Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC0DA89A7FEC11EFA521B241762E951A.roa
File: FC0DA89A7FEC11EFA521B241762E951A.roa (raw, json)
Hash identifier: VVaEn+hPVdKHmK83CuX1aN93GhZuLpYHY28dHlL56U0=
Subject key identifier: 15:04:9F:07:33:BE:A8:4B:3A:B7:E2:C9:63:ED:E4:98:07:8C:A3:BE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1837
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC0DA89A7FEC11EFA521B241762E951A.roa
Signing time: Tue 01 Oct 2024 12:02:09 +0000
ROA not before: Tue 01 Oct 2024 12:02:06 +0000
ROA not after: Thu 01 Oct 2026 12:02:06 +0000
asID: 174
IP address blocks: 154.16.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6199 (0x1837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 1 12:02:06 2024 GMT
Not After : Oct 1 12:02:06 2026 GMT
Subject: CN=66fbe4c1-bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:7d:a2:20:76:dd:3b:e4:e4:8b:c9:4a:64:
da:d9:ec:38:a7:bd:89:49:4e:59:74:c3:53:fa:7d:
49:99:2a:01:10:0f:d2:1d:1d:06:cb:c8:55:6c:ae:
15:35:59:7b:61:ee:65:fb:f7:94:5f:65:bd:ae:66:
e2:9b:81:15:f4:33:d4:8d:bc:b8:f6:19:f6:39:29:
af:20:4c:b4:90:45:3f:ff:27:a4:91:c1:85:15:0d:
bc:14:4c:b4:7c:54:f9:63:38:c7:c8:47:5c:e3:12:
e5:25:d4:1d:2e:f9:b9:2d:85:4f:09:8b:02:78:96:
9a:e9:8e:42:12:51:8c:12:db:cf:41:86:7c:ce:ea:
dd:c3:55:aa:c7:ce:87:11:63:3f:22:01:35:8b:a3:
1b:b2:5d:1a:6b:96:4a:db:04:ff:f9:e6:13:95:33:
54:b1:eb:cf:4b:10:6b:c5:75:59:68:a6:50:ce:8a:
5f:05:2f:17:4d:b8:5e:95:9c:42:09:b1:f3:17:fc:
df:c8:4b:38:9f:99:ea:55:92:96:17:dd:80:96:84:
6b:a2:b3:e1:e5:86:49:e5:e8:6b:e2:14:bf:a9:18:
9d:81:ab:61:00:08:83:e1:74:57:42:46:a6:87:c0:
20:35:df:00:b7:11:65:f4:b0:28:c4:3c:4e:4b:e5:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:9F:07:33:BE:A8:4B:3A:B7:E2:C9:63:ED:E4:98:07:8C:A3:BE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC0DA89A7FEC11EFA521B241762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.49.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:37:5f:eb:50:aa:6a:4b:d3:0e:ab:8c:48:05:d3:1b:f8:57:
c4:e9:f9:16:44:85:a4:d0:61:e4:29:49:87:32:f7:24:95:1d:
bc:85:d6:26:d7:d4:e2:cb:a3:31:08:43:9f:c5:8e:3e:2e:b4:
ec:b0:e4:e8:d1:41:df:35:17:fc:c8:47:62:3d:83:da:0c:9e:
b8:63:9d:57:11:6e:60:6e:ac:e4:32:c6:14:48:71:28:48:f9:
89:6a:5b:25:a9:aa:ea:06:e0:57:9c:14:70:07:65:f6:20:14:
1a:73:fc:6c:1a:40:ab:4a:16:78:c2:9f:b3:4b:5a:59:20:77:
f6:f2:de:e5:1d:d3:81:2b:b5:0c:d6:88:bb:5f:5e:19:84:1b:
32:35:44:8f:e4:f1:b4:8a:29:fa:bd:b0:8c:00:dc:04:27:af:
97:00:75:f5:f5:64:57:2c:59:1b:72:3b:a0:94:52:3d:96:ef:
87:4a:e4:6f:c0:79:53:54:67:b5:2e:a2:aa:b6:12:41:23:63:
2f:00:3d:b6:0c:5a:b1:5a:60:0e:8e:0c:5d:c8:60:e1:7a:45:
11:92:42:3f:5f:05:28:bf:7b:4c:d6:6a:0f:98:18:0a:36:63:
80:5c:ad:b9:a8:5b:39:ad:c1:a6:50:aa:ca:4e:62:a5:21:19:
08:bf:41:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDEwMDExMjAyMDZaFw0yNjEwMDExMjAyMDZaMBgxFjAU
BgNVBAMTDTY2ZmJlNGMxLWJiZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7On2iIHbdO+Tki8lKZNrZ7DinvYlJTll0w1P6fUmZKgEQD9IdHQbLyFVs
rhU1WXth7mX795RfZb2uZuKbgRX0M9SNvLj2GfY5Ka8gTLSQRT//J6SRwYUVDbwU
TLR8VPljOMfIR1zjEuUl1B0u+bkthU8JiwJ4lprpjkISUYwS289BhnzO6t3DVarH
zocRYz8iATWLoxuyXRprlkrbBP/55hOVM1Sx689LEGvFdVloplDOil8FLxdNuF6V
nEIJsfMX/N/ISzifmepVkpYX3YCWhGuis+Hlhknl6GviFL+pGJ2Bq2EACIPhdFdC
RqaHwCA13wC3EWX0sCjEPE5L5dfNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFQSf
BzO+qEs6t+LJY+3kmAeMo74wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0ZDMERBODlBN0ZFQzExRUZBNTIxQjI0MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDEwDQYJKoZIhvcNAQEL
BQADggEBAMg3X+tQqmpL0w6rjEgF0xv4V8Tp+RZEhaTQYeQpSYcy9ySVHbyF1ibX
1OLLozEIQ5/Fjj4utOyw5OjRQd81F/zIR2I9g9oMnrhjnVcRbmBurOQyxhRIcShI
+YlqWyWpquoG4FecFHAHZfYgFBpz/GwaQKtKFnjCn7NLWlkgd/by3uUd04ErtQzW
iLtfXhmEGzI1RI/k8bSKKfq9sIwA3AQnr5cAdfX1ZFcsWRtyO6CUUj2W74dK5G/A
eVNUZ7Uuoqq2EkEjYy8APbYMWrFaYA6ODF3IYOF6RRGSQj9fBSi/e0zWag+YGAo2
Y4BcrbmoWzmtwaZQqspOYqUhGQi/QTA=
-----END CERTIFICATE-----
Generated at Tue Oct 22 09:34:30 2024 by rpki-client on console-fra.rpki-client.org