Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/0E14878A676F11EEA3B081784AD9E6FC.roa
File: 0E14878A676F11EEA3B081784AD9E6FC.roa (raw, json)
Hash identifier: ilcPf1Q17dtn++BbRqyZZTuMiIFeb1JyNCjewhQwPU4=
Subject key identifier: D9:75:BA:34:C0:BB:F5:C5:F2:A4:38:53:28:40:6D:97:16:33:16:96
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: EF
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/0E14878A676F11EEA3B081784AD9E6FC.roa
Signing time: Tue 10 Oct 2023 13:15:17 +0000
ROA not before: Tue 10 Oct 2023 13:15:14 +0000
ROA not after: Fri 10 Oct 2025 13:15:14 +0000
asID: 15964
IP address blocks: 154.72.128.0/18 maxlen: 18
154.72.128.0/24 maxlen: 24
154.72.129.0/24 maxlen: 24
154.72.144.0/24 maxlen: 24
154.72.145.0/24 maxlen: 24
154.72.148.0/24 maxlen: 24
154.72.149.0/24 maxlen: 24
154.72.150.0/24 maxlen: 24
154.72.151.0/24 maxlen: 24
154.72.152.0/24 maxlen: 24
154.72.153.0/24 maxlen: 24
154.72.154.0/24 maxlen: 24
154.72.155.0/24 maxlen: 24
154.72.156.0/24 maxlen: 24
154.72.157.0/24 maxlen: 24
154.72.158.0/24 maxlen: 24
154.72.159.0/24 maxlen: 24
154.72.167.0/24 maxlen: 24
154.72.168.0/24 maxlen: 24
154.72.169.0/24 maxlen: 24
154.72.170.0/24 maxlen: 24
154.72.171.0/24 maxlen: 24
154.72.172.0/24 maxlen: 24
154.72.173.0/24 maxlen: 24
154.72.174.0/24 maxlen: 24
154.72.175.0/24 maxlen: 24
154.72.185.0/24 maxlen: 24
154.72.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 10 13:15:14 2023 GMT
Not After : Oct 10 13:15:14 2025 GMT
Subject: CN=65254e65-0506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:3a:5a:e7:37:06:22:56:6a:8b:81:6c:66:
fd:75:cc:7a:42:02:fd:66:4a:53:62:5d:fd:0f:69:
fa:09:d3:82:be:68:54:d5:ad:55:e1:2b:ef:d7:4f:
32:06:df:bb:d6:97:cd:63:3c:99:07:d3:e0:6b:8a:
0d:19:85:f6:db:39:c2:4b:0d:b0:a3:42:c8:f0:cb:
23:96:32:6b:02:67:43:00:6c:ba:4e:0a:91:1b:82:
b3:42:50:0a:3b:5b:40:4d:d6:0d:ef:ec:1c:a8:1a:
95:9c:bb:9b:4d:df:9c:86:8f:87:8c:57:96:ed:e9:
1f:ee:eb:47:cd:75:b4:1c:d5:78:ff:09:c7:6a:95:
94:70:ea:91:6a:b7:e7:b3:46:6d:32:dc:c5:60:34:
d9:fd:12:0f:4d:82:dc:41:4c:f6:1a:7b:3a:35:05:
56:7a:44:a9:af:67:af:da:1e:61:6f:29:b3:79:3a:
a4:1d:34:3e:93:10:8a:41:0e:70:f3:e6:8b:4b:a9:
a8:6b:70:b2:89:6d:59:3b:a6:57:ae:bd:65:bd:eb:
9e:64:70:bc:f8:d1:77:41:a7:02:01:6e:af:e0:97:
1a:f8:eb:07:a0:e4:11:20:01:37:a6:55:04:c3:a5:
f9:8f:e8:59:78:18:d4:31:fa:06:8c:8e:80:47:73:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:75:BA:34:C0:BB:F5:C5:F2:A4:38:53:28:40:6D:97:16:33:16:96
