Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D860CABAA7EE11EF8483B08C762E951A.roa
File: D860CABAA7EE11EF8483B08C762E951A.roa (raw, json)
Hash identifier: jnjU6X8UrHvjXTo4jJ43xHLuc1q3jM073KnF7J1ZxNw=
Subject key identifier: D6:8D:83:1D:8F:74:9A:88:CF:06:17:65:0F:36:00:DD:3E:03:C7:5D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18FF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D860CABAA7EE11EF8483B08C762E951A.roa
Signing time: Thu 21 Nov 2024 09:56:15 +0000
ROA not before: Thu 21 Nov 2024 09:56:11 +0000
ROA not after: Sat 21 Nov 2026 09:56:11 +0000
asID: 62240
IP address blocks: 154.16.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6399 (0x18ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 21 09:56:11 2024 GMT
Not After : Nov 21 09:56:11 2026 GMT
Subject: CN=673f03be-ab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:30:5c:7f:f8:f2:c6:b4:cc:24:c2:32:3a:
ad:be:4b:c0:87:ae:85:21:5b:11:2b:c1:31:66:16:
9b:53:ad:ed:81:7c:62:4a:0e:f2:5e:17:98:71:74:
36:e0:cc:fa:33:a0:75:6e:69:f2:63:21:73:ae:bb:
d5:5f:fb:16:82:35:ae:f1:63:35:ce:bc:e7:99:9d:
65:0b:99:da:b1:79:c2:a7:c5:07:29:5a:da:fa:68:
e8:c6:2e:e9:b8:e4:df:4a:c4:61:63:8f:d0:f1:29:
67:d8:80:17:3f:ad:29:e8:98:f4:b0:8e:b5:3c:91:
56:a3:08:f1:3c:8e:3d:55:da:63:47:56:78:b7:60:
31:09:c0:d6:93:9b:97:68:5c:21:4b:c0:6b:10:78:
c5:99:38:d1:9f:5f:a4:07:eb:c1:ba:36:c0:0a:5c:
f1:dd:e7:31:a2:de:0e:95:c7:ad:1c:73:50:38:8e:
00:d4:56:64:41:1b:08:a7:fd:69:84:8b:f0:f0:44:
27:41:ca:7f:cb:22:8b:55:4d:4b:29:8a:98:32:6b:
86:95:28:f2:2b:38:38:ab:a2:39:26:94:2b:ec:88:
f0:7f:17:76:00:03:6e:60:40:38:04:d7:be:17:2b:
87:ec:91:df:fc:e5:96:f5:95:28:86:5f:09:4b:fb:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:83:1D:8F:74:9A:88:CF:06:17:65:0F:36:00:DD:3E:03:C7:5D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D860CABAA7EE11EF8483B08C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8f:d6:57:47:57:7e:dc:7a:8c:03:67:ac:71:31:ce:1d:50:
34:2d:56:9f:87:d2:d3:16:13:6b:5c:c2:75:b8:8f:04:7d:ae:
83:f3:ff:31:61:8b:0c:1f:1a:86:02:3b:e9:a5:4b:a4:dc:9b:
8e:87:88:b1:2b:f1:64:a2:9f:35:af:48:f5:b6:5e:42:0c:74:
58:55:9b:ff:13:5e:41:e3:61:15:e0:5b:f5:56:2f:75:91:97:
7f:24:c2:7c:06:66:31:c3:b9:27:d0:31:9d:48:1e:ef:52:a4:
3e:7d:28:2d:dd:1e:ca:49:af:1a:12:ee:87:44:99:28:27:91:
59:99:57:79:d7:cb:76:a8:d5:25:15:74:8a:b8:aa:d0:c5:9d:
1a:31:a2:64:e4:97:56:ed:70:cd:f3:00:f0:de:2e:98:29:03:
ed:7d:c1:27:19:68:ef:9b:6a:44:b9:9c:df:e1:b8:4f:d8:61:
f0:5e:34:49:d1:56:84:e5:78:96:7a:c4:4d:c4:28:2a:15:9b:
11:6c:8b:60:35:dd:dd:a3:51:f1:ab:a8:6b:3f:97:09:70:d5:
ce:4f:90:cf:e5:64:a2:dd:57:5a:4a:b5:cc:84:4f:60:70:ad:
7f:34:87:3a:80:f5:cf:a3:43:cb:5a:1e:2e:7e:bb:74:cf:69:
c7:d8:27:55
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGP8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDExMjEwOTU2MTFaFw0yNjExMjEwOTU2MTFaMBgxFjAU
BgNVBAMTDTY3M2YwM2JlLWFiOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRVDBcf/jyxrTMJMIyOq2+S8CHroUhWxErwTFmFptTre2BfGJKDvJeF5hx
dDbgzPozoHVuafJjIXOuu9Vf+xaCNa7xYzXOvOeZnWULmdqxecKnxQcpWtr6aOjG
Lum45N9KxGFjj9DxKWfYgBc/rSnomPSwjrU8kVajCPE8jj1V2mNHVni3YDEJwNaT
m5doXCFLwGsQeMWZONGfX6QH68G6NsAKXPHd5zGi3g6Vx60cc1A4jgDUVmRBGwin
/WmEi/DwRCdByn/LIotVTUspipgya4aVKPIrODirojkmlCvsiPB/F3YAA25gQDgE
174XK4fskd/85Zb1lSiGXwlL++qjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1o2D
HY90mojPBhdlDzYA3T4Dx10wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q4NjBDQUJBQTdFRTExRUY4NDgzQjA4Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELMwDQYJKoZIhvcNAQEL
BQADggEBALOP1ldHV37ceowDZ6xxMc4dUDQtVp+H0tMWE2tcwnW4jwR9roPz/zFh
iwwfGoYCO+mlS6Tcm46HiLEr8WSinzWvSPW2XkIMdFhVm/8TXkHjYRXgW/VWL3WR
l38kwnwGZjHDuSfQMZ1IHu9SpD59KC3dHspJrxoS7odEmSgnkVmZV3nXy3ao1SUV
dIq4qtDFnRoxomTkl1btcM3zAPDeLpgpA+19wScZaO+bakS5nN/huE/YYfBeNEnR
VoTleJZ6xE3EKCoVmxFsi2A13d2jUfGrqGs/lwlw1c5PkM/lZKLdV1pKtcyET2Bw
rX80hzqA9c+jQ8taHi5+u3TPacfYJ1U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:56 2024 by rpki-client on console-fra.rpki-client.org