Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/503F47260C8311EF86243E52017001B1.roa
File: 503F47260C8311EF86243E52017001B1.roa (raw, json)
Hash identifier: wKOg12K2EcbwOeitmyMoER1g+tBzlye9uNvP6Lxm8zg=
Subject key identifier: 5A:08:79:23:F3:AA:E9:5E:03:E5:11:1A:E3:F2:57:64:88:B9:02:02
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1079
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/503F47260C8311EF86243E52017001B1.roa
Signing time: Tue 07 May 2024 15:06:00 +0000
ROA not before: Tue 07 May 2024 15:05:57 +0000
ROA not after: Sat 09 May 2026 15:05:57 +0000
asID: 7018
IP address blocks: 102.129.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Jun 2024 00:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4217 (0x1079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 7 15:05:57 2024 GMT
Not After : May 9 15:05:57 2026 GMT
Subject: CN=663a4358-d729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:bd:97:55:0e:b7:3e:13:16:00:4f:09:5e:
01:7e:c1:78:11:03:fa:5c:9f:83:1a:7f:c6:08:69:
c7:5e:2c:00:c1:24:1a:1e:38:50:97:86:62:79:d1:
aa:87:fb:ea:3d:96:31:85:45:1f:8f:bd:70:7f:7c:
64:19:7c:e4:a5:c2:f7:dc:37:5e:f4:62:72:e1:8c:
3f:47:f2:c5:ef:45:88:4f:63:15:64:35:36:26:84:
88:eb:17:0d:d2:1e:e5:e3:92:15:95:45:2b:91:28:
4e:7f:ee:ae:46:3b:8b:0c:1a:7e:d5:73:a5:69:b1:
ef:d9:ee:9a:68:58:50:14:9f:50:b1:62:89:5b:99:
7c:8a:2b:ef:4c:35:49:3e:7c:ea:4e:60:10:f7:07:
c8:62:1f:b6:37:82:48:89:97:d9:18:b1:be:a8:22:
51:21:0a:24:a0:1a:e6:ac:36:b2:4b:a1:f0:6a:00:
48:7e:d2:20:51:dc:18:02:fd:5b:41:90:21:6a:4f:
fa:86:43:80:13:4b:a5:a8:4f:7f:39:8d:d0:3a:a1:
7b:52:c3:a6:71:aa:73:5e:1b:59:0b:42:7e:5f:ab:
12:5d:b2:94:24:30:eb:43:78:e7:3e:a1:fb:23:44:
f5:5b:4e:0f:28:2b:60:60:db:80:b8:a3:88:19:e6:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:79:23:F3:AA:E9:5E:03:E5:11:1A:E3:F2:57:64:88:B9:02:02
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/503F47260C8311EF86243E52017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:12:00:32:aa:5b:b7:f1:8a:24:c4:93:7b:8e:c0:bb:f9:13:
5c:8b:1d:80:3f:e7:da:53:7f:6c:6e:2e:bb:c3:50:9a:0f:a7:
7b:5e:41:e6:ce:22:c3:0a:27:9c:d7:64:1c:78:a4:ae:14:bb:
86:40:1f:77:4d:54:b2:42:4e:e3:0d:49:a8:0f:6e:6d:5b:21:
09:92:62:10:0f:91:00:da:5e:82:46:1b:86:7e:28:40:10:1d:
8f:e3:f0:4f:12:a2:0b:c1:e7:07:97:f4:89:5f:5b:f6:00:cf:
4e:27:5c:ac:9e:09:c7:6d:6f:b4:3e:3f:0e:79:f2:3b:3b:79:
e4:bd:75:67:76:21:02:b2:bf:85:21:0a:04:75:03:b7:0c:dc:
5b:df:12:f1:99:cb:0a:f3:fd:0b:30:60:49:a1:e3:d9:b1:42:
09:a5:91:0c:9b:1a:a7:67:30:78:d7:c6:7a:8d:0e:d1:a5:7f:
1e:10:41:0f:f7:d5:75:9c:56:74:4b:5d:59:53:28:b5:2a:66:
0d:29:59:75:62:16:b8:f9:4a:4b:7d:8d:8c:af:a5:50:d2:a0:
01:32:8d:ec:62:47:56:9a:1e:22:df:44:e8:55:74:67:82:ff:
3f:28:52:e3:2c:94:07:98:6d:fa:f9:18:1f:2a:40:c4:5e:77:
3a:45:97:e6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEHkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA1MDcxNTA1NTdaFw0yNjA1MDkxNTA1NTdaMBgxFjAU
BgNVBAMTDTY2M2E0MzU4LWQ3MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZ972XVQ63PhMWAE8JXgF+wXgRA/pcn4Maf8YIacdeLADBJBoeOFCXhmJ5
0aqH++o9ljGFRR+PvXB/fGQZfOSlwvfcN170YnLhjD9H8sXvRYhPYxVkNTYmhIjr
Fw3SHuXjkhWVRSuRKE5/7q5GO4sMGn7Vc6Vpse/Z7ppoWFAUn1CxYolbmXyKK+9M
NUk+fOpOYBD3B8hiH7Y3gkiJl9kYsb6oIlEhCiSgGuasNrJLofBqAEh+0iBR3BgC
/VtBkCFqT/qGQ4ATS6WoT385jdA6oXtSw6ZxqnNeG1kLQn5fqxJdspQkMOtDeOc+
ofsjRPVbTg8oK2Bg24C4o4gZ5sWDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWgh5
I/Oq6V4D5REa4/JXZIi5AgIwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzUwM0Y0NzI2MEM4MzExRUY4NjI0M0U1MjAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdIwDQYJKoZIhvcNAQEL
BQADggEBAH8SADKqW7fxiiTEk3uOwLv5E1yLHYA/59pTf2xuLrvDUJoPp3teQebO
IsMKJ5zXZBx4pK4Uu4ZAH3dNVLJCTuMNSagPbm1bIQmSYhAPkQDaXoJGG4Z+KEAQ
HY/j8E8SogvB5weX9IlfW/YAz04nXKyeCcdtb7Q+Pw558js7eeS9dWd2IQKyv4Uh
CgR1A7cM3FvfEvGZywrz/QswYEmh49mxQgmlkQybGqdnMHjXxnqNDtGlfx4QQQ/3
1XWcVnRLXVlTKLUqZg0pWXViFrj5Skt9jYyvpVDSoAEyjexiR1aaHiLfROhVdGeC
/z8oUuMslAeYbfr5GB8qQMRedzpFl+Y=
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:40 2024 by rpki-client on console-fra.rpki-client.org