Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/6BDE095E5D0111EE982F44564AD9E6FC.roa
File: 6BDE095E5D0111EE982F44564AD9E6FC.roa (raw, json)
Hash identifier: yqnrY1cW8cd1ADXeJYR3eg/nFZwSDlUlVmw4K61V46g=
Subject key identifier: D2:83:79:FB:3B:85:DE:CC:22:87:2C:B6:70:AC:C5:29:3F:21:8E:A5
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 032C
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/6BDE095E5D0111EE982F44564AD9E6FC.roa
Signing time: Wed 27 Sep 2023 06:45:18 +0000
ROA not before: Wed 27 Sep 2023 06:45:15 +0000
ROA not after: Tue 30 Sep 2025 06:45:15 +0000
asID: 328327
IP address blocks: 102.140.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 27 06:45:15 2023 GMT
Not After : Sep 30 06:45:15 2025 GMT
Subject: CN=6513cf7e-3761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:66:3b:fc:4b:91:f0:91:db:5a:1f:9f:74:
44:b8:ab:b5:6c:87:e4:b4:14:a8:0f:78:ee:d6:1d:
11:14:12:fa:9e:a7:9d:35:bc:7a:43:6f:fb:0e:12:
d7:85:d9:71:51:90:38:e1:09:a9:f7:4d:63:58:ed:
84:c3:c7:28:a1:fa:84:eb:e3:d2:f7:c5:27:0a:c1:
af:6c:7e:29:c1:ef:56:02:cb:e4:79:be:6a:00:1b:
9e:6b:21:8a:0a:00:f7:7f:c7:41:ee:b0:90:30:69:
7a:57:d9:56:a3:e9:41:8d:8b:7e:93:d5:3e:4c:ed:
9d:3e:ba:8c:e1:05:af:ba:e1:6b:6c:62:f8:8e:18:
ed:62:aa:c1:38:48:0c:71:be:42:3a:28:45:0c:84:
14:2c:84:d2:d2:ac:72:15:cd:d2:2c:12:e7:c3:a3:
aa:fd:03:39:a5:10:6b:b2:fa:f7:61:d4:d2:23:3b:
90:a8:46:31:8b:b4:99:e9:d7:4e:db:a6:28:0d:ba:
f7:76:8b:49:3f:b6:18:e4:1d:2d:61:35:a1:e0:15:
67:7e:c2:94:8b:e6:dd:66:3d:ce:56:7a:58:4f:15:
a6:be:bf:45:89:e8:b8:b0:c0:78:64:bb:e7:21:94:
6e:11:20:43:23:78:fa:d7:e5:e0:a4:73:75:1f:1b:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:79:FB:3B:85:DE:CC:22:87:2C:B6:70:AC:C5:29:3F:21:8E:A5
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/6BDE095E5D0111EE982F44564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.73.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ee:56:04:fa:93:f9:e4:f7:94:66:6a:85:ec:a4:85:b1:00:
3e:c8:45:b4:4d:f8:05:60:c7:a6:88:3a:da:dd:c3:c6:c6:e7:
59:50:cc:6d:23:18:e6:35:ac:8a:3b:ce:82:da:c9:62:c7:70:
e9:0f:c3:fb:20:3f:3a:c6:71:b7:b8:0c:2d:9d:8f:7d:5c:80:
03:a9:21:64:e0:02:5b:25:b4:64:c5:4b:75:f8:6c:a7:c3:32:
c0:50:81:d7:90:4c:07:2c:82:6d:8b:89:fe:a3:8d:cc:8a:42:
00:a8:34:02:88:bd:40:54:6b:3b:2f:f8:8b:32:87:5a:bd:04:
d5:fa:89:f3:bf:15:d0:e0:5b:7c:99:8c:79:09:4a:75:89:06:
f0:a5:a4:a5:bb:ba:5a:c5:c8:ad:c0:6b:dc:af:dc:8e:f7:fc:
21:db:db:00:ec:e2:27:b6:be:94:db:dd:41:ac:7d:e7:b3:cc:
8b:75:00:f1:09:db:f9:95:38:c6:41:94:9a:b9:88:05:4b:aa:
7b:11:aa:39:3a:fe:cd:33:57:2b:9b:0b:fa:49:68:9b:8d:1e:
86:ae:1f:e2:0f:60:d3:1c:99:bc:a4:c5:43:5b:81:25:6a:e1:
52:72:80:e1:fc:94:b6:68:7a:6a:18:cb:10:30:4a:80:99:d6:
de:d4:4f:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAywwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yMzA5MjcwNjQ1MTVaFw0yNTA5MzAwNjQ1MTVaMBgxFjAU
BgNVBAMTDTY1MTNjZjdlLTM3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCRimY7/EuR8JHbWh+fdES4q7Vsh+S0FKgPeO7WHREUEvqep501vHpDb/sO
EteF2XFRkDjhCan3TWNY7YTDxyih+oTr49L3xScKwa9sfinB71YCy+R5vmoAG55r
IYoKAPd/x0HusJAwaXpX2Vaj6UGNi36T1T5M7Z0+uozhBa+64WtsYviOGO1iqsE4
SAxxvkI6KEUMhBQshNLSrHIVzdIsEufDo6r9AzmlEGuy+vdh1NIjO5CoRjGLtJnp
107bpigNuvd2i0k/thjkHS1hNaHgFWd+wpSL5t1mPc5WelhPFaa+v0WJ6LiwwHhk
u+chlG4RIEMjePrX5eCkc3UfG6cdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0oN5
+zuF3swihyy2cKzFKT8hjqUwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4
QTAxNENFLzZCREUwOTVFNUQwMTExRUU5ODJGNDQ1NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmjEkwDQYJKoZIhvcNAQEL
BQADggEBAKbuVgT6k/nk95RmaoXspIWxAD7IRbRN+AVgx6aIOtrdw8bG51lQzG0j
GOY1rIo7zoLayWLHcOkPw/sgPzrGcbe4DC2dj31cgAOpIWTgAlsltGTFS3X4bKfD
MsBQgdeQTAcsgm2Lif6jjcyKQgCoNAKIvUBUazsv+Isyh1q9BNX6ifO/FdDgW3yZ
jHkJSnWJBvClpKW7ulrFyK3Aa9yv3I73/CHb2wDs4ie2vpTb3UGsfeezzIt1APEJ
2/mVOMZBlJq5iAVLqnsRqjk6/s0zVyubC/pJaJuNHoauH+IPYNMcmbykxUNbgSVq
4VJygOH8lLZoemoYyxAwSoCZ1t7UTzg=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:28 2024 by rpki-client on console-ams.rpki-client.org