ed:d4:eb:5c:b8:cb:ef:3f:74:01:fe:22:12:6f:
3f:75:88:17:66:29:88:bd:a7:3c:33:80:a7:9b:8d:
f9:57:ad:2d:2f:3f:c2:f5:ea:ba:7c:00:74:66:2b:
1b:31:73:0f:14:ce:dc:1f:53:0f:f3:83:60:67:61:
69:2b:41:ee:86:f4:37:58:4d:c6:aa:fe:11:d5:f0:
08:04:52:86:85:a5:03:e7:ac:61:30:cd:76:4c:43:
cb:61:f6:52:3f:59:82:4e:47:82:ae:9d:ca:d1:08:
dc:2b:22:f0:2c:5f:37:e8:93:c7:02:fb:ad:65:ba:
c4:92:4b:27:23:a0:26:fc:47:87:c9:1d:84:87:4d:
ec:bd:85:d2:64:37:4a:f5:ed:dd:c3:8f:50:ff:52:
ec:a1:4b:24:e6:4d:51:78:99:7f:79:a9:1b:cd:34:
8b:36:b5:6b:cd:d1:22:a8:be:0b:34:ec:30:35:d1:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:D9:7F:CF:A3:E8:F9:7E:A3:81:DA:81:3F:0F:FF:84:12:90:52
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AC914350E77411EEBBC579AB775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:84:bc:49:f9:92:d7:a7:45:c1:05:4d:97:ac:54:38:a3:07:
29:cd:cf:96:1b:0e:b1:74:24:65:48:eb:90:a0:da:21:d8:22:
53:ca:49:df:6f:ac:0b:1e:4c:4f:97:a0:23:d8:da:a9:70:81:
da:fb:3e:22:51:69:70:cd:f1:16:dc:b7:e6:79:bc:61:11:38:
d2:70:f8:1c:01:2b:03:d0:af:30:9d:f3:05:cb:48:01:d7:b8:
1b:2b:6e:9c:3e:c4:72:2b:c3:41:6c:7f:06:97:27:ed:06:a5:
c4:1e:3f:8f:8f:10:1c:02:fc:27:0d:d9:fb:c2:f3:c1:e9:93:
a6:2e:87:06:0f:1d:84:b6:29:6a:79:a5:d1:24:3f:0c:7d:cf:
d2:58:25:f1:09:4e:1d:60:0c:e8:61:0f:21:6b:ab:ac:df:b3:
32:d6:ac:4a:2b:50:01:0b:90:20:01:92:c4:67:6f:43:c0:e2:
7b:80:b1:ed:8f:ed:13:82:3c:c0:f4:9c:c3:3a:98:a5:b9:8b:
ce:de:5c:77:10:08:2b:28:f2:c2:99:f8:9e:43:cd:3b:e7:8f:
11:73:da:e0:85:d6:49:9a:f7:32:cc:55:32:97:8a:b1:c6:ca:
f7:30:42:47:a3:90:58:cc:b2:7f:db:f5:9e:e2:69:25:a3:5b:
c5:a4:61:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFV4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDAzMjExMTE3NTZaFw0yNjAzMjExMTE3NTZaMBgxFjAU
BgNVBAMTDTY1ZmMxNzY3LWNkZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJuEeJf4Hdnb78/rncUFBcGwIRvoF/qoVWaFHFj4wbno8viByAyBX7h2u+
aDLwTkNXSt5Fcsp8ZSP2MeTZ2RTVh6FYXbSaoIfknVTt1OtcuMvvP3QB/iISbz91
iBdmKYi9pzwzgKebjflXrS0vP8L16rp8AHRmKxsxcw8UztwfUw/zg2BnYWkrQe6G
9DdYTcaq/hHV8AgEUoaFpQPnrGEwzXZMQ8th9lI/WYJOR4KuncrRCNwrIvAsXzfo
k8cC+61lusSSSycjoCb8R4fJHYSHTey9hdJkN0r17d3Dj1D/UuyhSyTmTVF4mX95
qRvNNIs2tWvN0SKovgs07DA10Q+fAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtEHZ
f8+j6Pl+o4HagT8P/4QSkFIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0FDOTE0MzUwRTc3NDExRUVCQkM1NzlBQjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENAwDQYJKoZIhvcNAQEL
BQADggEBAAyEvEn5ktenRcEFTZesVDijBynNz5YbDrF0JGVI65Cg2iHYIlPKSd9v
rAseTE+XoCPY2qlwgdr7PiJRaXDN8Rbct+Z5vGERONJw+BwBKwPQrzCd8wXLSAHX
uBsrbpw+xHIrw0FsfwaXJ+0GpcQeP4+PEBwC/CcN2fvC88Hpk6YuhwYPHYS2KWp5
pdEkPwx9z9JYJfEJTh1gDOhhDyFrq6zfszLWrEorUAELkCABksRnb0PA4nuAse2P
7ROCPMD0nMM6mKW5i87eXHcQCCso8sKZ+J5DzTvnjxFz2uCF1kma9zLMVTKXirHG
yvcwQkejkFjMsn/b9Z7iaSWjW8WkYSc=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:23 2024 by rpki-client on console-fra.rpki-client.org