Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/467B6CDCF25A11ECB0A197C5F1222468.roa
File: 467B6CDCF25A11ECB0A197C5F1222468.roa (raw, json)
Hash identifier: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=
Subject key identifier: 14:F9:4B:40:07:33:9B:4E:B5:21:03:3C:36:9A:AE:73:37:DD:F6:BB
Certificate issuer: /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial: 02
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Authority info access: rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/467B6CDCF25A11ECB0A197C5F1222468.roa
Signing time: Wed 22 Jun 2022 18:36:49 +0000
ROA not before: Wed 22 Jun 2022 18:36:38 +0000
ROA not after: Wed 30 Jun 2032 18:36:38 +0000
asID: 23889
IP address blocks: 202.123.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Jun 2024 00:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Validity
Not Before: Jun 22 18:36:38 2022 GMT
Not After : Jun 30 18:36:38 2032 GMT
Subject: CN=62b36140-07b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:d1:5e:aa:03:45:27:9e:e7:f6:84:0d:3b:
ee:52:d3:15:f8:65:fd:a2:63:1f:00:10:7e:8a:b5:
b1:78:94:15:17:8c:90:9d:cc:f5:fa:6b:1a:96:c1:
86:6e:7b:3c:b3:9f:8b:d4:03:18:b7:74:43:f5:81:
5b:4f:17:ad:fc:91:d6:11:f9:e4:73:ea:67:67:a6:
68:5d:d9:d0:8e:57:ca:e6:8e:d3:35:f3:d3:d5:c3:
30:e8:48:5e:31:bb:cf:ba:90:99:c1:55:8c:7b:21:
eb:e9:91:a5:03:72:21:e9:52:91:02:1e:3c:92:db:
6d:90:58:90:b7:06:82:14:e4:40:21:90:29:46:f9:
7b:02:33:2d:75:09:57:0e:01:c3:3b:e2:ba:6b:7a:
94:44:96:73:2a:9f:f9:2f:78:75:fe:ae:15:4d:2c:
85:9f:a3:c1:1f:44:1d:52:20:25:e3:49:00:9f:01:
6c:3b:e6:43:8b:db:e9:33:f1:74:21:d6:3d:0d:23:
67:eb:12:4a:3f:53:ac:fc:b8:67:ef:87:6a:44:f3:
7f:65:55:99:0e:e9:2c:99:95:11:b8:32:6f:d1:1a:
a5:df:d1:cd:a3:e8:de:ac:1f:d8:c4:da:4f:a8:7e:
c0:0b:a6:b5:23:36:5a:c2:86:0a:51:e4:d9:75:6e:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F9:4B:40:07:33:9B:4E:B5:21:03:3C:36:9A:AE:73:37:DD:F6:BB
X509v3 Authority Key Identifier:
keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/467B6CDCF25A11ECB0A197C5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.123.0.0/19
Signature Algorithm: sha256WithRSAEncryption
63:4a:53:27:50:71:aa:ac:3e:f6:b4:84:fe:d0:f4:62:6b:49:
a4:7f:67:bb:50:b3:7b:9a:a8:0d:7a:5a:c8:a6:a3:6d:73:f7:
10:cf:72:d6:01:4d:60:34:48:c9:3a:cd:a9:6d:b3:0a:ef:55:
61:bb:3b:9b:9d:53:27:2b:59:9b:0f:6d:4c:92:d8:76:b2:48:
97:87:86:4e:ad:df:9e:8b:dc:f6:22:37:d3:0e:cc:ab:b9:f6:
02:02:9f:ce:0e:6a:e2:0f:b2:cc:07:ff:bb:02:81:56:97:26:
7f:52:51:2c:ef:b2:f9:79:35:ce:6a:76:34:8d:a7:63:d0:80:
de:87:f9:53:10:05:d2:0a:03:d2:ee:0b:0d:2f:81:c2:ef:e3:
73:09:70:94:34:56:04:a5:7f:81:d7:a5:8f:88:e2:01:c6:50:
f8:d1:e2:3d:9a:34:0c:49:be:80:36:d0:d8:1b:75:16:e3:f7:
f8:53:5b:26:02:36:fd:22:58:bb:65:78:ca:71:8e:9d:a3:bf:
26:62:d5:1a:a0:3d:b9:3d:6f:7d:c5:b1:33:53:e7:0b:ca:71:
48:94:94:5f:8e:38:22:4a:5c:cf:7a:39:27:93:d1:d8:4e:04:
fb:a4:b8:f5:c3:4d:31:c0:c8:13:94:b5:f6:b0:08:d3:14:c5:
66:84:c6:84
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NzU2MEFQMTEwLwYDVQQFEyg3MkYwODc0MTRDRTJERjQ0QkM0RjRERkY1QkUxMTQ3
QTdBNzFBOUFFMB4XDTIyMDYyMjE4MzYzOFoXDTMyMDYzMDE4MzYzOFowGDEWMBQG
A1UEAwwNNjJiMzYxNDAtMDdiMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKjv0V6qA0Unnuf2hA077lLTFfhl/aJjHwAQfoq1sXiUFReMkJ3M9fprGpbB
hm57PLOfi9QDGLd0Q/WBW08XrfyR1hH55HPqZ2emaF3Z0I5XyuaO0zXz09XDMOhI
XjG7z7qQmcFVjHsh6+mRpQNyIelSkQIePJLbbZBYkLcGghTkQCGQKUb5ewIzLXUJ
Vw4Bwzviumt6lESWcyqf+S94df6uFU0shZ+jwR9EHVIgJeNJAJ8BbDvmQ4vb6TPx
dCHWPQ0jZ+sSSj9TrPy4Z++HakTzf2VVmQ7pLJmVEbgyb9Eapd/RzaPo3qwf2MTa
T6h+wAumtSM2WsKGClHk2XVuLVMCAwEAAaOCAqMwggKfMB0GA1UdDgQWBBQU+UtA
BzObTrUhAzw2mq5zN932uzAfBgNVHSMEGDAWgBRy8IdBTOLfRLxPTf9b4RR6enGp
rjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTc1NjAvMUU4Nzk1OEFGMjU5MTFFQ0IxQkRGMkMxRjEyMjI0NjgvY3ZDSFFV
emkzMFM4VDAzX1ctRVVlbnB4cWE0LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYB
BQUHMAKGSXJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fwbmlj
L2N2Q0hRVXppMzBTOFQwM19XLUVVZW5weHFhNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIy
NDY4LzQ2N0I2Q0RDRjI1QTExRUNCMEExOTdDNUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXKewAwDQYJKoZIhvcNAQELBQAD
ggEBAGNKUydQcaqsPva0hP7Q9GJrSaR/Z7tQs3uaqA16Wsimo21z9xDPctYBTWA0
SMk6zaltswrvVWG7O5udUycrWZsPbUyS2HaySJeHhk6t356L3PYiN9MOzKu59gIC
n84OauIPsswH/7sCgVaXJn9SUSzvsvl5Nc5qdjSNp2PQgN6H+VMQBdIKA9LuCw0v
gcLv43MJcJQ0VgSlf4HXpY+I4gHGUPjR4j2aNAxJvoA20NgbdRbj9/hTWyYCNv0i
WLtleMpxjp2jvyZi1RqgPbk9b33FsTNT5wvKcUiUlF+OOCJKXM96OSeT0dhOBPuk
uPXDTTHAyBOUtfawCNMUxWaExoQ=
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:05 2024 by rpki-client on console-ams.rpki-client.org