Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/47D8021A53D411EFA7C83C74762E951A.roa
File: 47D8021A53D411EFA7C83C74762E951A.roa (raw, json)
Hash identifier: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=
Subject key identifier: BB:DA:52:D6:C6:08:40:C1:D8:AF:59:16:0A:DE:DB:DB:70:08:7F:26
Certificate issuer: /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial: 02
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/47D8021A53D411EFA7C83C74762E951A.roa
Signing time: Tue 06 Aug 2024 09:14:27 +0000
ROA not before: Tue 06 Aug 2024 09:14:24 +0000
ROA not after: Fri 04 Aug 2034 09:14:24 +0000
asID: 329266
IP address blocks: 102.212.0.0/22 maxlen: 24
2c0f:4740::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Validity
Not Before: Aug 6 09:14:24 2024 GMT
Not After : Aug 4 09:14:24 2034 GMT
Subject: CN=66b1e973-8fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:a6:81:32:e5:43:49:01:59:23:78:a1:27:
69:a0:52:d5:58:b9:7d:41:b8:5d:ed:f3:be:ab:aa:
c4:ed:ca:07:8f:7d:67:31:4d:56:39:af:dc:31:1b:
b3:56:2a:cb:1a:bc:26:eb:e5:54:02:0c:29:03:af:
37:c4:86:90:39:02:70:0c:2e:82:1f:c7:b2:ea:b3:
0d:1b:55:6f:79:c5:99:45:32:48:30:63:79:d2:5a:
95:e1:4d:8a:96:0d:e3:c8:7f:eb:28:c2:5b:34:9f:
88:cb:86:ce:33:73:b4:c3:ed:ac:cc:ca:dd:40:a7:
70:77:00:b8:01:fa:80:9c:81:fa:cc:1a:42:e2:3f:
73:6d:ad:9a:c9:6f:1f:41:ae:c1:39:b1:10:d2:42:
b7:59:ba:e9:be:2a:f9:cf:5e:6c:4f:2a:05:a9:52:
40:cc:c1:ea:58:68:fd:4f:a2:f1:77:a8:36:99:5b:
58:f2:69:1c:46:b7:a7:17:0a:aa:31:f7:79:b1:b7:
d2:55:8d:1b:eb:b8:a1:14:55:1f:f5:96:5f:92:31:
b1:08:09:82:21:68:53:0b:22:6b:da:27:5a:b1:0c:
9f:ca:3e:71:08:ab:7c:67:9b:71:40:28:14:e1:cb:
a8:cb:a4:63:2c:d6:75:07:a4:ea:b5:33:fc:bf:82:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:52:D6:C6:08:40:C1:D8:AF:59:16:0A:DE:DB:DB:70:08:7F:26
X509v3 Authority Key Identifier:
keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/47D8021A53D411EFA7C83C74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.0.0/22
IPv6:
2c0f:4740::/32
Signature Algorithm: sha256WithRSAEncryption
98:ec:1e:06:42:7c:89:8a:41:91:5c:e9:94:2a:01:a9:73:d4:
e7:84:33:c4:1e:fb:b4:9b:cf:e9:7c:a7:17:90:fd:29:6e:db:
2e:b2:91:70:5f:58:88:fe:c2:b5:68:58:73:a5:a5:19:c9:5e:
ac:e0:88:1a:84:e6:06:2d:da:35:ae:d8:14:81:e1:53:6e:b2:
9e:0e:ec:e6:fe:27:8d:bf:ab:a6:90:4c:ae:39:b8:6a:c0:1c:
ae:0b:71:ce:81:81:4d:c8:e8:f8:57:22:a5:14:dd:5a:85:3d:
7a:99:61:6e:8d:0b:83:63:0b:62:22:ca:74:23:0d:e7:54:21:
53:a9:6f:aa:dd:f0:6a:42:7c:97:65:68:cc:93:02:c9:0e:83:
c5:4c:5a:e3:52:16:88:9a:a7:78:fd:ce:1e:72:a9:d0:41:7d:
85:7f:f4:e2:38:ee:36:aa:6a:45:8f:b4:5f:43:af:52:7e:71:
f5:05:e1:bd:60:01:34:f0:ad:43:36:54:8e:66:ac:f1:e9:cb:
3c:e7:cb:18:2f:fc:b6:d6:5a:da:2d:33:5f:04:55:c8:9f:44:
84:7a:68:a8:da:41:f5:d7:a4:41:2d:5c:74:cb:4e:6d:9a:7f:
12:66:51:4b:a9:9f:15:09:f7:70:5c:62:aa:66:ee:49:4f:95:
44:b1:61:ed
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NzA2NUFGMTEwLwYDVQQFEyg1QzBFOEYxRThCOTBGREQyOTRCNTRENTczMDkwMTNG
QzVBMDZBMzVCMB4XDTI0MDgwNjA5MTQyNFoXDTM0MDgwNDA5MTQyNFowGDEWMBQG
A1UEAxMNNjZiMWU5NzMtOGZlZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALm5poEy5UNJAVkjeKEnaaBS1Vi5fUG4Xe3zvquqxO3KB499ZzFNVjmv3DEb
s1Yqyxq8JuvlVAIMKQOvN8SGkDkCcAwugh/HsuqzDRtVb3nFmUUySDBjedJaleFN
ipYN48h/6yjCWzSfiMuGzjNztMPtrMzK3UCncHcAuAH6gJyB+swaQuI/c22tmslv
H0GuwTmxENJCt1m66b4q+c9ebE8qBalSQMzB6lho/U+i8XeoNplbWPJpHEa3pxcK
qjH3ebG30lWNG+u4oRRVH/WWX5IxsQgJgiFoUwsia9onWrEMn8o+cQirfGebcUAo
FOHLqMukYyzWdQek6rUz/L+CKkkCAwEAAaOCArQwggKwMB0GA1UdDgQWBBS72lLW
xghAwdivWRYK3tvbcAh/JjAfBgNVHSMEGDAWgBRcDo8ei5D90pS1TVcwkBP8Wgaj
WzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjcwNjUvNjVBRDM2NTg1M0QzMTFFRjlCQjc2RjZGNzYyRTk1MUEvWEE2UEhv
dVFfZEtVdFUxWE1KQVRfRm9HbzFzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWEE2UEhvdVFfZEtVdFUxWE1KQVRfRm9HbzFzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjcwNjUvNjVBRDM2NTg1M0QzMTFFRjlCQjc2RjZGNzYy
RTk1MUEvNDdEODAyMUE1M0Q0MTFFRkE3QzgzQzc0NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbUADANBAIAAjAHAwUALA9H
QDANBgkqhkiG9w0BAQsFAAOCAQEAmOweBkJ8iYpBkVzplCoBqXPU54QzxB77tJvP
6XynF5D9KW7bLrKRcF9YiP7CtWhYc6WlGclerOCIGoTmBi3aNa7YFIHhU26yng7s
5v4njb+rppBMrjm4asAcrgtxzoGBTcjo+FcipRTdWoU9eplhbo0Lg2MLYiLKdCMN
51QhU6lvqt3wakJ8l2VozJMCyQ6DxUxa41IWiJqneP3OHnKp0EF9hX/04jjuNqpq
RY+0X0OvUn5x9QXhvWABNPCtQzZUjmas8enLPOfLGC/8ttZa2i0zXwRVyJ9EhHpo
qNpB9dekQS1cdMtObZp/EmZRS6mfFQn3cFxiqmbuSU+VRLFh7Q==
-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:15 2024 by rpki-client on console-ams.rpki-client.org