Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9975AB6903A11EFB3F3C498762E951A.roa
File: B9975AB6903A11EFB3F3C498762E951A.roa (raw, json)
Hash identifier: sfe90lFEfOn0N+6B1gbwLNpzNAOoK/6hyswjqwwpwWY=
Subject key identifier: C7:B8:14:D2:DF:7F:61:5A:C6:E9:78:B8:24:6C:F0:3A:80:B0:8E:61
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1899
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9975AB6903A11EFB3F3C498762E951A.roa
Signing time: Tue 22 Oct 2024 05:58:57 +0000
ROA not before: Tue 22 Oct 2024 05:58:53 +0000
ROA not after: Thu 22 Oct 2026 05:58:53 +0000
asID: 212238
IP address blocks: 154.16.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6297 (0x1899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 05:58:53 2024 GMT
Not After : Oct 22 05:58:53 2026 GMT
Subject: CN=67173f21-e30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:32:e1:5a:d8:83:ff:0f:7b:21:04:66:37:
0d:f0:6f:55:27:32:ab:18:7a:68:c5:b4:ab:95:bc:
f9:00:d9:20:ed:98:21:33:ae:90:8d:25:bd:44:29:
7e:e8:21:63:e0:9f:ea:d3:b3:24:4f:ed:49:02:20:
8a:1c:a3:f4:c1:2d:61:e8:07:e4:80:96:4c:e2:bb:
40:8a:65:53:52:cd:ed:9f:6e:03:b4:08:f2:ca:8e:
7f:9d:2f:1d:fc:9f:0e:b1:34:ba:08:96:99:95:5f:
6b:a8:7b:38:f8:47:8e:95:ac:77:02:36:85:1c:d4:
e7:bc:86:2c:8c:91:a0:93:d8:61:a4:6f:6d:1c:00:
b6:46:4c:4e:0e:a8:4b:a9:2a:58:7c:14:a1:a3:43:
02:c4:b3:ce:69:96:a1:85:91:a0:a8:92:0f:77:5c:
67:91:fb:b4:f9:44:45:ec:5c:63:4b:36:f7:09:65:
57:09:70:9d:f6:26:a0:af:20:a7:28:57:76:b3:bf:
32:82:17:26:5c:46:2f:5c:1c:c8:84:85:8b:48:ac:
9a:63:6f:d6:11:91:3e:13:87:75:c3:07:b7:6d:ec:
7f:57:bd:fe:a1:aa:3c:f0:b0:38:01:c1:be:49:4b:
56:cd:de:58:7d:95:2c:96:88:c5:c1:3e:24:3b:48:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B8:14:D2:DF:7F:61:5A:C6:E9:78:B8:24:6C:F0:3A:80:B0:8E:61
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9975AB6903A11EFB3F3C498762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.199.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c4:92:8c:9f:5a:4e:0d:5e:90:48:19:ac:b3:b8:14:d9:75:
39:e9:8e:53:f9:19:d8:bb:c3:d9:5e:ca:10:fb:4e:76:1f:e4:
8b:9c:3a:34:20:98:6c:3d:00:c8:20:a4:87:ed:d2:4c:cb:92:
0b:c9:9f:b0:61:f8:4b:65:a9:fa:f0:58:50:c3:06:b1:ae:a3:
e2:fd:3b:aa:f9:4e:e2:8c:3e:32:33:12:29:d3:f1:fd:bf:b0:
bc:1d:08:5f:09:9e:a5:b8:ad:95:0d:4a:35:00:1d:9f:c0:60:
46:5d:65:6c:be:a6:a6:c0:ae:66:c6:52:bb:75:e9:db:fe:24:
ab:4f:a2:1b:d4:43:63:58:ec:ec:cb:20:12:c2:2a:68:a5:a1:
ba:25:56:0a:88:cf:08:38:7f:b0:57:50:cd:e4:03:ef:f6:37:
af:fc:ef:b9:2d:0e:26:5d:61:2b:a2:57:fc:39:0d:dd:56:2d:
6f:b9:ad:ee:c0:85:b6:7d:df:a0:7d:6a:f2:40:79:2f:02:b6:
87:42:2d:84:81:65:fc:73:39:ec:be:0a:be:b2:43:db:bf:36:
41:9b:0c:a9:d1:c1:68:99:f8:c7:11:b3:e6:11:cc:f9:ce:4f:
67:b5:83:f0:23:9f:58:f1:eb:cc:3c:68:c0:86:31:67:c6:68:
0f:38:30:d8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGJkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDEwMjIwNTU4NTNaFw0yNjEwMjIwNTU4NTNaMBgxFjAU
BgNVBAMTDTY3MTczZjIxLWUzMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQ4TLhWtiD/w97IQRmNw3wb1UnMqsYemjFtKuVvPkA2SDtmCEzrpCNJb1E
KX7oIWPgn+rTsyRP7UkCIIoco/TBLWHoB+SAlkziu0CKZVNSze2fbgO0CPLKjn+d
Lx38nw6xNLoIlpmVX2uoezj4R46VrHcCNoUc1Oe8hiyMkaCT2GGkb20cALZGTE4O
qEupKlh8FKGjQwLEs85plqGFkaCokg93XGeR+7T5REXsXGNLNvcJZVcJcJ32JqCv
IKcoV3azvzKCFyZcRi9cHMiEhYtIrJpjb9YRkT4Th3XDB7dt7H9Xvf6hqjzwsDgB
wb5JS1bN3lh9lSyWiMXBPiQ7SBxHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUx7gU
0t9/YVrG6Xi4JGzwOoCwjmEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0I5OTc1QUI2OTAzQTExRUZCM0YzQzQ5ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMcwDQYJKoZIhvcNAQEL
BQADggEBAJLEkoyfWk4NXpBIGayzuBTZdTnpjlP5Gdi7w9leyhD7TnYf5IucOjQg
mGw9AMggpIft0kzLkgvJn7Bh+EtlqfrwWFDDBrGuo+L9O6r5TuKMPjIzEinT8f2/
sLwdCF8JnqW4rZUNSjUAHZ/AYEZdZWy+pqbArmbGUrt16dv+JKtPohvUQ2NY7OzL
IBLCKmilobolVgqIzwg4f7BXUM3kA+/2N6/877ktDiZdYSuiV/w5Dd1WLW+5re7A
hbZ936B9avJAeS8CtodCLYSBZfxzOey+Cr6yQ9u/NkGbDKnRwWiZ+McRs+YRzPnO
T2e1g/Ajn1jx68w8aMCGMWfGaA84MNg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org