Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/105F0D40F70D11EC8E5663B5F1222468.roa
File: 105F0D40F70D11EC8E5663B5F1222468.roa (raw, json)
Hash identifier: mjO2Sp6OVpSiQ7xZGU3orqZpsq+WKN6CkJVcH0QEXeM=
Subject key identifier: 0D:89:A0:11:3D:63:EB:8A:F0:8C:7F:8F:A3:71:EA:9C:E2:B9:AC:12
Certificate issuer: /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial: 0D
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/105F0D40F70D11EC8E5663B5F1222468.roa
Signing time: Tue 28 Jun 2022 18:06:42 +0000
ROA not before: Tue 28 Jun 2022 18:06:39 +0000
ROA not after: Mon 28 Jun 2032 18:06:39 +0000
asID: 328925
IP address blocks: 102.218.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Validity
Not Before: Jun 28 18:06:39 2022 GMT
Not After : Jun 28 18:06:39 2032 GMT
Subject: CN=62bb4332-3347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:b4:24:6a:f3:f7:82:6a:ff:1b:a2:a0:22:
79:24:53:35:b3:24:e2:43:8a:6b:0f:9d:25:16:77:
af:75:92:94:dc:23:22:82:2c:ce:42:c2:e7:52:bb:
a0:9d:75:9b:3f:23:6e:de:48:3b:b9:7c:b8:2f:d0:
ba:8e:19:61:3d:02:55:3b:ea:3d:76:32:f8:a6:68:
9a:7f:11:b4:76:1c:bd:17:81:88:d5:dc:e7:36:25:
59:de:d6:90:46:c7:1b:b7:22:94:1a:8b:ca:2a:2c:
33:d3:ca:61:a8:b4:b1:d3:0d:bb:c9:55:2a:64:3d:
e4:3b:99:ca:64:97:90:e6:4a:57:42:ea:33:3d:20:
2c:19:ba:82:83:c5:f5:8b:c8:d9:3f:23:11:99:da:
0e:0d:a0:84:26:b5:13:6f:4e:22:9b:c3:27:61:4e:
52:2e:b4:7b:fa:e9:ab:f8:aa:48:fb:23:8b:df:71:
13:c7:43:fb:8b:28:5e:82:12:b1:22:11:da:cb:ae:
1a:a9:95:a1:fd:8e:5b:96:4a:a7:a6:59:4c:8f:42:
76:e0:b3:51:ac:c6:d9:c2:b5:69:cb:86:bf:3e:3a:
34:c8:1f:50:54:8f:79:46:96:24:91:ee:94:94:2b:
7f:3b:17:a0:9d:75:63:eb:1e:86:8a:85:7f:19:91:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:89:A0:11:3D:63:EB:8A:F0:8C:7F:8F:A3:71:EA:9C:E2:B9:AC:12
X509v3 Authority Key Identifier:
keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/105F0D40F70D11EC8E5663B5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.155.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8b:fa:a0:ca:e7:b3:12:1c:4e:26:b2:f1:7f:c7:fb:a3:d2:
c9:4e:b2:05:f4:86:47:7c:8c:9c:ab:ad:3d:cd:1b:31:de:6a:
85:8c:d0:f9:a0:3b:a8:9b:59:e9:f9:b1:23:2e:f1:eb:66:58:
ae:d5:68:79:c1:9c:ed:a0:68:33:49:15:fa:be:2e:93:ba:ef:
74:d3:de:5d:af:0f:c7:67:9d:01:23:c7:03:73:6d:a8:e7:03:
ca:f1:8c:4c:4c:3a:78:98:8f:e4:e0:22:f5:08:67:04:43:1b:
8e:32:88:a3:6a:d4:a4:90:20:0e:8d:c3:a0:2c:50:99:ca:f3:
d5:14:15:4e:da:ae:c6:c3:40:5a:89:c5:22:5c:0b:d3:48:f4:
e7:16:0a:95:67:86:88:be:f2:cf:19:58:53:2a:bb:91:47:e2:
8e:2e:07:17:b1:90:96:1f:dc:d4:2f:39:4c:26:36:8a:be:49:
18:2c:23:17:76:37:c0:39:f5:85:4a:b9:24:3c:48:eb:69:74:
5b:1f:eb:1b:3d:8d:93:63:8d:9e:0c:f1:37:c8:1a:bb:27:31:
74:dd:c1:f4:45:70:7a:d2:72:a7:e9:8f:97:d1:d8:95:f9:cd:
f4:77:e8:be:df:8a:59:70:b5:4a:10:ed:ab:8e:c8:8d:ea:d7:
bf:54:6a:30
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYy
QTJFMUFGMTEwLwYDVQQFEyhFMkEzQTY4RThGQTI4NjVEMkU1NDdEOENCMjQzMEZB
QjIxRkNBMDZEMB4XDTIyMDYyODE4MDYzOVoXDTMyMDYyODE4MDYzOVowGDEWMBQG
A1UEAwwNNjJiYjQzMzItMzM0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfOtCRq8/eCav8boqAieSRTNbMk4kOKaw+dJRZ3r3WSlNwjIoIszkLC51K7
oJ11mz8jbt5IO7l8uC/Quo4ZYT0CVTvqPXYy+KZomn8RtHYcvReBiNXc5zYlWd7W
kEbHG7cilBqLyiosM9PKYai0sdMNu8lVKmQ95DuZymSXkOZKV0LqMz0gLBm6goPF
9YvI2T8jEZnaDg2ghCa1E29OIpvDJ2FOUi60e/rpq/iqSPsji99xE8dD+4soXoIS
sSIR2suuGqmVof2OW5ZKp6ZZTI9CduCzUazG2cK1acuGvz46NMgfUFSPeUaWJJHu
lJQrfzsXoJ11Y+sehoqFfxmRMHkCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQNiaAR
PWPrivCMf4+jceqc4rmsEjAfBgNVHSMEGDAWgBTio6aOj6KGXS5UfYyyQw+rIfyg
bTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkEyRTEvMDFDNEFENUVGNjE3MTFFQzgxOTc1NEFBRjEyMjI0NjgvNHFPbWpv
LWlobDB1VkgyTXNrTVBxeUg4b0cwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNHFPbWpvLWlobDB1VkgyTXNrTVBxeUg4b0cwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkEyRTEvMDFDNEFENUVGNjE3MTFFQzgxOTc1NEFBRjEy
MjI0NjgvMTA1RjBENDBGNzBEMTFFQzhFNTY2M0I1RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbamzANBgkqhkiG9w0BAQsF
AAOCAQEAdIv6oMrnsxIcTiay8X/H+6PSyU6yBfSGR3yMnKutPc0bMd5qhYzQ+aA7
qJtZ6fmxIy7x62ZYrtVoecGc7aBoM0kV+r4uk7rvdNPeXa8Px2edASPHA3NtqOcD
yvGMTEw6eJiP5OAi9QhnBEMbjjKIo2rUpJAgDo3DoCxQmcrz1RQVTtquxsNAWonF
IlwL00j05xYKlWeGiL7yzxlYUyq7kUfiji4HF7GQlh/c1C85TCY2ir5JGCwjF3Y3
wDn1hUq5JDxI62l0Wx/rGz2Nk2ONngzxN8gauycxdN3B9EVwetJyp+mPl9HYlfnN
9Hfovt+KWXC1ShDtq47IjerXv1RqMA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org