Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/30DA2FD2D99011EBB3AFA075F8AEA228.roa
File: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (raw, json)
Hash identifier: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=
Subject key identifier: 54:A9:A3:85:E4:7F:FD:6D:19:6A:E8:B9:AE:49:AF:4F:25:8C:35:F2
Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial: 0878
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/30DA2FD2D99011EBB3AFA075F8AEA228.roa
Signing time: Wed 30 Jun 2021 10:44:49 +0000
ROA not before: Wed 30 Jun 2021 10:44:43 +0000
ROA not after: Sun 30 Jun 2030 10:44:43 +0000
asID: 37199
IP address blocks: 197.155.10.0/24 maxlen: 24
197.155.17.0/24 maxlen: 24
197.155.20.0/24 maxlen: 24
197.155.22.0/23 maxlen: 23
197.155.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Validity
Not Before: Jun 30 10:44:43 2021 GMT
Not After : Jun 30 10:44:43 2030 GMT
Subject: CN=60dc4b20-78bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:f7:75:31:32:dc:fb:c4:47:05:03:df:7f:
fc:9d:97:10:df:90:fb:0f:3d:d6:66:1a:24:d0:4e:
4e:d2:54:9b:ac:2f:bf:4a:eb:6e:e8:ad:32:60:c2:
7b:83:3d:76:e2:b1:13:61:35:3f:6f:76:ed:67:c8:
8e:33:80:f3:92:1b:5e:47:1d:ac:94:6e:4d:98:bc:
9a:5b:2b:f5:0e:96:3d:42:f5:73:87:3b:a2:df:08:
7a:ec:a1:7f:34:53:4a:4d:ec:db:b5:c4:4b:2b:7c:
a3:8b:c3:41:8d:a8:42:04:ce:1c:6f:99:a0:ca:51:
f2:aa:2c:8e:4e:e0:0c:68:af:e1:30:a4:63:be:0f:
b6:4b:f1:c3:30:dc:aa:b6:7e:bb:f2:4d:05:2a:0c:
29:de:8e:47:33:8d:63:6a:6a:71:e8:b5:d2:b8:97:
d4:93:70:61:5c:a1:76:d5:c4:df:cd:bc:e6:9f:08:
66:ae:44:c5:fb:6a:35:42:23:46:7a:a1:cb:bc:f1:
1b:37:99:e9:67:65:4a:ff:9e:72:a6:9f:f4:85:1c:
cf:61:97:7c:4c:3a:52:7a:df:2f:24:03:87:4b:d8:
39:74:6f:af:be:23:7e:b7:b4:c3:13:b9:12:28:9a:
d4:9e:ff:54:4e:26:ac:99:80:8a:39:a6:d4:ae:06:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:A3:85:E4:7F:FD:6D:19:6A:E8:B9:AE:49:AF:4F:25:8C:35:F2
X509v3 Authority Key Identifier:
keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/30DA2FD2D99011EBB3AFA075F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.155.10.0/24
197.155.17.0/24
197.155.20.0/24
197.155.22.0/23
197.155.30.0/24
Signature Algorithm: sha256WithRSAEncryption
13:12:9d:93:6d:81:83:d9:3d:e9:32:e4:e5:06:84:a3:1b:bd:
9b:90:e4:1f:bb:37:47:b1:0e:70:6c:94:0d:79:82:19:04:f3:
3a:1c:e4:7b:a8:14:65:42:62:7b:bd:ed:b5:51:1c:23:9d:61:
87:df:72:ef:0e:c4:3a:2f:96:be:34:3c:a3:13:f7:a4:65:1b:
3d:58:91:82:7e:b7:81:ea:16:64:4f:25:e7:9d:64:93:33:fe:
a0:9d:9a:0e:b8:e0:e9:cd:6b:35:7e:a5:ab:55:77:59:82:6d:
ad:8a:39:b0:2e:48:38:10:40:c9:06:d1:d1:5b:ba:e9:40:3c:
c4:34:a6:a5:26:54:f7:57:c5:09:34:c3:ba:92:48:65:c0:2e:
37:e1:3d:18:4d:90:13:33:e0:ec:14:30:33:9d:45:be:87:8c:
1a:1b:cb:59:c9:26:28:ce:2e:17:31:82:fa:e4:57:9d:64:30:
b6:dc:12:e5:c4:8c:ea:34:9e:a8:d0:73:36:64:d8:df:11:19:
af:89:40:72:01:59:23:c7:a8:75:23:56:de:4a:4b:a4:67:67:
54:1e:e3:5b:87:44:8f:e2:9d:c5:9f:5d:95:91:20:da:4c:cb:
50:04:db:0a:6c:ad:fb:f0:80:40:d1:6d:33:92:9c:6e:6d:16:
af:06:91:f5
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUQyOTlBRjExMC8GA1UEBRMoMkIyNDQyODQ4MTc0QUE4ODk0NDY5QTc3OUI5RkQ3
REE0OTU4QzY2OTAeFw0yMTA2MzAxMDQ0NDNaFw0zMDA2MzAxMDQ0NDNaMBgxFjAU
BgNVBAMTDTYwZGM0YjIwLTc4YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBj/d1MTLc+8RHBQPff/ydlxDfkPsPPdZmGiTQTk7SVJusL79K627orTJg
wnuDPXbisRNhNT9vdu1nyI4zgPOSG15HHayUbk2YvJpbK/UOlj1C9XOHO6LfCHrs
oX80U0pN7Nu1xEsrfKOLw0GNqEIEzhxvmaDKUfKqLI5O4Axor+EwpGO+D7ZL8cMw
3Kq2frvyTQUqDCnejkczjWNqanHotdK4l9STcGFcoXbVxN/NvOafCGauRMX7ajVC
I0Z6ocu88Rs3melnZUr/nnKmn/SFHM9hl3xMOlJ63y8kA4dL2Dl0b6++I363tMMT
uRIomtSe/1ROJqyZgIo5ptSuBoVxAgMBAAGjggK9MIICuTAdBgNVHQ4EFgQUVKmj
heR//W0Zaui5rkmvTyWMNfIwHwYDVR0jBBgwFoAUKyRChIF0qoiURpp3m5/X2klY
xmkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4QUVBMjI4L0t5UkNo
SUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t5UkNoSUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4
QUVBMjI4LzMwREEyRkQyRDk5MDExRUJCM0FGQTA3NUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBADFmwoDBADFmxEDBADFmxQD
BAHFmxYDBADFmx4wDQYJKoZIhvcNAQELBQADggEBABMSnZNtgYPZPeky5OUGhKMb
vZuQ5B+7N0exDnBslA15ghkE8zoc5HuoFGVCYnu97bVRHCOdYYffcu8OxDovlr40
PKMT96RlGz1YkYJ+t4HqFmRPJeedZJMz/qCdmg644OnNazV+patVd1mCba2KObAu
SDgQQMkG0dFbuulAPMQ0pqUmVPdXxQk0w7qSSGXALjfhPRhNkBMz4OwUMDOdRb6H
jBoby1nJJijOLhcxgvrkV51kMLbcEuXEjOo0nqjQczZk2N8RGa+JQHIBWSPHqHUj
Vt5KS6RnZ1Qe41uHRI/incWfXZWRINpMy1AE2wpsrfvwgEDRbTOSnG5tFq8GkfU=
-----END CERTIFICATE-----
Generated at Fri May 24 01:45:51 2024 by rpki-client on console-fra.rpki-client.org