Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/C1EA4780FB7F11EB9D2CC317D8A014CE.roa
File: C1EA4780FB7F11EB9D2CC317D8A014CE.roa (raw, json)
Hash identifier: EuixU3epnpbUpwoJhFUHV5OKLLMlJHPLSrbxyzVttAM=
Subject key identifier: 17:65:6D:85:81:95:1C:AF:50:04:1A:22:CE:E3:55:98:7E:31:5D:2D
Certificate issuer: /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial: 019C
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/C1EA4780FB7F11EB9D2CC317D8A014CE.roa
Signing time: Thu 12 Aug 2021 15:13:32 +0000
ROA not before: Thu 12 Aug 2021 15:13:17 +0000
ROA not after: Tue 12 Aug 2031 15:13:17 +0000
asID: 37468
IP address blocks: 102.219.124.0/22 maxlen: 24
2c0f:f828::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Validity
Not Before: Aug 12 15:13:17 2021 GMT
Not After : Aug 12 15:13:17 2031 GMT
Subject: CN=61153a9c-f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:af:e8:42:de:fd:dd:7f:a1:ec:27:4b:1a:
29:ea:f4:f6:8f:60:86:67:6e:36:75:9c:83:6e:0c:
b3:8c:b5:32:e2:fa:6c:f7:b8:c9:91:08:ee:f9:86:
9a:4e:0e:d8:f4:3f:e7:94:45:a3:72:f2:be:5b:d4:
50:44:03:6e:1b:da:67:5c:b6:b4:2f:08:87:88:e3:
e0:9f:93:1b:3b:1e:0c:13:50:aa:17:d4:c3:35:73:
5f:83:10:a5:de:d4:ca:30:bd:f4:c4:f5:fd:ba:c6:
91:b2:0b:46:64:71:ad:8b:f4:2d:da:b3:df:2e:e7:
d0:1f:f6:f0:23:cd:cd:1b:e2:dd:96:9c:02:79:50:
3b:b7:6b:91:94:da:ad:89:d1:6e:66:c7:e1:e0:a5:
c0:6f:26:8e:e5:4e:0d:8f:35:97:c2:af:65:b0:66:
92:02:b0:45:55:25:88:f7:c8:c0:6d:e6:83:e1:84:
e0:49:9e:f5:ff:20:6f:84:d7:89:6b:c0:0b:69:44:
c8:aa:3c:16:af:b8:72:a4:2a:d2:60:33:fa:da:3d:
d2:0d:85:64:8a:5d:38:7f:d9:04:ef:de:6c:30:13:
b5:62:d8:cb:20:67:a9:f0:c0:9d:4f:ab:0b:db:45:
d7:e6:2a:00:58:c0:13:79:e5:7f:ab:02:b6:08:2c:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:65:6D:85:81:95:1C:AF:50:04:1A:22:CE:E3:55:98:7E:31:5D:2D
X509v3 Authority Key Identifier:
keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/C1EA4780FB7F11EB9D2CC317D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.124.0/22
IPv6:
2c0f:f828::/32
Signature Algorithm: sha256WithRSAEncryption
9c:38:4c:96:82:62:6f:97:62:d1:c7:e5:2e:63:20:f8:c2:f2:
40:62:25:7c:9e:48:c7:66:32:d4:ee:54:79:99:46:cf:3e:d2:
92:36:82:25:36:9f:8b:da:2f:8f:96:ca:02:a6:86:2c:20:5f:
19:58:1a:e2:1c:95:51:c5:1b:04:ce:ee:ed:b9:5a:71:9d:9d:
