Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/60ED4636F92F11ECB2841083F1222468.roa
File: 60ED4636F92F11ECB2841083F1222468.roa (raw, json)
Hash identifier: +OqQfy+sVKv4R+tkPpa18z23bTOCNf4eXR6WRiM8IYA=
Subject key identifier: 04:73:0A:83:F4:0D:C0:F3:F7:99:BA:0E:A3:CB:DB:C1:DE:67:63:B5
Certificate issuer: /CN=F36177FDAF/serialNumber=0DC0B22C742F0253805F41AF704E1D7DE1B8BF98
Certificate serial: 26
Authority key identifier: 0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/60ED4636F92F11ECB2841083F1222468.roa
Signing time: Fri 01 Jul 2022 11:17:23 +0000
ROA not before: Fri 01 Jul 2022 11:17:19 +0000
ROA not after: Thu 01 Jul 2032 11:17:19 +0000
asID: 60171
IP address blocks: 102.217.96.0/22 maxlen: 24
2c0f:3700::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36177FDAF/serialNumber=0DC0B22C742F0253805F41AF704E1D7DE1B8BF98
Validity
Not Before: Jul 1 11:17:19 2022 GMT
Not After : Jul 1 11:17:19 2032 GMT
Subject: CN=62bed7c3-24b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:75:6d:52:77:42:f4:3b:af:a1:2a:75:c1:
33:d7:e2:29:97:12:5e:d7:e4:71:b9:25:3d:37:3d:
83:25:3a:4e:33:1c:3c:26:9d:a1:13:c5:6a:3d:1d:
d2:49:f1:a2:34:fb:80:54:89:39:62:f8:a1:5e:15:
01:a0:ad:01:28:f8:d8:f8:23:d5:bd:e9:9a:d8:31:
e9:9c:7c:7d:b9:ff:3c:6e:fc:00:cb:e9:53:f0:2a:
19:47:01:fc:c7:1b:87:09:87:12:85:a8:d4:d8:92:
a9:34:1d:49:3c:43:84:d5:a4:83:e7:a7:5b:a7:1b:
ba:4f:e8:f7:b7:d2:32:d8:a1:bb:b2:02:32:55:87:
6b:8c:a6:82:f9:d0:a7:32:31:62:b5:5e:5e:55:e4:
f6:fa:0e:68:9c:15:b7:bd:bc:87:01:68:e8:7f:71:
7a:e6:18:87:84:12:51:4e:93:67:19:f1:77:25:ac:
78:3e:02:58:c0:2b:50:16:44:41:df:f3:db:14:f1:
2d:48:4d:e6:64:64:70:f8:97:9f:b8:6e:a5:44:85:
c8:4d:93:b4:a6:8b:fb:e5:e7:ca:e6:d2:f7:64:26:
99:1b:1c:d6:df:3e:bb:cd:09:3a:a4:be:3f:86:99:
7d:ab:cc:e8:97:02:c1:13:10:0d:d7:0b:cf:1e:dd:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:73:0A:83:F4:0D:C0:F3:F7:99:BA:0E:A3:CB:DB:C1:DE:67:63:B5
X509v3 Authority Key Identifier:
keyid:0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/60ED4636F92F11ECB2841083F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.96.0/22
IPv6:
2c0f:3700::/32
Signature Algorithm: sha256WithRSAEncryption
36:91:88:08:c6:0a:c7:80:b3:82:57:65:d9:4f:3b:3e:1c:ad:
9d:e5:85:48:52:fe:46:bc:c4:a2:0a:23:45:44:4e:00:b0:2c:
aa:0a:95:a7:c8:96:16:e3:64:2b:55:f7:da:18:e0:61:17:09:
