Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/04540B763C6311EE82DB186B4AD9E6FC.roa
File: 04540B763C6311EE82DB186B4AD9E6FC.roa (raw, json)
Hash identifier: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=
Subject key identifier: 30:89:0D:29:98:DD:F8:4E:3C:33:FD:E4:92:34:40:02:E6:99:DB:14
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 015D
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/04540B763C6311EE82DB186B4AD9E6FC.roa
Signing time: Wed 16 Aug 2023 18:30:47 +0000
ROA not before: Wed 16 Aug 2023 18:30:44 +0000
ROA not after: Tue 17 Aug 2027 18:30:44 +0000
asID: 23764
IP address blocks: 154.72.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Aug 16 18:30:44 2023 GMT
Not After : Aug 17 18:30:44 2027 GMT
Subject: CN=64dd15d7-1d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:d6:94:71:39:4e:47:72:b1:78:10:0f:16:
c3:22:29:06:65:34:f8:a0:27:e7:0f:3c:42:ab:83:
54:df:71:17:b3:e7:8e:d6:4e:c3:50:a8:2a:6a:f8:
32:14:91:b9:3e:40:f1:0f:57:8b:33:c5:4b:69:a6:
39:15:06:b0:46:32:f6:4e:cb:06:a4:1b:26:e3:cf:
52:1a:f0:f4:41:ee:ca:6e:a4:f0:05:50:06:e4:d7:
c3:f0:49:ca:21:99:0a:d6:0e:d2:0f:b8:7b:db:61:
ca:b4:d6:ce:c3:9a:19:45:bf:57:fd:37:5c:b7:9d:
97:15:37:3b:4a:eb:20:cf:7b:5f:23:37:72:a1:82:
6c:f0:4d:a3:0d:aa:03:06:85:35:fe:6f:ba:eb:ae:
8b:ab:65:8e:19:dd:b5:11:6d:7e:a3:34:4f:79:da:
ce:3b:9c:a0:a0:3f:29:ad:fb:7b:bd:e4:20:6f:88:
3b:a2:06:8d:8e:84:91:07:6b:f0:82:18:0f:6c:28:
de:16:47:e2:df:13:73:a3:13:28:8d:d4:b0:bb:36:
15:af:54:27:7f:c5:a6:65:87:d8:2e:cb:ee:5b:08:
7b:ac:fc:06:a0:f6:f8:cf:12:b6:4e:76:1e:72:94:
fb:c0:8b:59:13:0b:3a:e0:f2:e1:82:16:46:02:b4:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:89:0D:29:98:DD:F8:4E:3C:33:FD:E4:92:34:40:02:E6:99:DB:14
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/04540B763C6311EE82DB186B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a1:b4:37:92:66:3c:e9:57:79:96:21:0a:52:75:73:bd:93:
4d:37:69:88:97:5c:cd:01:ad:bd:fc:8e:1f:fd:c4:54:70:0a:
fd:6e:20:e0:7a:7c:b5:a0:1e:90:76:26:37:ed:4d:5f:52:d1:
bf:d2:2b:d1:49:b8:0d:65:82:34:3f:f7:e8:c8:ba:bc:41:a7:
4e:79:96:30:e1:68:ff:d6:e7:f3:98:37:8e:96:17:ae:c2:a3:
ac:9c:fc:eb:1d:7e:f5:97:f6:62:be:a6:9e:e1:d4:f8:cb:b4:
cd:b2:45:39:61:01:eb:01:b4:be:8d:49:5d:32:b6:fd:15:1e:
d5:8d:82:1f:c6:61:41:eb:b7:7b:e4:47:30:dc:a2:0d:72:9f:
fa:ef:45:71:08:86:f8:6c:14:d6:20:5d:88:e5:d7:d4:6a:a2:
17:db:1d:f5:63:3d:13:89:a1:2c:b9:81:23:1e:83:4e:1d:e6:
92:e6:0f:13:5d:86:a7:8f:0b:81:4a:ee:c5:13:3b:26:be:08:
84:1c:62:01:6a:5b:0f:eb:20:b8:d6:84:65:65:32:cb:78:01:
aa:9d:19:08:a3:2e:a2:7f:54:6c:65:75:9b:cc:e9:f3:2a:05:
7b:1d:1f:d2:62:54:34:d3:b2:eb:ec:9c:23:a5:65:10:85:c9:
c6:09:a1:1b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1
QzBCQ0I0MDE0OTAeFw0yMzA4MTYxODMwNDRaFw0yNzA4MTcxODMwNDRaMBgxFjAU
BgNVBAMTDTY0ZGQxNWQ3LTFkODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5ldaUcTlOR3KxeBAPFsMiKQZlNPigJ+cPPEKrg1TfcRez547WTsNQqCpq
+DIUkbk+QPEPV4szxUtppjkVBrBGMvZOywakGybjz1Ia8PRB7spupPAFUAbk18Pw
ScohmQrWDtIPuHvbYcq01s7DmhlFv1f9N1y3nZcVNztK6yDPe18jN3KhgmzwTaMN
qgMGhTX+b7rrrourZY4Z3bURbX6jNE952s47nKCgPymt+3u95CBviDuiBo2OhJEH
a/CCGA9sKN4WR+LfE3OjEyiN1LC7NhWvVCd/xaZlh9guy+5bCHus/Aag9vjPErZO
dh5ylPvAi1kTCzrg8uGCFkYCtHxZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMIkN
KZjd+E48M/3kkjRAAuaZ2xQwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0
AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh
Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYx
MjIyNDY4LzA0NTQwQjc2M0M2MzExRUU4MkRCMTg2QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSCgwDQYJKoZIhvcNAQEL
BQADggEBAFqhtDeSZjzpV3mWIQpSdXO9k003aYiXXM0Brb38jh/9xFRwCv1uIOB6
fLWgHpB2JjftTV9S0b/SK9FJuA1lgjQ/9+jIurxBp055ljDhaP/W5/OYN46WF67C
o6yc/OsdfvWX9mK+pp7h1PjLtM2yRTlhAesBtL6NSV0ytv0VHtWNgh/GYUHrt3vk
RzDcog1yn/rvRXEIhvhsFNYgXYjl19RqohfbHfVjPROJoSy5gSMeg04d5pLmDxNd
hqePC4FK7sUTOya+CIQcYgFqWw/rILjWhGVlMst4AaqdGQijLqJ/VGxldZvM6fMq
BXsdH9JiVDTTsuvsnCOlZRCFycYJoRs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org