Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE1D649678D911EF9477B3B6762E951A.roa
File: AE1D649678D911EF9477B3B6762E951A.roa (raw, json)
Hash identifier: wmJc3xKKcClAGUj9HUAC6Crg9tTEw1tTzBB+HTAfHNY=
Subject key identifier: 3C:CC:C6:FD:BA:BF:3D:E1:EF:44:9C:26:30:B7:D7:EC:98:2C:8F:A7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1823
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE1D649678D911EF9477B3B6762E951A.roa
Signing time: Sun 22 Sep 2024 11:56:20 +0000
ROA not before: Sun 22 Sep 2024 11:56:13 +0000
ROA not after: Tue 22 Sep 2026 11:56:13 +0000
asID: 834
IP address blocks: 154.16.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6179 (0x1823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 22 11:56:13 2024 GMT
Not After : Sep 22 11:56:13 2026 GMT
Subject: CN=66f005e4-e85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:90:07:63:bd:e9:6c:a9:5f:3e:33:3e:7e:
5a:f7:6d:d5:09:53:d7:04:df:3a:d2:9b:d0:82:ab:
1b:8d:3d:b8:e1:5a:61:b8:88:c8:cc:31:93:ce:aa:
50:05:6d:21:52:80:45:0c:ca:92:cf:e6:66:e3:24:
30:4a:75:11:54:6f:46:f3:15:d0:90:d1:7c:5e:10:
38:29:28:93:66:d4:6b:6e:6f:f5:a9:6d:61:be:5a:
02:38:a6:a7:49:b0:74:3d:4c:b9:50:bc:1e:97:e0:
cf:ca:5c:46:1c:b7:91:b3:ff:fc:15:7f:08:a3:8f:
16:46:17:42:84:9e:34:60:84:0e:75:7c:99:09:47:
b4:4a:06:0c:2a:3e:d3:82:70:1b:3e:f8:48:1a:f5:
9d:4f:ea:9c:27:0f:6a:cc:39:9a:2c:2d:66:c2:2c:
a7:f3:b2:b6:53:f2:a6:82:a0:fc:d0:85:60:cb:3a:
7c:31:fc:31:79:b1:7c:de:35:08:60:0f:73:f9:57:
be:5a:74:7b:5a:cf:57:f5:15:42:02:4b:87:57:55:
68:e3:27:9e:7f:86:8a:9e:48:e3:67:c7:17:08:38:
ee:c0:e3:33:a9:ac:7b:0d:04:ab:26:2c:10:cb:aa:
f8:18:83:14:87:6d:b9:9c:77:da:6d:35:d1:c9:2b:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:C6:FD:BA:BF:3D:E1:EF:44:9C:26:30:B7:D7:EC:98:2C:8F:A7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE1D649678D911EF9477B3B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cb:1a:ee:6b:42:02:fe:8d:64:1c:2e:d7:09:98:a8:03:9c:
2f:ff:39:df:23:c8:99:ec:3d:2c:f3:b9:82:42:77:c6:67:0e:
b5:06:be:92:b2:d5:c6:79:43:1e:da:76:7e:6a:6f:a9:63:2c:
9c:dc:8d:4c:74:37:7b:df:9f:3f:13:0b:37:b4:0b:c6:1d:f3:
39:ce:00:bf:c1:2c:c5:c5:21:58:28:d1:5d:a0:e2:1e:f5:4f:
b1:e2:7e:85:f8:09:9d:f4:3e:d9:b4:0d:04:a1:29:ef:60:5b:
61:70:d7:76:2d:c0:ed:c0:43:9a:3b:6a:90:49:7d:03:a2:4e:
5e:d6:03:8a:3e:29:0b:13:28:8c:d8:62:5a:4a:a2:eb:2b:01:
2b:e0:50:51:57:57:31:f9:39:61:51:2c:17:2a:c0:d6:4e:fc:
ec:a7:aa:03:a3:f6:b1:d1:9c:bb:43:16:03:3a:5d:17:11:25:
e0:73:1f:8e:0d:48:dc:69:8d:2e:72:fe:1b:84:c4:b4:1c:86:
b0:2f:0f:d2:f2:e6:34:1a:7c:66:fe:a5:8c:f5:b1:c8:a4:6b:
0b:9e:51:bc:d0:7f:fc:1b:98:f3:7d:66:67:4d:ea:d6:98:ed:
cb:58:6d:4a:f6:5b:c7:79:24:d8:99:e9:19:ee:79:d8:e7:09:
cb:ac:b9:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGCMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA5MjIxMTU2MTNaFw0yNjA5MjIxMTU2MTNaMBgxFjAU
BgNVBAMTDTY2ZjAwNWU0LWU4NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCopZAHY73pbKlfPjM+flr3bdUJU9cE3zrSm9CCqxuNPbjhWmG4iMjMMZPO
qlAFbSFSgEUMypLP5mbjJDBKdRFUb0bzFdCQ0XxeEDgpKJNm1Gtub/WpbWG+WgI4
pqdJsHQ9TLlQvB6X4M/KXEYct5Gz//wVfwijjxZGF0KEnjRghA51fJkJR7RKBgwq
PtOCcBs++Ega9Z1P6pwnD2rMOZosLWbCLKfzsrZT8qaCoPzQhWDLOnwx/DF5sXze
NQhgD3P5V75adHtaz1f1FUICS4dXVWjjJ55/hoqeSONnxxcIOO7A4zOprHsNBKsm
LBDLqvgYgxSHbbmcd9ptNdHJK1bLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPMzG
/bq/PeHvRJwmMLfX7Jgsj6cwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0FFMUQ2NDk2NzhEOTExRUY5NDc3QjNCNjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFcwDQYJKoZIhvcNAQEL
BQADggEBAGTLGu5rQgL+jWQcLtcJmKgDnC//Od8jyJnsPSzzuYJCd8ZnDrUGvpKy
1cZ5Qx7adn5qb6ljLJzcjUx0N3vfnz8TCze0C8Yd8znOAL/BLMXFIVgo0V2g4h71
T7HifoX4CZ30Ptm0DQShKe9gW2Fw13YtwO3AQ5o7apBJfQOiTl7WA4o+KQsTKIzY
YlpKousrASvgUFFXVzH5OWFRLBcqwNZO/OynqgOj9rHRnLtDFgM6XRcRJeBzH44N
SNxpjS5y/huExLQchrAvD9Ly5jQafGb+pYz1scikawueUbzQf/wbmPN9ZmdN6taY
7ctYbUr2W8d5JNiZ6RnuedjnCcusuSE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:27 2024 by rpki-client on console-ams.rpki-client.org