Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa
File: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (raw, json)
Hash identifier: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=
Subject key identifier: 81:33:90:3D:4B:10:24:72:C0:FB:2A:6E:42:49:72:78:84:06:1F:18
Certificate issuer: /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial: 13
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa
Signing time: Fri 10 Nov 2023 14:38:00 +0000
ROA not before: Fri 10 Nov 2023 14:37:56 +0000
ROA not after: Sat 31 Dec 2033 14:37:56 +0000
asID: 37738
IP address blocks: 102.210.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Validity
Not Before: Nov 10 14:37:56 2023 GMT
Not After : Dec 31 14:37:56 2033 GMT
Subject: CN=654e4047-813f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:6a:06:b8:62:8a:1d:28:26:a3:05:f0:88:
09:a4:80:29:8c:fe:69:e4:a0:80:33:60:9d:a0:9b:
a3:8c:86:a1:82:73:08:76:5a:2b:6e:39:2e:58:91:
56:94:72:13:d3:4c:1d:5e:f6:78:cb:fa:39:66:c2:
8b:ca:1c:72:f5:9c:f4:3f:d5:be:df:72:f4:64:c4:
d3:4b:cd:a2:2e:85:f6:6a:32:bb:38:9c:91:6a:87:
06:b2:89:b9:b6:16:b5:bd:fd:08:f0:6f:dc:2d:6e:
f6:60:f4:b0:18:ba:97:94:3e:fc:dd:33:26:25:19:
03:39:af:4c:01:cb:36:91:45:57:e4:fc:66:54:36:
ae:64:27:05:f2:c7:37:8e:53:63:e1:55:0b:f4:18:
98:aa:bc:da:d6:ad:64:29:ac:db:ad:a7:82:c7:95:
03:2b:97:69:00:b0:c9:c8:e9:02:2f:b0:64:ba:8f:
a1:b0:e2:68:b3:0e:c2:4d:9b:b8:91:f4:fa:f3:23:
59:c1:5c:00:b7:2a:70:ee:d6:b5:7d:44:06:4b:e1:
80:69:78:54:31:ff:aa:c1:9b:78:4e:9e:3d:b9:11:
5c:b2:5f:7f:b6:74:a9:67:89:b0:53:d8:0d:9b:d1:
33:a1:2b:c4:e1:ce:12:34:3c:c3:8c:c3:63:e7:a0:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:90:3D:4B:10:24:72:C0:FB:2A:6E:42:49:72:78:84:06:1F:18
X509v3 Authority Key Identifier:
keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.212.0/22
Signature Algorithm: sha256WithRSAEncryption
20:1a:c4:ca:f2:4a:9b:38:90:51:2c:f6:a0:ff:0e:e9:55:e8:
02:23:e0:f4:ab:41:3c:42:b1:4c:3a:2e:bf:fa:2f:78:0f:4c:
a1:f0:e4:c9:a6:83:c5:c9:b0:0f:fe:c3:8a:fc:6e:63:e9:22:
ad:15:5c:6b:ff:6c:fb:ed:90:5d:19:84:02:ef:14:4b:bf:f4:
ef:4b:77:ef:cc:d1:5a:cd:1c:c7:33:d5:6e:2e:b0:9b:83:37:
2e:67:c3:ef:38:8b:ee:ba:2b:65:d6:a1:74:b6:be:d5:66:fa:
42:61:f0:b3:fb:ba:b7:67:68:3f:38:ab:c9:88:32:7f:73:00:
f5:9c:43:52:0a:b7:d0:e5:71:ba:dc:cf:5f:0e:7b:9c:17:4a:
e5:4a:a0:80:f4:bf:0f:a1:89:f4:dd:5a:09:89:70:55:29:ad:
4a:4b:80:11:3a:96:dc:7a:c1:32:5c:e9:60:55:ff:61:80:4c:
ce:dc:46:0c:09:bf:c7:5a:c4:dd:08:9f:da:6e:32:a4:d5:c0:
71:62:fa:58:64:f6:ce:39:5a:28:3e:b8:bd:97:bb:33:10:06:
38:35:49:46:f8:00:6b:52:49:dc:d4:96:24:b9:dd:ed:45:12:
a8:60:49:a4:c1:48:4e:92:c7:ea:4f:d3:76:ae:e7:82:35:e7:
4a:df:d3:2f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBEzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
NERGREFGMTEwLwYDVQQFEygzQ0U3NEFDNTI1QUJDOUI1MDUxMzFFNTZEM0FGNEJB
QTBDQTg2QkM3MB4XDTIzMTExMDE0Mzc1NloXDTMzMTIzMTE0Mzc1NlowGDEWMBQG
A1UEAxMNNjU0ZTQwNDctODEzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKXZaga4YoodKCajBfCICaSAKYz+aeSggDNgnaCbo4yGoYJzCHZaK245LliR
VpRyE9NMHV72eMv6OWbCi8occvWc9D/Vvt9y9GTE00vNoi6F9moyuzickWqHBrKJ
ubYWtb39CPBv3C1u9mD0sBi6l5Q+/N0zJiUZAzmvTAHLNpFFV+T8ZlQ2rmQnBfLH
N45TY+FVC/QYmKq82tatZCms262ngseVAyuXaQCwycjpAi+wZLqPobDiaLMOwk2b
uJH0+vMjWcFcALcqcO7WtX1EBkvhgGl4VDH/qsGbeE6ePbkRXLJff7Z0qWeJsFPY
DZvRM6ErxOHOEjQ8w4zDY+eguy0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSBM5A9
SxAkcsD7Km5CSXJ4hAYfGDAfBgNVHSMEGDAWgBQ850rFJavJtQUTHlbTr0uqDKhr
xzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFEOUU2RkMvUE9kS3hT
V3J5YlVGRXg1VzA2OUxxZ3lvYThjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUE9kS3hTV3J5YlVGRXg1VzA2OUxxZ3lvYThjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFE
OUU2RkMvQkVDMkI2QUU3RkQ2MTFFRUExNUVDQjZDNEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbS1DANBgkqhkiG9w0BAQsF
AAOCAQEAIBrEyvJKmziQUSz2oP8O6VXoAiPg9KtBPEKxTDouv/oveA9MofDkyaaD
xcmwD/7DivxuY+kirRVca/9s++2QXRmEAu8US7/070t378zRWs0cxzPVbi6wm4M3
LmfD7ziL7rorZdahdLa+1Wb6QmHws/u6t2doPziryYgyf3MA9ZxDUgq30OVxutzP
Xw57nBdK5UqggPS/D6GJ9N1aCYlwVSmtSkuAETqW3HrBMlzpYFX/YYBMztxGDAm/
x1rE3Qif2m4ypNXAcWL6WGT2zjlaKD64vZe7MxAGODVJRvgAa1JJ3NSWJLnd7UUS
qGBJpMFITpLH6k/Tdq7ngjXnSt/TLw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:30 2024 by rpki-client on console-ams.rpki-client.org