Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F200A1D0D54811EEABE0B98D775412E6.roa
File: F200A1D0D54811EEABE0B98D775412E6.roa (raw, json)
Hash identifier: pyzVdJsbeVbykm+2rLgfX5yxxKkq9gH5y3qQWURBEXs=
Subject key identifier: 68:D0:96:31:34:73:87:B2:A8:65:0B:94:1E:6C:D2:21:95:F2:D2:61
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14EE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F200A1D0D54811EEABE0B98D775412E6.roa
Signing time: Tue 27 Feb 2024 08:19:37 +0000
ROA not before: Tue 27 Feb 2024 08:19:34 +0000
ROA not after: Fri 27 Feb 2026 08:19:34 +0000
asID: 201341
IP address blocks: 154.16.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5358 (0x14ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 08:19:34 2024 GMT
Not After : Feb 27 08:19:34 2026 GMT
Subject: CN=65dd9b19-d27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:65:5b:52:8a:39:a2:d1:01:1b:63:a9:f0:
19:75:22:9b:d3:00:18:63:77:d4:27:48:e0:17:41:
d8:84:31:5e:9e:a8:c1:43:2c:b6:7e:e6:65:b5:7b:
d3:79:fc:1a:d6:30:e7:bf:f0:f3:43:4d:a5:0b:5f:
80:4e:b1:3e:bd:3d:94:a2:c8:68:bc:34:bd:dd:ee:
fb:71:8c:b7:43:66:c3:2b:79:23:89:25:24:a8:ae:
c9:7d:60:a5:62:a4:01:78:3b:01:d3:37:b7:34:ae:
a7:cb:ef:f0:b5:15:59:d1:05:af:e7:27:06:c8:b2:
95:43:92:02:2b:7c:f2:79:97:59:6a:4a:9e:e5:12:
bf:ae:4a:8f:4c:4b:8b:77:f0:1c:0e:71:cb:f9:5b:
d0:db:d2:fe:e7:79:43:81:be:cc:29:b4:cc:e5:ff:
51:34:9a:7f:5c:c4:c3:8e:bb:9e:c1:f8:b2:55:2f:
44:8e:4f:00:ae:09:ca:85:81:68:c3:e0:ff:f6:f5:
5e:02:46:58:08:70:4b:cc:79:49:24:9a:00:a9:6b:
98:dc:f6:f7:6d:ea:b3:28:08:64:d2:c2:24:03:b0:
be:7e:9d:1f:3f:9f:8c:40:6b:21:ab:13:b5:ff:97:
5a:88:00:ba:5c:4e:84:b6:38:ec:40:63:de:94:db:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D0:96:31:34:73:87:B2:A8:65:0B:94:1E:6C:D2:21:95:F2:D2:61
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F200A1D0D54811EEABE0B98D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ec:a3:75:be:93:db:8d:57:1b:99:c4:c7:1a:b0:3e:42:66:
29:3e:86:3c:8f:73:dd:f2:df:8e:0a:b0:28:a2:11:c3:97:21:
f8:04:30:8c:9d:60:bb:92:47:29:ed:00:32:23:41:cf:dc:4e:
55:44:9c:b6:78:a9:89:21:78:1a:ac:72:8a:ff:49:c9:a9:19:
14:72:75:d2:f8:d0:a0:e5:d5:ee:85:54:44:93:c0:8f:35:f6:
da:ef:2c:39:49:23:c1:00:ff:db:8c:0c:08:22:55:46:3e:85:
88:61:b8:18:fd:71:c9:ef:f2:b6:0f:a5:25:7c:1b:ad:2d:5c:
4e:4f:8c:58:27:b6:df:00:2c:3a:85:3a:12:41:8b:12:66:de:
fe:60:2d:e0:15:95:66:07:9b:e2:cc:0a:8b:88:15:d4:df:bf:
39:ba:67:8b:d4:66:17:d6:f5:d4:8d:4d:c8:4b:60:10:79:c0:
e5:d6:a1:1c:ea:8e:5f:9e:02:6d:60:56:b8:0a:52:69:15:a4:
8e:29:f1:aa:29:c8:27:16:9e:1b:53:75:0f:39:bb:36:ea:b5:
5a:23:04:a1:d1:da:34:ae:49:7f:ce:ec:43:83:73:67:72:3c:
dc:c2:6f:65:0e:d2:56:57:96:3a:c8:f0:2e:64:42:73:60:d8:
23:69:5a:f8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFO4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDAyMjcwODE5MzRaFw0yNjAyMjcwODE5MzRaMBgxFjAU
BgNVBAMTDTY1ZGQ5YjE5LWQyN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDghGVbUoo5otEBG2Op8Bl1IpvTABhjd9QnSOAXQdiEMV6eqMFDLLZ+5mW1
e9N5/BrWMOe/8PNDTaULX4BOsT69PZSiyGi8NL3d7vtxjLdDZsMreSOJJSSorsl9
YKVipAF4OwHTN7c0rqfL7/C1FVnRBa/nJwbIspVDkgIrfPJ5l1lqSp7lEr+uSo9M
S4t38BwOccv5W9Db0v7neUOBvswptMzl/1E0mn9cxMOOu57B+LJVL0SOTwCuCcqF
gWjD4P/29V4CRlgIcEvMeUkkmgCpa5jc9vdt6rMoCGTSwiQDsL5+nR8/n4xAayGr
E7X/l1qIALpcToS2OOxAY96U23/lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUaNCW
MTRzh7KoZQuUHmzSIZXy0mEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0YyMDBBMUQwRDU0ODExRUVBQkUwQjk4RDc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDUwDQYJKoZIhvcNAQEL
BQADggEBAKTso3W+k9uNVxuZxMcasD5CZik+hjyPc93y344KsCiiEcOXIfgEMIyd
YLuSRyntADIjQc/cTlVEnLZ4qYkheBqscor/ScmpGRRyddL40KDl1e6FVESTwI81
9trvLDlJI8EA/9uMDAgiVUY+hYhhuBj9ccnv8rYPpSV8G60tXE5PjFgntt8ALDqF
OhJBixJm3v5gLeAVlWYHm+LMCouIFdTfvzm6Z4vUZhfW9dSNTchLYBB5wOXWoRzq
jl+eAm1gVrgKUmkVpI4p8aopyCcWnhtTdQ85uzbqtVojBKHR2jSuSX/O7EODc2dy
PNzCb2UO0lZXljrI8C5kQnNg2CNpWvg=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:24 2024 by rpki-client on console-fra.rpki-client.org