94:c3:dc:19:ae:95:44:f0:63:47:af:a1:b9:ae:15:fd:e6:fb:
92:7a:62:99:c9:58:48:61:bd:b0:44:01:42:66:38:a8:14:fd:
61:be:95:d3:2c:fe:c8:db:6f:18:9c:00:cd:cf:02:bc:e2:be:
77:67:c1:5a:6f:67:73:e6:8a:cb:3b:72:45:43:b4:6e:bc:65:
06:62:76:53:15:4a:a6:63:4d:65:25:da:9d:3b:7e:a3:85:17:
99:ad:24:f6:65:81:c4:78:20:48:e8:cb:23:9d:8e:72:0b:41:
ab:c8:79:14:7a:5b:eb:18:e3:d5:41:bd:07:25:c5:4d:a0:78:
20:dc:7c:ba:f1:3c:49:ce:ce:5a:4c:d7:1c:51:9c:19:b7:6c:
ae:86:80:7a:a5:6b:8b:d2:90:63:79:64:62:94:ba:fb:3a:55:
42:fd:02:22:33:4a:51:ba:39:2c:74:59:17:ba:33:73:26:df:
28:0e:97:ce:8f:1e:13:5e:e9:98:f0:77:a4:8b:24:62:64:a5:
5f:84:e8:aa
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBJjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NzdGREFGMTEwLwYDVQQFEygwREMwQjIyQzc0MkYwMjUzODA1RjQxQUY3MDRFMUQ3
REUxQjhCRjk4MB4XDTIyMDcwMTExMTcxOVoXDTMyMDcwMTExMTcxOVowGDEWMBQG
A1UEAwwNNjJiZWQ3YzMtMjRiNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMRmdW1Sd0L0O6+hKnXBM9fiKZcSXtfkcbklPTc9gyU6TjMcPCadoRPFaj0d
0knxojT7gFSJOWL4oV4VAaCtASj42Pgj1b3pmtgx6Zx8fbn/PG78AMvpU/AqGUcB
/McbhwmHEoWo1NiSqTQdSTxDhNWkg+enW6cbuk/o97fSMtihu7ICMlWHa4ymgvnQ
pzIxYrVeXlXk9voOaJwVt728hwFo6H9xeuYYh4QSUU6TZxnxdyWseD4CWMArUBZE
Qd/z2xTxLUhN5mRkcPiXn7hupUSFyE2TtKaL++XnyubS92QmmRsc1t8+u80JOqS+
P4aZfavM6JcCwRMQDdcLzx7dwdcCAwEAAaOCArQwggKwMB0GA1UdDgQWBBQEcwqD
9A3A8/eZug6jy9vB3mdjtTAfBgNVHSMEGDAWgBQNwLIsdC8CU4BfQa9wTh194bi/
mDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTc3RkQvN0VFMkVEMUFEQ0QwMTFFQ0FBRkZDNThGRjEyMjI0NjgvRGNDeUxI
UXZBbE9BWDBHdmNFNGRmZUc0djVnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRGNDeUxIUXZBbE9BWDBHdmNFNGRmZUc0djVnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTc3RkQvN0VFMkVEMUFEQ0QwMTFFQ0FBRkZDNThGRjEy
MjI0NjgvNjBFRDQ2MzZGOTJGMTFFQ0IyODQxMDgzRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbZYDANBAIAAjAHAwUALA83
ADANBgkqhkiG9w0BAQsFAAOCAQEANpGICMYKx4Czgldl2U87PhytneWFSFL+RrzE
ogojRUROALAsqgqVp8iWFuNkK1X32hjgYRcJlMPcGa6VRPBjR6+hua4V/eb7knpi
mclYSGG9sEQBQmY4qBT9Yb6V0yz+yNtvGJwAzc8CvOK+d2fBWm9nc+aKyztyRUO0
brxlBmJ2UxVKpmNNZSXanTt+o4UXma0k9mWBxHggSOjLI52OcgtBq8h5FHpb6xjj
1UG9ByXFTaB4INx8uvE8Sc7OWkzXHFGcGbdsroaAeqVri9KQY3lkYpS6+zpVQv0C
IjNKUbo5LHRZF7ozcybfKA6Xzo8eE17pmPB3pIskYmSlX4Toqg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:07 2024 by rpki-client on console-fra.rpki-client.org