Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/F5B1757EDBAC11EE9D32CD9F775412E6.roa
File: F5B1757EDBAC11EE9D32CD9F775412E6.roa (raw, json)
Hash identifier: p2PvWVXozp76TJL1A0Rb662sqwU3ieUIaXa0z3SL5kw=
Subject key identifier: CF:1C:CF:BD:C8:15:54:AB:CF:53:3F:DA:E0:EB:4B:9C:CD:D9:42:81
Certificate issuer: /CN=F36C01B9AF/serialNumber=E2FB6437B4C94D5F51221B1650563A48FF54BE09
Certificate serial: 12
Authority key identifier: E2:FB:64:37:B4:C9:4D:5F:51:22:1B:16:50:56:3A:48:FF:54:BE:09
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/F5B1757EDBAC11EE9D32CD9F775412E6.roa
Signing time: Wed 06 Mar 2024 11:30:40 +0000
ROA not before: Wed 06 Mar 2024 11:30:36 +0000
ROA not after: Fri 06 Mar 2026 11:30:36 +0000
asID: 25543
IP address blocks: 154.66.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft
rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C01B9AF/serialNumber=E2FB6437B4C94D5F51221B1650563A48FF54BE09
Validity
Not Before: Mar 6 11:30:36 2024 GMT
Not After : Mar 6 11:30:36 2026 GMT
Subject: CN=65e853e0-b04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:0c:26:6b:0d:ac:e3:1f:1f:da:fa:af:a3:
ff:fa:bd:cf:65:53:81:bd:24:e8:0d:60:48:d1:94:
f5:e9:68:4d:a5:93:cb:f8:ac:0c:b0:6c:2b:40:6d:
d8:43:94:a9:66:05:43:ee:90:07:75:d2:7c:b4:61:
07:1f:ca:79:75:46:7b:b3:ee:42:2b:6f:d6:8a:a4:
9d:33:0d:b9:35:14:a9:06:d0:58:e5:e2:77:1e:59:
bf:11:1a:1e:c8:3c:77:19:9f:5e:ff:6e:c6:a1:99:
1b:ab:19:f5:9d:df:8a:f6:5a:ce:e8:2c:9d:08:50:
93:b0:84:4c:7d:7e:dd:a6:40:94:25:0c:0e:d2:07:
0f:fb:fc:3f:7a:df:64:64:9c:e5:a0:4f:af:24:61:
aa:3d:9d:0b:3f:9a:c4:ee:85:5f:11:3a:e9:c2:8d:
4b:41:15:53:46:54:2c:72:7b:0d:51:3b:81:44:b6:
7b:2d:8d:c9:0d:0e:2d:34:45:d2:bc:db:7e:9b:87:
fd:d1:da:c8:09:23:b7:8a:d7:b0:36:f4:c9:18:54:
c7:6d:f5:02:69:69:00:f5:24:f0:d0:de:99:2c:3e:
ad:d0:dc:d4:54:85:22:49:aa:fa:e8:fb:65:1a:42:
82:2a:7d:2f:41:c8:4e:5a:a2:57:27:2d:4a:61:47:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:CF:BD:C8:15:54:AB:CF:53:3F:DA:E0:EB:4B:9C:CD:D9:42:81
X509v3 Authority Key Identifier:
keyid:E2:FB:64:37:B4:C9:4D:5F:51:22:1B:16:50:56:3A:48:FF:54:BE:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/F5B1757EDBAC11EE9D32CD9F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.160.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:ca:d2:c3:47:0a:57:21:12:2e:7a:09:e4:07:67:f6:1a:f8:
90:d1:7a:fd:43:e0:d3:44:2b:34:dd:b2:5c:33:8a:42:27:5f:
