Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA9CCD06AF0B11EFA3137658762E951A.roa
File: CA9CCD06AF0B11EFA3137658762E951A.roa (raw, json)
Hash identifier: 9mkw9J1c28thwN8O25ifGkz5bIPTnkhaq3SfBrmUI94=
Subject key identifier: 98:18:BE:CC:21:62:FC:B1:10:1D:14:BB:E1:02:1C:26:0B:B6:18:88
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1919
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA9CCD06AF0B11EFA3137658762E951A.roa
Signing time: Sat 30 Nov 2024 11:11:05 +0000
ROA not before: Sat 30 Nov 2024 11:11:01 +0000
ROA not after: Mon 30 Nov 2026 11:11:01 +0000
asID: 9009
IP address blocks: 154.16.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 Jan 2025 00:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6425 (0x1919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 30 11:11:01 2024 GMT
Not After : Nov 30 11:11:01 2026 GMT
Subject: CN=674af2c9-32af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:0d:ac:91:26:a5:56:55:e3:6c:52:7b:79:
55:6f:3c:23:45:7a:30:6e:7a:df:22:4c:75:92:9b:
9f:f9:a4:d6:5d:0f:c1:64:e4:82:0c:27:37:67:f5:
87:ff:ce:ca:01:93:c8:00:ee:7c:c3:a6:0b:91:92:
07:4a:23:70:e3:94:b5:72:08:a7:2a:99:6d:00:c8:
79:53:99:ff:0e:cd:bb:78:46:cc:1d:56:2a:20:82:
15:19:f7:99:e2:5e:3f:0b:2c:6b:b8:2e:a0:4e:fb:
15:5f:b6:2c:1f:ac:19:2b:40:0e:c8:1c:8d:2c:c9:
97:36:6a:68:cb:6f:5f:a0:a8:12:f0:8e:0a:13:c1:
6f:12:b8:03:a2:73:06:9b:0b:d8:35:af:c0:56:15:
b9:95:60:b2:88:39:7e:a9:25:49:a0:cb:91:be:0f:
c4:7c:7b:33:94:c2:b8:3f:82:ba:71:d8:b4:82:c2:
27:d5:66:54:c8:8f:6c:14:80:67:78:87:07:22:4d:
67:4e:b9:d9:c3:77:4a:a3:c6:11:c3:c5:56:cb:a9:
39:ed:70:34:de:0f:0f:94:5d:7e:26:d7:61:40:59:
73:dd:ca:a1:a0:91:04:48:74:6d:ad:bd:dd:2c:eb:
e3:0c:77:c3:50:f2:4c:bf:d3:98:10:df:b9:84:38:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:BE:CC:21:62:FC:B1:10:1D:14:BB:E1:02:1C:26:0B:B6:18:88
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA9CCD06AF0B11EFA3137658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c9:c5:69:20:0d:66:7b:18:d8:13:35:b7:d7:9e:ec:ed:b3:
7f:2e:98:b9:f6:41:26:76:be:15:2e:32:2b:6b:d6:4b:e5:d9:
6a:85:32:16:14:cd:68:db:39:15:d9:be:5b:66:f0:06:8e:62:
6a:ba:82:be:3f:f3:57:57:d8:09:50:78:b2:84:22:92:22:99:
30:12:bc:e5:c4:d0:39:4e:44:b8:0a:ed:3b:f5:97:0f:bc:eb:
0b:6c:2c:74:ae:40:99:be:d2:07:73:d2:09:f4:cf:40:ca:68:
93:88:d6:5a:7e:8d:1f:3c:2c:3b:d2:29:8f:e6:31:43:8b:9e:
a1:21:27:29:1c:6c:5a:95:34:c2:d4:21:12:61:5a:f0:8f:72:
24:c1:15:ed:97:87:a7:3b:3b:50:81:fe:29:93:81:d5:ab:6c:
88:68:c8:79:4f:2a:b5:74:21:bb:22:db:fa:19:ca:5d:48:81:
9a:65:b3:7a:11:e0:ca:09:d1:09:d7:7c:e2:87:ce:b6:34:7c:
2a:bd:32:7c:cc:ef:06:0b:81:da:96:90:06:80:e3:c6:6b:24:
14:4e:b9:9d:29:0b:d9:02:a3:41:7f:c2:27:86:c8:80:4b:7f:
35:79:75:47:9c:ca:f0:81:f6:3e:d4:32:6f:80:ab:75:d9:23:
30:6b:cb:3a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGRkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDExMzAxMTExMDFaFw0yNjExMzAxMTExMDFaMBgxFjAU
BgNVBAMTDTY3NGFmMmM5LTMyYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmlw2skSalVlXjbFJ7eVVvPCNFejBuet8iTHWSm5/5pNZdD8Fk5IIMJzdn
9Yf/zsoBk8gA7nzDpguRkgdKI3DjlLVyCKcqmW0AyHlTmf8Ozbt4RswdViogghUZ
95niXj8LLGu4LqBO+xVftiwfrBkrQA7IHI0syZc2amjLb1+gqBLwjgoTwW8SuAOi
cwabC9g1r8BWFbmVYLKIOX6pJUmgy5G+D8R8ezOUwrg/grpx2LSCwifVZlTIj2wU
gGd4hwciTWdOudnDd0qjxhHDxVbLqTntcDTeDw+UXX4m12FAWXPdyqGgkQRIdG2t
vd0s6+MMd8NQ8ky/05gQ37mEOAkvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmBi+
zCFi/LEQHRS74QIcJgu2GIgwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0NBOUNDRDA2QUYwQjExRUZBMzEzNzY1ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFcwDQYJKoZIhvcNAQEL
BQADggEBAFvJxWkgDWZ7GNgTNbfXnuzts38umLn2QSZ2vhUuMitr1kvl2WqFMhYU
zWjbORXZvltm8AaOYmq6gr4/81dX2AlQeLKEIpIimTASvOXE0DlORLgK7Tv1lw+8
6wtsLHSuQJm+0gdz0gn0z0DKaJOI1lp+jR88LDvSKY/mMUOLnqEhJykcbFqVNMLU
IRJhWvCPciTBFe2Xh6c7O1CB/imTgdWrbIhoyHlPKrV0Ibsi2/oZyl1IgZpls3oR
4MoJ0QnXfOKHzrY0fCq9MnzM7wYLgdqWkAaA48ZrJBROuZ0pC9kCo0F/wieGyIBL
fzV5dUecyvCB9j7UMm+Aq3XZIzBryzo=
-----END CERTIFICATE-----
Generated at Mon Jan 13 04:54:09 2025 by rpki-client on console-ams.rpki-client.org