67:83:7e:ab:2f:d7:ff:83:7a:40:e0:1b:99:1c:48:11:b5:12:
f0:75:91:91:a0:3a:cf:e9:27:a8:f2:0b:7f:de:5d:59:12:4a:
bb:82:32:25:c9:ab:a1:58:cc:1e:db:55:2b:ea:dc:65:2f:5f:
f2:f2:39:f1:7d:d5:c5:d7:43:36:8b:4c:1e:f7:be:d1:92:1f:
57:f4:5b:40:b6:f9:e7:92:08:70:47:14:cd:d7:48:cf:e1:78:
cb:23:99:cb:72:29:00:b5:13:d1:16:fe:f6:37:f4:de:99:dc:
d4:bb:6c:98:da:5c:e7:33:06:93:d3:87:bf:bb:72:b0:30:62:
e5:39:ba:f3:c4:67:5d:5f:19:d9:89:5a:ad:d5:fd:c0:95:c9:
eb:0f:d0:45:d3:a3:9f:e9:43:cf:89:7d:9d:35:f4:a4:36:6c:
ee:35:fc:7e:12:ae:28:50:41:c1:78:2a:c4:cc:ec:4f:e7:4f:
f0:0e:76:d4
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjZDNUJBRjExMC8GA1UEBRMoMkNERjU4MEUzNzY3NTVCMUY4QzY4ODA4NDIxMjZE
RDYzREQ3NEVFNzAeFw0yMTA4MTIxNTEzMTdaFw0zMTA4MTIxNTEzMTdaMBgxFjAU
BgNVBAMMDTYxMTUzYTljLWY4YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMuq/oQt793X+h7CdLGinq9PaPYIZnbjZ1nINuDLOMtTLi+mz3uMmRCO75
hppODtj0P+eURaNy8r5b1FBEA24b2mdctrQvCIeI4+Cfkxs7HgwTUKoX1MM1c1+D
EKXe1MowvfTE9f26xpGyC0Zkca2L9C3as98u59Af9vAjzc0b4t2WnAJ5UDu3a5GU
2q2J0W5mx+HgpcBvJo7lTg2PNZfCr2WwZpICsEVVJYj3yMBt5oPhhOBJnvX/IG+E
14lrwAtpRMiqPBavuHKkKtJgM/raPdINhWSKXTh/2QTv3mwwE7Vi2MsgZ6nwwJ1P
qwvbRdfmKgBYwBN55X+rArYILCGfAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUF2Vt
hYGVHK9QBBoizuNVmH4xXS0wHwYDVR0jBBgwFoAULN9YDjdnVbH4xogIQhJt1j3X
TucwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2QzVCL0VFNkFEQ0MyQ0RGNzExRUFBNUFFRDI0NEY4QUVBMjI4L0xOOVlE
amRuVmJINHhvZ0lRaEp0MWozWFR1Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xOOVlEamRuVmJINHhvZ0lRaEp0MWozWFR1Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI2QzVCL0VFNkFEQ0MyQ0RGNzExRUFBNUFFRDI0NEY4
QUVBMjI4L0MxRUE0NzgwRkI3RjExRUI5RDJDQzMxN0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm23wwDQQCAAIwBwMFACwP
+CgwDQYJKoZIhvcNAQELBQADggEBAJw4TJaCYm+XYtHH5S5jIPjC8kBiJXyeSMdm
MtTuVHmZRs8+0pI2giU2n4vaL4+WygKmhiwgXxlYGuIclVHFGwTO7u25WnGdnWeD
fqsv1/+DekDgG5kcSBG1EvB1kZGgOs/pJ6jyC3/eXVkSSruCMiXJq6FYzB7bVSvq
3GUvX/LyOfF91cXXQzaLTB73vtGSH1f0W0C2+eeSCHBHFM3XSM/heMsjmctyKQC1
E9EW/vY39N6Z3NS7bJjaXOczBpPTh7+7crAwYuU5uvPEZ11fGdmJWq3V/cCVyesP
0EXTo5/pQ8+JfZ019KQ2bO41/H4SrihQQcF4KsTM7E/nT/AOdtQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:49 2024 by rpki-client on console-ams.rpki-client.org