Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/8FAD41ECA64311EF848DA68D762E951A.roa
File: 8FAD41ECA64311EF848DA68D762E951A.roa (raw, json)
Hash identifier: Z4cg/nGpYacU/MpUMhAzBmaeZFMAlVYhg38jdFOU3mg=
Subject key identifier: E7:26:32:EC:84:1D:D8:21:8C:A2:24:92:90:3D:A1:56:C2:8B:80:9E
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 02
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/8FAD41ECA64311EF848DA68D762E951A.roa
Signing time: Tue 19 Nov 2024 06:57:37 +0000
ROA not before: Tue 19 Nov 2024 06:57:34 +0000
ROA not after: Wed 01 Nov 2034 06:57:34 +0000
asID: 328467
IP address blocks: 102.67.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Validity
Not Before: Nov 19 06:57:34 2024 GMT
Not After : Nov 1 06:57:34 2034 GMT
Subject: CN=673c36e1-e543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:b4:00:83:5c:90:6f:98:a3:b2:7b:e9:6b:
0b:fe:65:06:db:ae:e3:8e:72:7f:16:7b:d4:c6:a3:
13:6f:66:6b:cd:d6:a5:d9:97:99:cb:d6:34:b7:ab:
8e:30:66:b2:41:93:29:0d:5d:45:35:81:f4:28:da:
9f:e8:8b:37:30:2a:10:c5:86:16:d4:7c:2c:bc:8d:
25:a7:b3:c3:e4:e6:a3:6a:50:1f:ea:14:26:01:4d:
b0:5f:00:b8:4f:f8:08:84:cd:10:1f:ac:b2:82:be:
75:0a:be:5b:24:48:58:7e:9d:60:61:05:a4:9e:46:
31:35:a6:ed:3c:a3:95:4b:3e:a8:82:f4:6c:da:9b:
b0:f9:90:5a:c1:03:9a:c2:51:bb:1f:38:fb:5d:4f:
65:f6:c1:c8:e6:56:52:1b:e2:74:4a:c0:7e:70:f6:
7c:be:6b:2c:d0:a9:74:4c:7d:b9:56:24:01:26:1f:
49:06:0f:f1:7d:ff:06:00:65:9a:58:80:55:97:f9:
cc:8f:42:f2:65:a1:94:7a:93:44:0f:5a:79:20:73:
be:b1:9a:93:65:f9:b7:74:2a:84:40:22:bb:43:fb:
48:b3:e7:59:d8:42:4f:99:f9:58:62:f7:bc:cb:e5:
67:3d:66:a2:ca:3e:49:88:8b:ba:3f:69:5d:46:d6:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:32:EC:84:1D:D8:21:8C:A2:24:92:90:3D:A1:56:C2:8B:80:9E
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/8FAD41ECA64311EF848DA68D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b7:70:f4:22:ad:31:28:39:20:b4:3a:c8:b4:6e:d2:9f:36:
4a:a5:69:dd:dc:3c:fd:49:a1:89:9e:30:e8:88:ea:9c:ed:4f:
f3:a4:b6:21:01:69:1b:4d:01:9a:2c:35:34:72:c0:1f:cd:5a:
3e:a6:48:c8:44:6d:29:cd:4c:af:92:f7:c7:75:24:09:58:83:
2e:36:a3:af:f5:13:7d:32:6d:02:a3:d2:86:fc:72:69:eb:a9:
f2:aa:45:75:85:1a:f7:09:33:ac:00:9b:70:d6:25:73:a4:1c:
92:f5:ce:76:b4:60:de:6c:76:db:67:7a:d3:8a:ec:68:7e:0a:
6b:38:5f:cd:0e:b6:8c:96:3f:51:86:99:04:07:09:6c:f2:08:
e4:87:cc:80:ef:14:71:c0:2d:2b:2e:9c:28:a4:e4:95:a4:37:
cd:53:62:68:d0:cc:d8:99:7b:02:3f:fe:87:a6:c9:78:6a:ad:
d8:31:4b:b6:7e:8d:b7:4e:07:81:a6:69:55:07:0a:0b:53:a3:
f7:f0:df:86:c3:ec:aa:2a:89:91:e1:4a:81:e0:1f:66:3c:e0:
28:e5:a4:af:5a:73:f4:16:a7:c4:f8:4d:08:e3:ff:80:a5:86:
8a:b3:7b:e8:c1:d4:fe:4f:aa:06:b9:dd:d0:9e:25:09:8c:f6:
63:59:21:75
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NzkzRkFGMTEwLwYDVQQFEyhEQUE4NzJGRjlBMDQ0NDZCNzE4QThEOUY0NzU1NEJG
QTU4MUIzQTBFMB4XDTI0MTExOTA2NTczNFoXDTM0MTEwMTA2NTczNFowGDEWMBQG
A1UEAxMNNjczYzM2ZTEtZTU0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMV6tACDXJBvmKOye+lrC/5lBtuu445yfxZ71MajE29ma83WpdmXmcvWNLer
jjBmskGTKQ1dRTWB9Cjan+iLNzAqEMWGFtR8LLyNJaezw+Tmo2pQH+oUJgFNsF8A
uE/4CITNEB+ssoK+dQq+WyRIWH6dYGEFpJ5GMTWm7TyjlUs+qIL0bNqbsPmQWsED
msJRux84+11PZfbByOZWUhvidErAfnD2fL5rLNCpdEx9uVYkASYfSQYP8X3/BgBl
mliAVZf5zI9C8mWhlHqTRA9aeSBzvrGak2X5t3QqhEAiu0P7SLPnWdhCT5n5WGL3
vMvlZz1moso+SYiLuj9pXUbWpd8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTnJjLs
hB3YIYyiJJKQPaFWwouAnjAfBgNVHSMEGDAWgBTaqHL/mgREa3GKjZ9HVUv6WBs6
DjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYyRTk1MUEvMnFoeV81
b0VSR3R4aW8yZlIxVkwtbGdiT2c0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMnFoeV81b0VSR3R4aW8yZlIxVkwtbGdiT2c0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYy
RTk1MUEvOEZBRDQxRUNBNjQzMTFFRjg0OERBNjhENzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGZDhjANBgkqhkiG9w0BAQsF
AAOCAQEAoLdw9CKtMSg5ILQ6yLRu0p82SqVp3dw8/UmhiZ4w6IjqnO1P86S2IQFp
G00Bmiw1NHLAH81aPqZIyERtKc1Mr5L3x3UkCViDLjajr/UTfTJtAqPShvxyaeup
8qpFdYUa9wkzrACbcNYlc6QckvXOdrRg3mx222d604rsaH4KazhfzQ62jJY/UYaZ
BAcJbPII5IfMgO8UccAtKy6cKKTklaQ3zVNiaNDM2Jl7Aj/+h6bJeGqt2DFLtn6N
t04HgaZpVQcKC1Oj9/DfhsPsqiqJkeFKgeAfZjzgKOWkr1pz9BanxPhNCOP/gKWG
irN76MHU/k+qBrnd0J4lCYz2Y1khdQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org