Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/9B7D8C804B0D11EE9FA36B0D4AD9E6FC.roa
File: 9B7D8C804B0D11EE9FA36B0D4AD9E6FC.roa (raw, json)
Hash identifier: gcE1HsR8Mdu/vGmmLNuL2lsC+GftLbl/G1A9D8Vce3s=
Subject key identifier: 5C:5F:AF:F0:01:BB:03:82:45:E4:3B:44:80:38:0C:75:B1:8E:DE:A5
Certificate issuer: /CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Certificate serial: 8E
Authority key identifier: A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/9B7D8C804B0D11EE9FA36B0D4AD9E6FC.roa
Signing time: Mon 04 Sep 2023 10:27:11 +0000
ROA not before: Mon 04 Sep 2023 10:27:08 +0000
ROA not after: Wed 15 Sep 2027 10:27:08 +0000
asID: 328344
IP address blocks: 102.217.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Validity
Not Before: Sep 4 10:27:08 2023 GMT
Not After : Sep 15 10:27:08 2027 GMT
Subject: CN=64f5b0ff-7caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:81:29:58:90:1b:59:47:4b:c9:00:1f:08:
f8:00:e2:04:75:46:64:be:6b:ab:56:09:7d:78:65:
8c:56:10:c2:45:35:c3:ad:27:2f:9d:73:92:1f:8a:
55:52:63:44:73:01:a2:3d:ba:02:a5:c8:8c:39:b9:
0f:20:a8:c9:36:75:81:1b:a6:43:d7:23:4a:49:aa:
32:66:ee:10:8b:91:5b:69:87:57:e4:36:ed:b6:1d:
5d:dc:d3:09:46:81:5a:06:4e:ee:30:04:21:e6:cd:
ad:ac:d1:31:4f:54:86:92:f9:4e:81:27:54:75:15:
fd:47:04:96:43:41:b3:2b:53:c6:89:b8:0c:20:77:
d4:e5:7d:fb:25:60:b9:93:97:86:76:fe:12:26:e0:
cf:77:82:1d:92:18:77:2c:1d:4d:49:66:2a:a7:7e:
19:c1:3d:71:6f:c6:84:67:fa:47:d4:46:f1:8c:f9:
3e:e8:60:19:7b:85:db:e0:7c:9a:c7:28:55:08:ac:
c5:36:0d:2f:9d:22:8f:00:13:77:e4:52:cb:7e:fd:
98:23:f3:45:17:52:f4:5d:bf:75:a6:59:e4:0f:b8:
52:bd:ac:55:96:9e:be:62:b6:c7:7d:28:98:52:c2:
7a:2b:03:72:ce:95:1c:db:2d:3c:5c:53:72:27:98:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5F:AF:F0:01:BB:03:82:45:E4:3B:44:80:38:0C:75:B1:8E:DE:A5
X509v3 Authority Key Identifier:
keyid:A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/9B7D8C804B0D11EE9FA36B0D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.19.0/24
Signature Algorithm: sha256WithRSAEncryption
86:da:0d:b2:87:a1:e1:26:4e:5b:9d:76:dc:78:a9:cc:cc:fb:
84:dc:31:9d:3e:c7:11:94:7f:52:8c:54:f5:c9:25:01:70:f7:
ff:dc:3e:40:1f:6d:e9:3a:42:b0:b3:83:e2:b9:e4:e0:74:86:
9e:11:3c:1c:1e:14:a8:cd:fb:5d:c1:5a:a8:fc:f2:bb:75:b9:
e5:33:52:b7:b2:82:9e:f1:11:12:e7:c7:d1:4a:d3:fb:25:73:
36:90:4d:c7:55:53:ef:4d:7a:cb:4d:fa:44:26:22:4c:48:f0:
9e:0a:99:c1:4d:87:bb:70:68:3b:f7:48:0d:b9:f8:7c:77:60:
f2:80:04:f4:38:bf:c0:73:89:cf:ce:2e:f7:0c:e2:94:0f:bb:
f7:d1:9e:01:b8:93:0f:34:67:b7:d7:05:6c:7c:ae:39:50:40:
83:0c:66:5a:c5:83:d6:2e:d1:5c:c9:82:0a:71:90:8c:8e:3e:
83:b6:90:c3:63:3b:03:e6:76:b7:33:2a:53:25:e7:81:e6:8f:
62:55:d1:b1:e5:86:f4:66:9d:d4:fa:f1:6a:ec:b7:64:80:e9:
3a:21:6b:f1:fb:93:49:08:b1:85:5c:57:2a:98:35:e1:c0:90:
7e:c8:e2:16:43:e5:03:23:4b:72:a3:b0:33:ef:67:81:74:9d:
d3:8c:93:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDdGQjdBRjExMC8GA1UEBRMoQTU4QTZEMjkxMTRDODgxRTAwNTg3NzI3OUQ5NUFC
QUEzOUVFMTQxQzAeFw0yMzA5MDQxMDI3MDhaFw0yNzA5MTUxMDI3MDhaMBgxFjAU
BgNVBAMTDTY0ZjViMGZmLTdjYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDac4EpWJAbWUdLyQAfCPgA4gR1RmS+a6tWCX14ZYxWEMJFNcOtJy+dc5If
ilVSY0RzAaI9ugKlyIw5uQ8gqMk2dYEbpkPXI0pJqjJm7hCLkVtph1fkNu22HV3c
0wlGgVoGTu4wBCHmza2s0TFPVIaS+U6BJ1R1Ff1HBJZDQbMrU8aJuAwgd9Tlffsl
YLmTl4Z2/hIm4M93gh2SGHcsHU1JZiqnfhnBPXFvxoRn+kfURvGM+T7oYBl7hdvg
fJrHKFUIrMU2DS+dIo8AE3fkUst+/Zgj80UXUvRdv3WmWeQPuFK9rFWWnr5itsd9
KJhSwnorA3LOlRzbLTxcU3InmEEbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXF+v
8AG7A4JF5DtEgDgMdbGO3qUwHwYDVR0jBBgwFoAUpYptKRFMiB4AWHcnnZWrqjnu
FBwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ3RkI3LzhBQzFDNTcyRjYyQzExRURBMTBEM0IzQTRBRDlFNkZDL3BZcHRL
UkZNaUI0QVdIY25uWldycWpudUZCdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BZcHRLUkZNaUI0QVdIY25uWldycWpudUZCdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQ3RkI3LzhBQzFDNTcyRjYyQzExRURBMTBEM0IzQTRB
RDlFNkZDLzlCN0Q4QzgwNEIwRDExRUU5RkEzNkIwRDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2RMwDQYJKoZIhvcNAQEL
BQADggEBAIbaDbKHoeEmTluddtx4qczM+4TcMZ0+xxGUf1KMVPXJJQFw9//cPkAf
bek6QrCzg+K55OB0hp4RPBweFKjN+13BWqj88rt1ueUzUreygp7xERLnx9FK0/sl
czaQTcdVU+9NestN+kQmIkxI8J4KmcFNh7twaDv3SA25+Hx3YPKABPQ4v8Bzic/O
LvcM4pQPu/fRngG4kw80Z7fXBWx8rjlQQIMMZlrFg9Yu0VzJggpxkIyOPoO2kMNj
OwPmdrczKlMl54Hmj2JV0bHlhvRmndT68Wrst2SA6Toha/H7k0kIsYVcVyqYNeHA
kH7I4hZD5QMjS3KjsDPvZ4F0ndOMkzg=
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:40:55 2024 by rpki-client on console-ams.rpki-client.org