Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CAAA9834C9B711EFA554245B762E951A.roa
File: CAAA9834C9B711EFA554245B762E951A.roa (raw, json)
Hash identifier: NwHscuu7pCOP0PFPgg4z83J7Ri6UTj0Ug4Fg1/Ry/qE=
Subject key identifier: 05:94:A8:B5:96:D6:55:43:21:D0:46:DF:48:DE:39:F8:8E:7C:F6:16
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1987
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CAAA9834C9B711EFA554245B762E951A.roa
Signing time: Fri 03 Jan 2025 09:47:49 +0000
ROA not before: Fri 03 Jan 2025 09:47:45 +0000
ROA not after: Sat 02 Jan 2027 09:47:45 +0000
asID: 329384
IP address blocks: 154.16.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6535 (0x1987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jan 3 09:47:45 2025 GMT
Not After : Jan 2 09:47:45 2027 GMT
Subject: CN=6777b245-5ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:a5:65:8d:b1:13:61:4a:20:c2:ff:b9:f5:
47:24:f2:26:f4:21:65:1d:55:00:0f:ae:0a:4d:f6:
fe:ba:13:87:0f:ee:78:08:61:02:16:9d:eb:65:86:
a2:4d:0a:b7:5d:2e:2e:5e:a4:6e:ad:2f:9b:70:0c:
3c:28:94:6e:b4:ad:2f:bf:15:92:2f:2c:3c:fc:18:
26:fe:d3:bc:c4:cd:fc:a9:70:8c:77:2b:96:4e:ca:
ad:f4:d5:d4:16:71:ba:c1:04:10:b2:19:91:b6:8a:
5e:af:53:da:f5:b4:06:41:a7:84:12:de:fc:e3:79:
c8:11:6d:8a:c0:37:a2:22:8a:7c:b9:fb:5d:12:ed:
12:7e:f0:15:e8:23:be:2f:10:0e:05:a7:8e:1e:38:
d5:83:66:c0:c7:a7:6b:e6:9b:b0:b7:9c:5f:a4:cf:
08:50:42:ea:1a:fc:ad:c7:d4:b4:4e:0e:cf:00:0f:
96:e1:dc:d9:da:3c:b0:f1:eb:2e:57:0a:50:31:06:
2d:58:d7:1c:a0:b8:e4:cc:da:06:7b:10:9a:70:60:
19:ae:04:88:43:96:a9:ed:96:94:b9:c7:30:48:ad:
e6:de:86:11:06:00:1b:2b:26:bf:ac:ef:00:73:7e:
c4:01:56:f0:a4:ee:d2:41:50:8c:c8:04:5f:64:01:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:A8:B5:96:D6:55:43:21:D0:46:DF:48:DE:39:F8:8E:7C:F6:16
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CAAA9834C9B711EFA554245B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.62.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ac:00:2a:a5:b0:0e:4e:f5:ff:38:cc:72:40:1e:48:6f:8b:
27:70:93:15:d0:c1:3e:e9:00:32:38:9b:18:17:e1:fc:f5:80:
fe:82:b6:15:b8:28:cb:d4:ed:c2:0b:c2:97:3d:57:e9:a5:fb:
04:8f:ef:cd:ba:7a:b7:48:64:a7:ce:c9:9c:6a:0a:00:6e:81:
d6:36:00:7c:1a:77:52:17:7b:cd:a0:99:5e:23:5b:03:d3:8a:
9f:e3:f4:03:7a:bb:b7:05:c7:b2:ce:03:61:5a:0f:5c:a0:8d:
02:d1:08:02:29:d2:d4:09:c7:0e:f3:4a:3a:cf:c4:fd:73:c1:
6a:5c:05:14:39:fb:61:19:3d:fb:ee:61:b8:03:e9:e3:b0:fa:
93:12:cc:e3:21:37:43:83:7b:3e:f1:55:bb:b2:fc:1a:27:c4:
be:cb:77:95:2c:d0:60:b9:73:8e:ac:4a:05:bd:f5:be:e5:cd:
c9:fb:57:61:73:67:87:93:f5:55:59:d7:68:13:5d:44:33:82:
70:71:2d:d5:09:ab:ab:37:2d:41:39:93:54:97:fc:10:53:09:
9c:fa:b8:28:aa:5f:4a:91:77:5b:2d:05:44:ff:ac:b6:19:23:
29:e8:18:90:20:7a:6e:db:9a:4a:e0:bb:1f:88:c6:52:88:c1:
14:f6:11:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGYcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTAxMDMwOTQ3NDVaFw0yNzAxMDIwOTQ3NDVaMBgxFjAU
BgNVBAMTDTY3NzdiMjQ1LTVjYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0taVljbETYUogwv+59Uck8ib0IWUdVQAPrgpN9v66E4cP7ngIYQIWnetl
hqJNCrddLi5epG6tL5twDDwolG60rS+/FZIvLDz8GCb+07zEzfypcIx3K5ZOyq30
1dQWcbrBBBCyGZG2il6vU9r1tAZBp4QS3vzjecgRbYrAN6Iiiny5+10S7RJ+8BXo
I74vEA4Fp44eONWDZsDHp2vmm7C3nF+kzwhQQuoa/K3H1LRODs8AD5bh3NnaPLDx
6y5XClAxBi1Y1xyguOTM2gZ7EJpwYBmuBIhDlqntlpS5xzBIrebehhEGABsrJr+s
7wBzfsQBVvCk7tJBUIzIBF9kAZOpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUBZSo
tZbWVUMh0EbfSN45+I589hYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0NBQUE5ODM0QzlCNzExRUZBNTU0MjQ1Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaED4wDQYJKoZIhvcNAQEL
BQADggEBAFisACqlsA5O9f84zHJAHkhviydwkxXQwT7pADI4mxgX4fz1gP6CthW4
KMvU7cILwpc9V+ml+wSP7826erdIZKfOyZxqCgBugdY2AHwad1IXe82gmV4jWwPT
ip/j9AN6u7cFx7LOA2FaD1ygjQLRCAIp0tQJxw7zSjrPxP1zwWpcBRQ5+2EZPfvu
YbgD6eOw+pMSzOMhN0ODez7xVbuy/BonxL7Ld5Us0GC5c46sSgW99b7lzcn7V2Fz
Z4eT9VVZ12gTXUQzgnBxLdUJq6s3LUE5k1SX/BBTCZz6uCiqX0qRd1stBUT/rLYZ
IynoGJAgem7bmkrgux+IxlKIwRT2Ec8=
-----END CERTIFICATE-----
Generated at Wed Feb 5 11:40:18 2025 by rpki-client