fb:cb:44:be:08:a8:74:f3:e2:d0:f6:f0:84:cb:57:dc:85:41:
df:ae:7e:af:65:4d:85:67:a2:55:e3:70:92:a3:aa:04:1c:97:
7b:1c:b1:82:24:59:26:43:79:f5:a1:9a:28:27:04:1c:2f:22:
12:b4:fe:a4:72:ad:bd:fd:57:1d:90:00:aa:3d:67:96:bb:87:
3e:71:2b:f4:29:f0:c9:c1:4c:2e:ee:e7:40:67:ef:7c:2d:12:
7b:77:85:cd:9a:66:28:00:b6:be:b3:de:64:6e:ea:ee:2d:b0:
09:31:80:8b:db:65:a2:3e:03:8f:24:eb:ad:38:01:bc:0c:60:
de:8d:03:7f:ee:cd:6b:c4:e4:ff:69:02:62:1d:dd:1f:da:2e:
a2:25:81:57:82:88:9c:60:0b:14:3a:a3:3f:18:c9:47:52:2d:
54:df:4f:e1:d8:76:f7:1f:21:fc:e0:cd:62:f5:68:03:04:f9:
5e:7d:6b:56:14:28:40:cd:fc:b1:fb:1d:af:9a:3a:0f:dc:81:
82:a6:7d:e3:06:fb:91:43:27:9e:b6:c0:28:97:ac:22:f8:ed:
a0:62:32:78
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MDFCOUFGMTEwLwYDVQQFEyhFMkZCNjQzN0I0Qzk0RDVGNTEyMjFCMTY1MDU2M0E0
OEZGNTRCRTA5MB4XDTI0MDMwNjExMzAzNloXDTI2MDMwNjExMzAzNlowGDEWMBQG
A1UEAxMNNjVlODUzZTAtYjA0ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK3cDCZrDazjHx/a+q+j//q9z2VTgb0k6A1gSNGU9eloTaWTy/isDLBsK0Bt
2EOUqWYFQ+6QB3XSfLRhBx/KeXVGe7PuQitv1oqknTMNuTUUqQbQWOXidx5ZvxEa
Hsg8dxmfXv9uxqGZG6sZ9Z3fivZazugsnQhQk7CETH1+3aZAlCUMDtIHD/v8P3rf
ZGSc5aBPryRhqj2dCz+axO6FXxE66cKNS0EVU0ZULHJ7DVE7gUS2ey2NyQ0OLTRF
0rzbfpuH/dHayAkjt4rXsDb0yRhUx231AmlpAPUk8NDemSw+rdDc1FSFIkmq+uj7
ZRpCgip9L0HITlqiVyctSmFHJ68CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTPHM+9
yBVUq89TP9rg60uczdlCgTAfBgNVHSMEGDAWgBTi+2Q3tMlNX1EiGxZQVjpI/1S+
CTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzAxQjkvODk1RDkzMDBEQTJFMTFFRUEwQjBDNEE2Nzc1NDEyRTYvNHZ0a043
VEpUVjlSSWhzV1VGWTZTUDlVdmdrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNHZ0a043VEpUVjlSSWhzV1VGWTZTUDlVdmdrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzAxQjkvODk1RDkzMDBEQTJFMTFFRUEwQjBDNEE2Nzc1
NDEyRTYvRjVCMTc1N0VEQkFDMTFFRTlEMzJDRDlGNzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJpCoDANBgkqhkiG9w0BAQsF
AAOCAQEAqsrSw0cKVyESLnoJ5Adn9hr4kNF6/UPg00QrNN2yXDOKQidf+8tEvgio
dPPi0PbwhMtX3IVB365+r2VNhWeiVeNwkqOqBByXexyxgiRZJkN59aGaKCcEHC8i
ErT+pHKtvf1XHZAAqj1nlruHPnEr9CnwycFMLu7nQGfvfC0Se3eFzZpmKAC2vrPe
ZG7q7i2wCTGAi9tloj4DjyTrrTgBvAxg3o0Df+7Na8Tk/2kCYh3dH9ouoiWBV4KI
nGALFDqjPxjJR1ItVN9P4dh29x8h/ODNYvVoAwT5Xn1rVhQoQM38sfsdr5o6D9yB
gqZ94wb7kUMnnrbAKJesIvjtoGIyeA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:35 2024 by rpki-client on console-fra.rpki-client.org