Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/435EB3FCF3B211EC9945E28EF1222468.roa
File: 435EB3FCF3B211EC9945E28EF1222468.roa (raw, json)
Hash identifier: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=
Subject key identifier: C7:92:71:BF:04:49:71:44:49:6A:6D:B6:7B:CF:46:D8:10:D3:93:88
Certificate issuer: /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial: 08
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Authority info access: rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/435EB3FCF3B211EC9945E28EF1222468.roa
Signing time: Fri 24 Jun 2022 11:39:10 +0000
ROA not before: Fri 24 Jun 2022 11:38:59 +0000
ROA not after: Wed 31 Dec 2042 11:38:59 +0000
asID: 6453
IP address blocks: 202.123.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Validity
Not Before: Jun 24 11:38:59 2022 GMT
Not After : Dec 31 11:38:59 2042 GMT
Subject: CN=62b5a25e-887e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:6a:a9:00:9a:87:fd:bd:81:48:1d:65:95:
64:75:07:e4:e8:79:21:e0:9b:8e:23:b3:39:5c:b1:
77:8a:94:a2:6c:9d:b0:52:f2:7a:f7:9f:7b:82:48:
8d:16:31:68:b4:4b:e1:95:4e:af:ee:b5:c1:c2:75:
0d:35:b1:14:c1:6d:0e:93:4e:3f:48:2d:b0:4d:63:
2d:81:78:ea:f7:52:72:f5:38:e4:9d:33:bd:1c:0d:
20:58:0c:d7:a2:8b:e2:13:21:1a:e9:6e:43:29:4c:
ec:8e:ac:73:23:06:a2:97:d5:c8:ad:d8:84:c3:40:
1e:ab:ef:44:d9:9d:f3:7f:20:c7:fa:a6:97:76:6a:
9f:34:5e:ac:cd:35:03:69:ee:e1:47:9f:d0:03:b4:
38:4b:84:99:0a:24:5a:ff:4d:0d:9b:c8:27:a9:49:
3f:42:cf:9c:cc:e5:45:c2:eb:84:c8:61:14:1f:e5:
91:c0:e9:41:6d:61:c3:e8:f8:fd:99:53:46:92:b2:
98:aa:2d:8a:d7:ea:6c:68:6b:6d:76:cf:2a:c9:0e:
f4:c6:07:6e:1c:ee:c7:f5:83:66:6c:11:6d:54:03:
9d:57:14:02:a8:ff:5f:72:b8:b1:f2:1b:4b:d5:0a:
0d:8d:18:59:c3:b3:5a:2a:ca:fa:af:11:28:a2:7b:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:71:BF:04:49:71:44:49:6A:6D:B6:7B:CF:46:D8:10:D3:93:88
X509v3 Authority Key Identifier:
keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/435EB3FCF3B211EC9945E28EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.123.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:41:32:83:7b:a7:09:e9:67:52:18:cd:7c:2a:40:23:ec:9d:
a9:4e:99:85:fa:eb:cd:59:a9:3c:3d:63:1c:38:76:19:25:90:
a4:cc:82:c9:ff:44:3b:32:4e:48:08:09:16:5e:c6:2d:61:26:
de:d7:38:7f:2b:71:a4:58:53:b6:a4:e0:b0:46:b8:9b:b3:52:
25:61:d1:bb:14:0f:e3:d3:7d:30:b2:f8:9b:22:37:35:37:06:
2b:af:c5:e3:a5:28:ea:6a:55:a5:e3:6d:dd:3b:77:ce:2b:f0:
a8:a1:53:4f:a4:e6:6b:46:03:d4:f1:d4:73:f2:dc:6d:45:86:
7a:c2:67:86:5c:e8:4d:b7:48:6e:78:eb:22:e8:27:0c:5b:a4:
71:4b:5a:0d:ca:32:2b:2d:7e:9f:45:0b:12:10:d9:a7:62:5c:
13:3f:25:a9:75:bd:c7:20:ff:10:4c:ed:2b:43:53:aa:8d:31:
3a:05:5f:12:d1:23:b5:c9:e6:46:5f:32:4b:5e:6b:41:ef:9b:
ee:93:26:80:16:69:da:a5:a0:ea:ef:7d:89:8a:dc:18:97:5b:
85:fd:db:f7:ac:ff:b4:cf:db:0f:af:2e:35:0b:c4:53:18:52:
38:f8:14:e1:f9:1f:ec:95:94:17:5f:a3:d4:cb:13:c0:5e:c3:
fb:80:2f:a3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NzU2MEFQMTEwLwYDVQQFEyg3MkYwODc0MTRDRTJERjQ0QkM0RjRERkY1QkUxMTQ3
QTdBNzFBOUFFMB4XDTIyMDYyNDExMzg1OVoXDTQyMTIzMTExMzg1OVowGDEWMBQG
A1UEAwwNNjJiNWEyNWUtODg3ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMAwaqkAmof9vYFIHWWVZHUH5Oh5IeCbjiOzOVyxd4qUomydsFLyevefe4JI
jRYxaLRL4ZVOr+61wcJ1DTWxFMFtDpNOP0gtsE1jLYF46vdScvU45J0zvRwNIFgM
16KL4hMhGuluQylM7I6scyMGopfVyK3YhMNAHqvvRNmd838gx/qml3ZqnzRerM01
A2nu4Uef0AO0OEuEmQokWv9NDZvIJ6lJP0LPnMzlRcLrhMhhFB/lkcDpQW1hw+j4
/ZlTRpKymKotitfqbGhrbXbPKskO9MYHbhzux/WDZmwRbVQDnVcUAqj/X3K4sfIb
S9UKDY0YWcOzWirK+q8RKKJ7Bx8CAwEAAaOCAqMwggKfMB0GA1UdDgQWBBTHknG/
BElxRElqbbZ7z0bYENOTiDAfBgNVHSMEGDAWgBRy8IdBTOLfRLxPTf9b4RR6enGp
rjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTc1NjAvMUU4Nzk1OEFGMjU5MTFFQ0IxQkRGMkMxRjEyMjI0NjgvY3ZDSFFV
emkzMFM4VDAzX1ctRVVlbnB4cWE0LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYB
BQUHMAKGSXJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fwbmlj
L2N2Q0hRVXppMzBTOFQwM19XLUVVZW5weHFhNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIy
NDY4LzQzNUVCM0ZDRjNCMjExRUM5OTQ1RTI4RUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXKewAwDQYJKoZIhvcNAQELBQAD
ggEBAGpBMoN7pwnpZ1IYzXwqQCPsnalOmYX6681ZqTw9Yxw4dhklkKTMgsn/RDsy
TkgICRZexi1hJt7XOH8rcaRYU7ak4LBGuJuzUiVh0bsUD+PTfTCy+JsiNzU3Biuv
xeOlKOpqVaXjbd07d84r8KihU0+k5mtGA9Tx1HPy3G1FhnrCZ4Zc6E23SG546yLo
JwxbpHFLWg3KMistfp9FCxIQ2adiXBM/Jal1vccg/xBM7StDU6qNMToFXxLRI7XJ
5kZfMktea0Hvm+6TJoAWadqloOrvfYmK3BiXW4X92/es/7TP2w+vLjULxFMYUjj4
FOH5H+yVlBdfo9TLE8Bew/uAL6M=
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:32 2024 by rpki-client on console-fra.rpki-client.org