Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/1C5E9EFED4DF11EB9185D046F8AEA228.roa
File: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (raw, json)
Hash identifier: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=
Subject key identifier: 84:39:C3:06:BE:C1:59:C5:9E:88:2D:F9:03:E9:9A:22:2B:84:E8:7C
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0876
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/1C5E9EFED4DF11EB9185D046F8AEA228.roa
Signing time: Thu 24 Jun 2021 11:27:09 +0000
ROA not before: Thu 24 Jun 2021 11:27:02 +0000
ROA not after: Wed 30 Apr 2031 11:27:02 +0000
asID: 327750
IP address blocks: 102.164.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Jun 24 11:27:02 2021 GMT
Not After : Apr 30 11:27:02 2031 GMT
Subject: CN=60d46c0d-cc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:e1:84:11:82:35:91:03:54:9d:21:d0:67:
36:83:3f:59:37:12:5d:00:d2:61:da:3a:6f:2d:64:
bd:4d:02:6f:aa:e7:e4:86:5d:09:dc:03:6a:c3:01:
9b:22:cb:24:7a:8b:bd:71:64:ed:c7:19:da:30:fc:
0d:30:90:75:d3:33:12:bd:ed:8c:ab:de:11:5a:8b:
c2:82:d6:db:a0:be:a8:99:d0:b8:78:96:70:80:bb:
0f:39:4b:23:55:af:7b:7a:a5:40:8c:da:fa:c6:44:
bd:86:7d:be:d2:a9:0c:60:c9:89:fe:5a:82:d2:58:
0e:10:ca:21:5a:d2:53:0b:12:cf:88:b2:f1:a7:7f:
99:33:c5:e7:23:02:0b:38:15:e4:15:fe:f6:c2:0d:
fb:27:60:1b:ee:4d:a2:59:4a:9d:cb:7c:17:f9:e6:
f6:7d:da:0a:9c:03:ec:63:98:56:35:1b:29:e1:20:
0f:f1:ed:5a:b3:d4:49:cf:ee:bb:f2:ce:e8:91:89:
53:ed:5a:77:eb:bc:31:a5:d8:91:83:19:05:3c:55:
f8:c9:7f:54:56:d3:ef:0c:d0:09:69:6d:98:5c:57:
37:e6:21:19:5d:50:1c:70:78:47:71:1a:f1:bc:f3:
df:d0:cd:7b:7f:cd:b6:d4:95:17:0a:d0:e7:b4:c5:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:C3:06:BE:C1:59:C5:9E:88:2D:F9:03:E9:9A:22:2B:84:E8:7C
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/1C5E9EFED4DF11EB9185D046F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.192.0/19
Signature Algorithm: sha256WithRSAEncryption
d4:44:89:dd:b6:0c:44:45:11:7d:eb:4e:2e:af:b4:cf:14:97:
19:74:6c:bd:84:a5:bb:ff:3a:97:58:7e:26:63:ef:16:b0:94:
6d:38:d9:06:30:a9:3c:97:28:b9:ed:21:f7:eb:46:63:16:68:
9f:30:54:36:b0:9c:0b:49:5f:8a:53:70:90:35:0b:9a:b8:59:
3e:44:72:43:b6:53:e5:ac:79:c9:71:8b:02:01:66:9d:1e:6d:
32:58:8e:de:d0:bc:de:90:e2:6c:a5:69:36:ad:77:b2:db:da:
72:70:d0:0f:5a:d5:26:a1:51:93:c8:d8:05:c3:55:ca:a5:9f:
da:9a:14:27:43:6c:5c:d2:6a:65:36:d8:7b:d8:37:dc:d3:31:
5b:6b:20:ae:ee:0e:95:0a:a7:3c:57:f0:87:7e:00:4b:64:f2:
33:33:96:43:01:bf:59:47:b1:b6:43:2b:e0:55:4d:0a:f3:28:
d0:66:92:58:45:9e:a9:98:df:d4:20:c7:5d:8f:c0:36:29:67:
3c:9a:02:13:0b:e8:e4:15:c1:75:07:84:25:3e:2e:bb:7d:bf:
8d:01:bb:02:7f:ea:9b:c1:9a:a9:08:d5:7d:f8:e4:9b:de:02:
e7:7c:43:91:b2:7b:3b:37:e3:01:66:ff:af:69:1f:53:77:f1:
5f:19:af:2c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjBBQ0ZBRjExMC8GA1UEBRMoODgyNjI5ODk1RDhEQjU3QjI1NDFFQTQ4RkExMTI2
MzI1RTI5MDIwQjAeFw0yMTA2MjQxMTI3MDJaFw0zMTA0MzAxMTI3MDJaMBgxFjAU
BgNVBAMTDTYwZDQ2YzBkLWNjMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGG+GEEYI1kQNUnSHQZzaDP1k3El0A0mHaOm8tZL1NAm+q5+SGXQncA2rD
AZsiyyR6i71xZO3HGdow/A0wkHXTMxK97Yyr3hFai8KC1tugvqiZ0Lh4lnCAuw85
SyNVr3t6pUCM2vrGRL2Gfb7SqQxgyYn+WoLSWA4QyiFa0lMLEs+IsvGnf5kzxecj
Ags4FeQV/vbCDfsnYBvuTaJZSp3LfBf55vZ92gqcA+xjmFY1GynhIA/x7Vqz1EnP
7rvyzuiRiVPtWnfrvDGl2JGDGQU8VfjJf1RW0+8M0AlpbZhcVzfmIRldUBxweEdx
GvG889/QzXt/zbbUlRcK0Oe0xc0RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhDnD
Br7BWcWeiC35A+maIiuE6HwwHwYDVR0jBBgwFoAUiCYpiV2NtXslQepI+hEmMl4p
AgswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwQUNGLzkyNUUyQkU2NTg2RDExRTVBRUI1NUMyRkY4QUVBMjI4L2lDWXBp
VjJOdFhzbFFlcEktaEVtTWw0cEFncy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lDWXBpVjJOdFhzbFFlcEktaEVtTWw0cEFncy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIwQUNGLzkyNUUyQkU2NTg2RDExRTVBRUI1NUMyRkY4
QUVBMjI4LzFDNUU5RUZFRDRERjExRUI5MTg1RDA0NkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVmpMAwDQYJKoZIhvcNAQEL
BQADggEBANREid22DERFEX3rTi6vtM8Ulxl0bL2Epbv/OpdYfiZj7xawlG042QYw
qTyXKLntIffrRmMWaJ8wVDawnAtJX4pTcJA1C5q4WT5EckO2U+WseclxiwIBZp0e
bTJYjt7QvN6Q4mylaTatd7Lb2nJw0A9a1SahUZPI2AXDVcqln9qaFCdDbFzSamU2
2HvYN9zTMVtrIK7uDpUKpzxX8Id+AEtk8jMzlkMBv1lHsbZDK+BVTQrzKNBmklhF
nqmY39Qgx12PwDYpZzyaAhML6OQVwXUHhCU+Lrt9v40BuwJ/6pvBmqkI1X345Jve
Aud8Q5Gyezs34wFm/69pH1N38V8Zryw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:53 2024 by rpki-client on console-ams.rpki-client.org