Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/467001ECF69211EEAC90857C775412E6.roa
File: 467001ECF69211EEAC90857C775412E6.roa (raw, json)
Hash identifier: cAC8eqihxV9QtuZucjUH43WNeBQVHhki83dtvxmhU80=
Subject key identifier: EA:E4:A3:A0:F4:7D:15:74:2B:B4:14:62:DB:83:5D:6D:3D:0B:58:D2
Certificate issuer: /CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Certificate serial: 0189
Authority key identifier: 10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/467001ECF69211EEAC90857C775412E6.roa
Signing time: Tue 09 Apr 2024 16:57:40 +0000
ROA not before: Tue 09 Apr 2024 16:57:37 +0000
ROA not after: Fri 10 Apr 2026 16:57:37 +0000
asID: 328539
IP address blocks: 102.38.0.0/19 maxlen: 24
102.213.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Validity
Not Before: Apr 9 16:57:37 2024 GMT
Not After : Apr 10 16:57:37 2026 GMT
Subject: CN=66157384-00e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:da:ea:d0:a7:f2:d3:9f:78:b6:67:b9:ef:
60:1a:57:3c:66:ee:c1:76:0c:d2:11:c8:df:12:7b:
bd:7f:bc:6c:e6:df:41:23:07:3a:d4:6b:7c:5f:cf:
b1:23:c7:15:a9:79:1c:39:00:1a:46:73:3f:f3:d2:
ee:d5:04:7d:27:c3:b7:e4:66:9d:d2:21:73:e5:17:
7d:56:d4:de:fd:4a:31:58:42:05:d0:e5:b2:53:a7:
98:f6:a9:a6:0a:19:b6:79:ad:fb:b9:88:78:85:1e:
46:8f:95:a6:5f:be:89:87:82:58:d5:3e:de:bc:a6:
7c:78:3a:ab:3c:35:b5:bf:23:c0:22:e2:59:59:82:
70:9b:b6:90:20:b0:0b:ca:fe:5d:52:f6:bb:e2:a6:
b9:bb:e0:9b:8a:09:5f:c7:b4:9f:42:10:4e:95:96:
bb:5e:31:e1:8b:dc:25:6c:9f:6d:7b:bc:7e:77:56:
a3:97:3c:00:42:7b:00:38:89:9e:63:1d:5a:69:69:
68:48:a6:9e:f6:e0:ff:ec:c9:a7:7f:d3:9d:25:84:
f7:10:b1:21:84:04:a1:57:1d:d4:ef:9a:85:e2:4c:
3e:34:80:e7:66:0c:ca:52:32:e1:3c:e6:a4:2e:f9:
13:57:88:2f:39:7f:a0:21:e6:7d:1e:26:79:ef:19:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:A3:A0:F4:7D:15:74:2B:B4:14:62:DB:83:5D:6D:3D:0B:58:D2
X509v3 Authority Key Identifier:
keyid:10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/467001ECF69211EEAC90857C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.38.0.0/19
102.213.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e9:e8:e3:01:7a:70:bf:6b:53:89:fc:5d:57:52:50:57:6c:
ac:68:3b:27:c3:f1:e2:87:51:03:ea:7b:18:48:e5:91:cd:a2:
5c:24:8f:e0:0e:e5:df:f5:43:76:5e:88:86:a4:42:70:eb:9b:
4e:7f:00:40:e0:29:a0:98:b4:37:c6:07:b0:7f:22:f8:e4:d7:
a7:fe:f6:82:50:9c:61:9c:78:e3:f1:54:2e:ee:bf:90:52:21:
9b:2a:38:09:8c:cb:4b:d0:3a:a4:25:0d:28:25:ad:e0:72:80:
cf:2f:01:35:71:0b:c4:14:53:42:aa:96:72:6b:6b:fe:2f:a8:
6c:5d:88:ea:9d:62:d7:d5:52:27:c3:15:44:12:42:2d:8b:41:
3b:50:db:a0:01:f6:d6:d5:27:ab:19:95:ac:af:e3:c9:4f:3f:
72:a9:49:f0:2a:1b:bf:8d:71:b0:c6:72:4f:a6:da:6c:ed:a8:
de:cf:ac:e6:71:db:54:84:4e:98:ac:1d:dd:71:7a:e5:d2:90:
8f:4c:92:7a:49:39:ac:4a:9b:57:9c:82:37:d6:98:a6:fc:75:
ec:f2:2a:18:27:80:7d:c9:e9:e7:19:aa:3c:e3:3f:da:e0:42:
ac:81:67:54:91:56:48:9a:4a:12:e2:c6:eb:21:bd:57:23:68:
74:bc:28:eb
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjMyREVBRjExMC8GA1UEBRMoMTA4MEFDQkVDRENBMTYwNEI2NjZDMDhCOTBCRERC
RUU1ODVEMkNGOTAeFw0yNDA0MDkxNjU3MzdaFw0yNjA0MTAxNjU3MzdaMBgxFjAU
BgNVBAMTDTY2MTU3Mzg0LTAwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDI5drq0Kfy0594tme572AaVzxm7sF2DNIRyN8Se71/vGzm30EjBzrUa3xf
z7EjxxWpeRw5ABpGcz/z0u7VBH0nw7fkZp3SIXPlF31W1N79SjFYQgXQ5bJTp5j2
qaYKGbZ5rfu5iHiFHkaPlaZfvomHgljVPt68pnx4Oqs8NbW/I8Ai4llZgnCbtpAg
sAvK/l1S9rviprm74JuKCV/HtJ9CEE6VlrteMeGL3CVsn217vH53VqOXPABCewA4
iZ5jHVppaWhIpp724P/syad/050lhPcQsSGEBKFXHdTvmoXiTD40gOdmDMpSMuE8
5qQu+RNXiC85f6Ah5n0eJnnvGQOPAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQU6uSj
oPR9FXQrtBRi24NdbT0LWNIwHwYDVR0jBBgwFoAUEICsvs3KFgS2ZsCLkL3b7lhd
LPkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIzMkRFL0VERUU5NDUwRDJFRjExRURBNTkyMUJCOUYxMjIyNDY4L0VJQ3N2
czNLRmdTMlpzQ0xrTDNiN2xoZExQay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VJQ3N2czNLRmdTMlpzQ0xrTDNiN2xoZExQay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIzMkRFL0VERUU5NDUwRDJFRjExRURBNTkyMUJCOUYx
MjIyNDY4LzQ2NzAwMUVDRjY5MjExRUVBQzkwODU3Qzc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAVmJgADBAJm1eQwDQYJKoZI
hvcNAQELBQADggEBAIrp6OMBenC/a1OJ/F1XUlBXbKxoOyfD8eKHUQPqexhI5ZHN
olwkj+AO5d/1Q3ZeiIakQnDrm05/AEDgKaCYtDfGB7B/Ivjk16f+9oJQnGGceOPx
VC7uv5BSIZsqOAmMy0vQOqQlDSglreBygM8vATVxC8QUU0KqlnJra/4vqGxdiOqd
YtfVUifDFUQSQi2LQTtQ26AB9tbVJ6sZlayv48lPP3KpSfAqG7+NcbDGck+m2mzt
qN7PrOZx21SETpisHd1xeuXSkI9MknpJOaxKm1ecgjfWmKb8dezyKhgngH3J6ecZ
qjzjP9rgQqyBZ1SRVkiaShLixushvVcjaHS8KOs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org