Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/01F8DC1669EA11EAA9BABC16F8AEA228.roa
File: 01F8DC1669EA11EAA9BABC16F8AEA228.roa (raw, json)
Hash identifier: X0uso37mfi7TJGv/HuJW5Va2qdwCEhuoPLM3psP6XXI=
Subject key identifier: 79:8B:41:D0:C8:9C:BF:D5:E2:40:49:4A:CC:3F:58:52:FE:0E:63:49
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 0184
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/01F8DC1669EA11EAA9BABC16F8AEA228.roa
Signing time: Thu 19 Mar 2020 14:00:37 +0000
ROA not before: Thu 19 Mar 2020 14:00:30 +0000
ROA not after: Tue 19 Mar 2030 14:00:30 +0000
asID: 327687
IP address blocks: 196.43.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Mar 19 14:00:30 2020 GMT
Not After : Mar 19 14:00:30 2030 GMT
Subject: CN=5e737b04-77ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:93:2e:ff:16:f2:17:a8:0a:90:2c:83:90:
a0:c1:ff:44:62:0c:a1:77:af:f9:bb:19:d6:31:83:
e6:8a:ad:33:d3:f5:c2:53:9e:e8:49:59:61:8f:12:
17:5a:4e:56:44:29:2a:30:b4:1d:a1:46:2c:1e:7d:
fa:06:41:dc:ae:07:ee:74:53:d6:be:57:df:26:f7:
99:19:bd:c9:e8:c3:11:e0:46:e4:b4:05:91:26:49:
27:5a:81:49:b0:10:f2:8d:fd:52:cd:34:24:a4:77:
86:ae:43:f1:64:fe:39:9f:f3:9d:15:c1:82:6d:21:
2d:c7:46:a6:cb:6f:48:45:a7:0e:39:48:4e:8a:9a:
0c:61:b7:a9:da:59:ab:88:fc:02:23:68:8b:34:83:
95:56:f8:d3:a3:bc:d4:81:ec:0b:3b:9c:c2:59:cb:
13:aa:72:6b:eb:f8:19:c4:57:34:96:06:c8:90:9d:
86:6d:db:13:30:49:8e:9d:df:6b:71:d3:71:8b:3e:
35:db:e6:60:18:06:c9:b7:5e:ef:13:9a:ba:22:33:
bc:45:00:49:0a:23:53:7b:7a:6e:ea:f7:c9:a3:91:
71:81:9c:fc:ce:29:55:19:d4:4f:2b:55:da:09:e9:
17:a1:27:f5:df:cd:03:c9:4f:a9:a1:0b:3e:67:cd:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:41:D0:C8:9C:BF:D5:E2:40:49:4A:CC:3F:58:52:FE:0E:63:49
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/01F8DC1669EA11EAA9BABC16F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.43.132.0/22
Signature Algorithm: sha256WithRSAEncryption
69:f3:9f:1e:20:67:2d:5a:b7:83:dd:19:43:86:2d:fb:14:af:
8f:6f:dd:9f:13:9d:c0:2b:d1:4e:fa:5e:b9:2a:4d:47:b8:81:
cb:58:03:c7:c8:1e:e4:d2:04:95:be:89:ce:fa:af:29:47:0f:
46:5a:e3:3d:21:2c:94:ae:84:37:99:74:43:ee:78:eb:5f:0b:
c2:9d:63:9a:27:9a:0c:99:c9:0b:51:c1:4c:5b:87:a5:8d:09:
9e:32:46:f7:58:86:f4:f8:1b:ca:2e:7a:5c:ef:d3:4a:1b:24:
c7:ce:84:23:71:91:21:96:3e:a2:97:00:f1:64:39:86:53:45:
41:04:ca:e7:23:5f:73:0a:72:06:0e:41:3f:ea:47:c5:95:75:
1a:53:64:30:79:a9:47:af:41:31:fa:60:d0:84:5c:71:96:34:
02:4c:fe:ef:28:e3:3b:3a:2a:1a:ac:06:e6:7e:f9:22:e1:4f:
e3:a9:08:12:51:43:1a:54:9c:99:cb:cb:18:2b:5f:54:0e:97:
1d:09:76:da:1b:2e:62:3a:2e:4e:29:b4:a7:f4:da:3a:8a:59:
ac:4c:80:3c:9a:64:7b:15:5e:a6:6e:de:48:b9:46:b4:32:73:
df:67:8d:76:d1:e4:32:0a:46:33:8a:f5:21:0a:fb:13:b5:f7:
5b:b8:9f:1f
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDAzMTkxNDAwMzBaFw0zMDAzMTkxNDAwMzBaMBgxFjAU
BgNVBAMTDTVlNzM3YjA0LTc3YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC51JMu/xbyF6gKkCyDkKDB/0RiDKF3r/m7GdYxg+aKrTPT9cJTnuhJWWGP
EhdaTlZEKSowtB2hRiweffoGQdyuB+50U9a+V98m95kZvcnowxHgRuS0BZEmSSda
gUmwEPKN/VLNNCSkd4auQ/Fk/jmf850VwYJtIS3HRqbLb0hFpw45SE6Kmgxht6na
WauI/AIjaIs0g5VW+NOjvNSB7As7nMJZyxOqcmvr+BnEVzSWBsiQnYZt2xMwSY6d
32tx03GLPjXb5mAYBsm3Xu8TmroiM7xFAEkKI1N7em7q98mjkXGBnPzOKVUZ1E8r
VdoJ6RehJ/XfzQPJT6mhCz5nzQWlAgMBAAGjggJuMIICajAdBgNVHQ4EFgQUeYtB
0Micv9XiQElKzD9YUv4OY0kwHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4LzAxRjhEQzE2NjlFQTExRUFBOUJBQkMxNkY4QUVBMjI4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsQrhDANBgkqhkiG9w0BAQsFAAOCAQEA
afOfHiBnLVq3g90ZQ4Yt+xSvj2/dnxOdwCvRTvpeuSpNR7iBy1gDx8ge5NIElb6J
zvqvKUcPRlrjPSEslK6EN5l0Q+54618Lwp1jmieaDJnJC1HBTFuHpY0JnjJG91iG
9Pgbyi56XO/TShskx86EI3GRIZY+opcA8WQ5hlNFQQTK5yNfcwpyBg5BP+pHxZV1
GlNkMHmpR69BMfpg0IRccZY0Akz+7yjjOzoqGqwG5n75IuFP46kIElFDGlScmcvL
GCtfVA6XHQl22hsuYjouTim0p/TaOopZrEyAPJpkexVepm7eSLlGtDJz32eNdtHk
MgpGM4r1IQr7E7X3W7ifHw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:51 2024 by rpki-client on console-fra.rpki-client.org