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/0E14878A676F11EEA3B081784AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
34:33:85:b0:36:ec:5d:94:82:7c:19:ff:14:95:98:99:af:36:
78:be:4e:c0:fc:ea:7a:fa:53:e4:21:ef:c0:4e:a2:a8:f1:e0:
41:bf:4f:c7:d4:3e:50:c0:06:3a:2a:c6:fd:4e:88:43:1e:0e:
72:ca:41:c5:98:02:e5:98:81:3f:cf:79:c8:ee:e1:01:ef:34:
8f:01:82:39:67:80:6e:96:ed:63:8c:2e:e1:ba:89:f0:6d:fc:
de:2d:6f:68:eb:bf:af:c6:65:54:6c:56:0d:11:ec:3e:70:d2:
f0:ac:10:91:05:00:1e:1b:9c:d2:03:ba:4f:f9:66:aa:25:91:
6c:d1:6d:f6:f0:55:d8:7c:d4:c1:81:a1:2f:a9:41:73:cf:36:
62:8b:83:c6:b3:69:98:b1:94:ba:fa:63:d7:bb:e0:b3:23:0a:
cd:e7:2d:56:f1:ea:05:2c:7d:9e:b3:3f:6b:da:c0:b9:7b:03:
09:be:36:ca:46:4b:eb:62:cd:98:82:f6:10:b1:b1:47:c9:58:
af:b4:5e:ce:bc:c5:d0:7c:34:ce:f6:12:b5:be:fa:60:df:40:
36:4d:02:3c:3b:0d:a5:84:75:fe:40:ee:cd:6f:13:3d:b2:bc:
cd:ed:a2:be:9d:ca:24:c7:ae:8f:00:41:fd:46:8f:69:aa:73:
24:a1:d6:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OTU5MUNBRjExMC8GA1UEBRMoQzEwOTBEMzdEQTlGRkVFRTFBOUMyMjlCQUZGMTE5
MEJEMjJFODkzNDAeFw0yMzEwMTAxMzE1MTRaFw0yNTEwMTAxMzE1MTRaMBgxFjAU
BgNVBAMTDTY1MjU0ZTY1LTA1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvpjpa5zcGIlZqi4FsZv11zHpCAv1mSlNiXf0PafoJ04K+aFTVrVXhK+/X
TzIG37vWl81jPJkH0+Brig0ZhfbbOcJLDbCjQsjwyyOWMmsCZ0MAbLpOCpEbgrNC
UAo7W0BN1g3v7ByoGpWcu5tN35yGj4eMV5bt6R/u60fNdbQc1Xj/CcdqlZRw6pFq
t+ezRm0y3MVgNNn9Eg9NgtxBTPYaezo1BVZ6RKmvZ6/aHmFvKbN5OqQdND6TEIpB
DnDz5otLqahrcLKJbVk7pleuvWW9655kcLz40XdBpwIBbq/glxr46weg5BEgATem
VQTDpfmP6Fl4GNQx+gaMjoBHc23XAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2XW6
NMC79cXypDhTKEBtlxYzFpYwHwYDVR0jBBgwFoAUwQkNN9qf/u4anCKbr/EZC9Iu
iTQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzM0NzQwMzJFQzI0NzExRURBRkE2Qzc5RkYxMjIyNDY4L3dRa05O
OXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dRa05OOXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk1OTFDLzM0NzQwMzJFQzI0NzExRURBRkE2Qzc5RkYx
MjIyNDY4LzBFMTQ4NzhBNjc2RjExRUVBM0IwODE3ODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaaSIAwDQYJKoZIhvcNAQEL
BQADggEBADQzhbA27F2UgnwZ/xSVmJmvNni+TsD86nr6U+Qh78BOoqjx4EG/T8fU
PlDABjoqxv1OiEMeDnLKQcWYAuWYgT/Pecju4QHvNI8BgjlngG6W7WOMLuG6ifBt
/N4tb2jrv6/GZVRsVg0R7D5w0vCsEJEFAB4bnNIDuk/5ZqolkWzRbfbwVdh81MGB
oS+pQXPPNmKLg8azaZixlLr6Y9e74LMjCs3nLVbx6gUsfZ6zP2vawLl7Awm+NspG
S+tizZiC9hCxsUfJWK+0Xs68xdB8NM72ErW++mDfQDZNAjw7DaWEdf5A7s1vEz2y
vM3tor6dyiTHro8AQf1Gj2mqcySh1r8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org