Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/1119CD76DFD311EB88361B37F8AEA228.roa
File: 1119CD76DFD311EB88361B37F8AEA228.roa (raw, json)
Hash identifier: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=
Subject key identifier: B5:F3:FA:98:B8:21:CA:AF:30:83:09:B9:3F:EB:52:6D:A9:0B:B5:0E
Certificate issuer: /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial: 0380
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/1119CD76DFD311EB88361B37F8AEA228.roa
Signing time: Thu 08 Jul 2021 09:58:38 +0000
ROA not before: Thu 08 Jul 2021 09:58:34 +0000
ROA not after: Tue 17 Jun 2031 09:58:34 +0000
asID: 36924
IP address blocks: 154.72.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Validity
Not Before: Jul 8 09:58:34 2021 GMT
Not After : Jun 17 09:58:34 2031 GMT
Subject: CN=60e6cc4e-506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:c6:59:6d:f4:14:a5:38:c7:dc:96:30:a2:
f0:3d:ce:5b:44:54:91:2b:22:c6:f6:a4:c5:b4:b7:
fc:fe:82:1a:d0:3b:50:e0:0c:e3:65:6d:6b:44:37:
7a:e8:b3:b1:e2:d8:a2:01:0a:ee:f4:a3:52:cf:0d:
cb:a2:09:07:8a:4d:67:ea:a6:22:eb:6e:0c:b1:71:
07:bf:b3:bc:99:8d:20:64:ff:e6:88:ca:4f:4d:1b:
c2:de:95:f4:c0:76:06:31:a1:d7:a0:31:32:6f:4e:
fa:7e:f7:1c:da:b3:90:8e:6f:e6:ce:e8:1c:4a:8f:
d4:f3:a7:2c:62:93:01:44:b2:b5:11:47:24:6d:80:
46:f1:da:d7:76:2d:f1:8d:c8:82:bc:1c:7f:71:b1:
ae:f1:15:14:ec:2b:b5:31:65:c7:69:16:39:ab:cf:
02:f4:30:ce:1d:b7:5e:be:c5:9c:45:86:d9:c6:df:
55:e3:c0:29:b7:aa:c3:c6:ae:28:8f:ee:a3:9f:2b:
b5:39:e8:29:f9:1e:af:f5:b4:b8:62:31:70:c4:3a:
84:05:e6:66:2e:7e:4a:90:98:7b:41:13:41:d6:e2:
c0:59:4e:22:ac:f0:14:d1:47:db:90:2c:d1:4a:3b:
11:e6:45:76:cf:b1:3e:e4:b0:2b:78:3f:b2:0e:f5:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F3:FA:98:B8:21:CA:AF:30:83:09:B9:3F:EB:52:6D:A9:0B:B5:0E
X509v3 Authority Key Identifier:
keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/1119CD76DFD311EB88361B37F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:f7:8a:80:30:13:0a:16:7f:d4:89:1d:c5:64:0e:0c:de:06:
60:a2:84:8d:df:c3:46:a6:c8:e1:42:dd:4d:61:4a:53:6f:20:
65:69:04:ab:2c:ae:ca:53:dc:d7:e3:54:37:2f:43:ba:ac:fb:
53:00:19:28:b3:ed:7e:0b:92:d4:c7:04:b1:c2:71:53:a5:5d:
5c:98:a7:ee:46:4b:0c:ce:c3:77:4a:f1:31:10:36:ac:10:0e:
b3:dc:af:e5:1f:f9:f3:a4:78:b7:c2:20:ef:ec:aa:f6:a0:30:
0b:9f:6b:d4:5a:1d:63:2f:01:39:92:44:e9:32:d9:10:1c:ba:
f7:17:58:f9:df:3a:4f:3e:ff:ca:c4:31:31:87:23:6b:17:25:
e0:d1:54:4f:2e:97:e4:60:0b:af:b7:02:41:de:bb:e7:0a:78:
bd:7d:8c:90:dc:8e:d1:61:3a:62:59:fc:2f:b0:40:73:b4:15:
a3:c0:d6:a7:34:39:4a:fe:03:ca:7d:55:a9:b6:10:f0:9b:bc:
61:ee:14:ee:2b:f8:56:2f:57:a8:10:d2:48:62:be:bd:ec:80:
3c:80:77:21:d6:04:29:10:c3:b4:cd:3d:1e:4b:69:04:b6:42:
34:4e:d2:6d:17:ba:3c:49:a0:17:31:9d:fd:a7:ce:42:bb:31:
a7:2c:1a:b6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjhEREVBRjExMC8GA1UEBRMoNDJCNThDRUVBQTJDMTJFOEYyREM5OEQ2NDRDMjBD
RjgxQ0UxQ0UwNTAeFw0yMTA3MDgwOTU4MzRaFw0zMTA2MTcwOTU4MzRaMBgxFjAU
BgNVBAMTDTYwZTZjYzRlLTUwNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7AcZZbfQUpTjH3JYwovA9zltEVJErIsb2pMW0t/z+ghrQO1DgDONlbWtE
N3ros7Hi2KIBCu70o1LPDcuiCQeKTWfqpiLrbgyxcQe/s7yZjSBk/+aIyk9NG8Le
lfTAdgYxodegMTJvTvp+9xzas5COb+bO6BxKj9TzpyxikwFEsrURRyRtgEbx2td2
LfGNyIK8HH9xsa7xFRTsK7UxZcdpFjmrzwL0MM4dt16+xZxFhtnG31XjwCm3qsPG
riiP7qOfK7U56Cn5Hq/1tLhiMXDEOoQF5mYufkqQmHtBE0HW4sBZTiKs8BTRR9uQ
LNFKOxHmRXbPsT7ksCt4P7IO9evBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtfP6
mLghyq8wgwm5P+tSbakLtQ4wHwYDVR0jBBgwFoAUQrWM7qosEujy3JjWRMIM+Bzh
zgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4RERFL0JGNzgyMzNBMzY5RTExRTlBN0Q1RTIyMEY4QUVBMjI4L1FyV003
cW9zRXVqeTNKaldSTUlNLUJ6aHpnVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FyV003cW9zRXVqeTNKaldSTUlNLUJ6aHpnVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI4RERFL0JGNzgyMzNBMzY5RTExRTlBN0Q1RTIyMEY4
QUVBMjI4LzExMTlDRDc2REZEMzExRUI4ODM2MUIzN0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASaSHAwDQYJKoZIhvcNAQEL
BQADggEBAD33ioAwEwoWf9SJHcVkDgzeBmCihI3fw0amyOFC3U1hSlNvIGVpBKss
rspT3NfjVDcvQ7qs+1MAGSiz7X4LktTHBLHCcVOlXVyYp+5GSwzOw3dK8TEQNqwQ
DrPcr+Uf+fOkeLfCIO/sqvagMAufa9RaHWMvATmSROky2RAcuvcXWPnfOk8+/8rE
MTGHI2sXJeDRVE8ul+RgC6+3AkHeu+cKeL19jJDcjtFhOmJZ/C+wQHO0FaPA1qc0
OUr+A8p9Vam2EPCbvGHuFO4r+FYvV6gQ0khivr3sgDyAdyHWBCkQw7TNPR5LaQS2
QjRO0m0XujxJoBcxnf2nzkK7MacsGrY=
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org