Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EA0E7D86A71A11EF9ECA6954762E951A.roa
File: EA0E7D86A71A11EF9ECA6954762E951A.roa (raw, json)
Hash identifier: a20IeTSd1kon3z64Ssc0/CTz4USgAm1pDktrCMIHmDQ=
Subject key identifier: D7:20:D0:D7:59:DC:8E:37:26:41:AD:5A:FC:1C:FD:3D:90:2D:4F:BC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 18EF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EA0E7D86A71A11EF9ECA6954762E951A.roa
Signing time: Wed 20 Nov 2024 08:39:11 +0000
ROA not before: Wed 20 Nov 2024 08:39:07 +0000
ROA not after: Fri 20 Nov 2026 08:39:07 +0000
asID: 43641
IP address blocks: 154.16.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6383 (0x18ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 20 08:39:07 2024 GMT
Not After : Nov 20 08:39:07 2026 GMT
Subject: CN=673da02f-ee3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:30:a5:22:a8:18:80:38:37:db:fa:4c:77:
ae:86:6b:b6:f9:8c:19:bc:a2:dd:a8:87:5a:cf:79:
9e:c4:ac:e8:9c:b3:55:c5:cb:be:60:60:b8:d9:58:
05:62:fc:43:eb:b9:c2:31:5b:ed:a6:48:0e:1f:a4:
59:2c:64:34:24:d4:57:d2:56:62:bf:ef:d4:8d:39:
18:b0:ee:13:84:60:13:dc:d6:01:c7:14:b8:ff:6b:
72:2f:f8:bb:d5:a6:35:d0:2b:ea:15:b7:74:b5:91:
45:96:1b:e6:01:cc:4c:4f:0f:01:46:1a:c2:80:68:
c0:34:9f:3b:94:48:09:ab:e4:db:dc:84:24:be:f9:
52:09:c0:eb:c9:bb:99:80:33:c4:e1:39:d2:ad:9d:
ef:9e:51:df:9f:fc:e5:25:7a:f6:37:b3:15:bc:97:
51:41:53:55:aa:6d:83:1b:f2:f1:f1:37:38:8c:ca:
b2:fc:33:d3:01:bc:1d:0f:7b:61:96:93:8f:1b:53:
40:52:c0:70:3e:77:95:99:68:92:c4:a3:4b:4c:78:
1a:8a:65:8e:53:43:7f:f8:14:4f:17:0a:3a:89:58:
22:a8:a1:a7:03:0e:f3:3a:f7:f4:05:57:7b:08:09:
9d:5e:e1:65:b6:9c:34:33:0c:27:f1:26:3d:75:54:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:20:D0:D7:59:DC:8E:37:26:41:AD:5A:FC:1C:FD:3D:90:2D:4F:BC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EA0E7D86A71A11EF9ECA6954762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.132.0/24
Signature Algorithm: sha256WithRSAEncryption
22:07:53:85:55:f0:6c:50:c0:92:c1:7c:1a:56:47:02:72:df:
5d:0e:bd:84:7c:cc:ea:32:9a:73:73:c0:e3:fd:5a:9b:59:69:
a5:3c:ff:ec:06:2a:ad:2e:74:7e:f7:e5:70:4d:df:8c:c0:cf:
b9:b8:4f:6c:3f:09:f2:6a:b3:16:c8:69:00:ac:44:37:2a:3b:
91:56:d3:29:a1:b6:27:c6:78:aa:d5:dc:6f:ac:0e:d7:c7:25:
8d:55:4a:96:2c:ce:83:5f:04:0b:48:1f:f9:9b:9a:4e:cc:b9:
31:fd:d4:e7:fa:f3:dd:cf:ae:ba:cd:36:5f:7a:2d:57:a0:13:
f8:20:1c:1a:7b:b1:4a:23:e7:dd:49:ba:84:57:e7:18:5d:8b:
cc:47:3c:e8:a2:ad:2d:0c:63:b9:3a:d4:07:8d:5d:fc:85:32:
c4:11:7d:fa:38:04:c7:b4:04:c4:ba:be:2d:5a:ad:56:70:13:
b7:de:be:36:30:e7:66:da:32:20:01:66:35:27:51:2d:9a:e0:
50:65:eb:31:82:d3:53:c4:15:3a:eb:33:2f:d0:59:91:79:5c:
1b:7a:b1:77:bf:22:d7:36:fd:45:4e:5f:88:4d:7c:68:07:cc:
9e:59:4c:30:1a:5d:f6:ec:8c:b2:09:11:19:0e:21:0e:f9:7c:
76:e6:68:ba
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGO8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDExMjAwODM5MDdaFw0yNjExMjAwODM5MDdaMBgxFjAU
BgNVBAMTDTY3M2RhMDJmLWVlM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5uzClIqgYgDg32/pMd66Ga7b5jBm8ot2oh1rPeZ7ErOics1XFy75gYLjZ
WAVi/EPrucIxW+2mSA4fpFksZDQk1FfSVmK/79SNORiw7hOEYBPc1gHHFLj/a3Iv
+LvVpjXQK+oVt3S1kUWWG+YBzExPDwFGGsKAaMA0nzuUSAmr5NvchCS++VIJwOvJ
u5mAM8ThOdKtne+eUd+f/OUlevY3sxW8l1FBU1WqbYMb8vHxNziMyrL8M9MBvB0P
e2GWk48bU0BSwHA+d5WZaJLEo0tMeBqKZY5TQ3/4FE8XCjqJWCKooacDDvM69/QF
V3sICZ1e4WW2nDQzDCfxJj11VDnTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1yDQ
11ncjjcmQa1a/Bz9PZAtT7wwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0VBMEU3RDg2QTcxQTExRUY5RUNBNjk1NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEIQwDQYJKoZIhvcNAQEL
BQADggEBACIHU4VV8GxQwJLBfBpWRwJy310OvYR8zOoymnNzwOP9WptZaaU8/+wG
Kq0udH735XBN34zAz7m4T2w/CfJqsxbIaQCsRDcqO5FW0ymhtifGeKrV3G+sDtfH
JY1VSpYszoNfBAtIH/mbmk7MuTH91Of6893PrrrNNl96LVegE/ggHBp7sUoj591J
uoRX5xhdi8xHPOiirS0MY7k61AeNXfyFMsQRffo4BMe0BMS6vi1arVZwE7fevjYw
52baMiABZjUnUS2a4FBl6zGC01PEFTrrMy/QWZF5XBt6sXe/Itc2/UVOX4hNfGgH
zJ5ZTDAaXfbsjLIJERkOIQ75fHbmaLo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:28:48 2024 by rpki-client on console-fra.rpki-client.org