Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/2249F87EF84211EAB396E72CF8AEA228.roa
File: 2249F87EF84211EAB396E72CF8AEA228.roa (raw, json)
Hash identifier: AyhAhiQmtR1TRS4jNGsG2xxhvnTuBOgMBWlRurs+to8=
Subject key identifier: BA:A6:0A:F1:AE:D8:FF:66:61:35:27:92:9E:7F:A0:1E:AC:DA:F0:4A
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 02AC
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/2249F87EF84211EAB396E72CF8AEA228.roa
Signing time: Wed 16 Sep 2020 17:29:12 +0000
ROA not before: Wed 16 Sep 2020 17:29:08 +0000
ROA not after: Mon 16 Sep 2030 17:29:08 +0000
asID: 327687
IP address blocks: 196.43.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Sep 16 17:29:08 2020 GMT
Not After : Sep 16 17:29:08 2030 GMT
Subject: CN=5f624b68-538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:0e:d9:67:dc:46:84:3a:f7:92:ba:1a:c2:
0c:70:46:29:08:49:6f:8d:03:6c:2b:64:83:5e:d6:
59:ee:54:ed:1c:a3:f9:cc:80:a8:dd:e9:fc:0e:9c:
45:65:c9:55:9e:f5:9b:52:83:2c:1b:5f:09:8b:e6:
7c:df:db:8a:55:a3:56:63:35:9b:a8:96:a8:13:a0:
c7:77:36:2e:51:b3:6a:23:19:0e:30:ed:21:c1:36:
37:46:a5:08:a6:56:24:54:ea:79:86:82:fd:69:f3:
25:84:61:5a:dc:50:61:ad:2f:8e:ad:23:33:37:2b:
49:a7:e4:e8:73:40:0c:ec:e0:11:87:70:04:26:45:
01:a5:a4:a0:41:fd:16:ab:fd:0b:cc:3d:2b:7f:47:
11:ae:bd:47:4f:99:f1:6d:d8:22:f3:e4:f9:45:f1:
11:3c:45:3d:12:63:24:b3:d0:16:39:53:10:e6:a5:
bd:d5:97:ef:be:c5:9a:73:8c:c5:ce:e0:22:bf:57:
f4:8d:2a:c9:b9:21:e9:39:32:1f:16:67:98:a6:c4:
a1:0a:f8:14:7a:35:e1:70:df:98:c8:0c:c2:7c:20:
fb:bd:48:e8:26:25:cc:56:13:63:5b:49:2b:41:a7:
c8:9e:dd:e3:11:9b:5b:82:d5:ce:a7:e2:d0:e8:3f:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:0A:F1:AE:D8:FF:66:61:35:27:92:9E:7F:A0:1E:AC:DA:F0:4A
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/2249F87EF84211EAB396E72CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:88:e1:94:30:1f:d6:df:bf:0f:27:e2:e4:21:16:69:57:58:
d1:15:10:fe:d9:d8:1f:74:09:89:5d:a5:58:0e:e0:56:06:c8:
d0:1d:23:2f:e8:38:07:4e:0b:82:ba:88:ea:39:13:68:cd:80:
e9:1c:90:46:5d:51:a1:f2:d9:4b:54:d5:fd:85:fc:31:be:1d:
f8:15:7e:c1:25:d1:c5:45:6e:36:d9:c4:b8:d5:82:5a:b4:23:
1c:dc:ff:76:f9:2e:89:01:b6:3d:7a:4f:fb:75:9a:f3:7a:16:
e9:f8:3d:05:15:d2:c7:dd:75:ef:57:35:db:0d:c7:ae:b9:2f:
38:8a:60:e0:57:8f:cd:cb:3d:e3:fd:e3:94:94:3b:92:70:5c:
b3:8c:e3:4d:ae:04:8a:59:3f:8d:1a:c3:17:e2:99:fc:b7:ac:
75:2b:da:9c:81:ff:0c:71:1a:44:61:00:31:76:92:2c:0e:48:
42:b8:09:24:13:cf:22:50:97:f5:64:b5:fb:e5:a5:0d:e3:10:
0a:db:b7:f2:a5:ef:4b:ae:9c:3e:be:97:c3:20:3e:59:39:3f:
65:66:b1:de:50:ae:e6:93:75:3c:73:10:2f:2b:f1:6d:f3:90:
d8:73:82:4f:ab:3d:62:86:3c:29:73:9e:cc:d4:d2:a4:54:46:
f9:62:55:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDA5MTYxNzI5MDhaFw0zMDA5MTYxNzI5MDhaMBgxFjAU
BgNVBAMTDTVmNjI0YjY4LTUzOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkww7ZZ9xGhDr3kroawgxwRikISW+NA2wrZINe1lnuVO0co/nMgKjd6fwO
nEVlyVWe9ZtSgywbXwmL5nzf24pVo1ZjNZuolqgToMd3Ni5Rs2ojGQ4w7SHBNjdG
pQimViRU6nmGgv1p8yWEYVrcUGGtL46tIzM3K0mn5OhzQAzs4BGHcAQmRQGlpKBB
/Rar/QvMPSt/RxGuvUdPmfFt2CLz5PlF8RE8RT0SYySz0BY5UxDmpb3Vl+++xZpz
jMXO4CK/V/SNKsm5Iek5Mh8WZ5imxKEK+BR6NeFw35jIDMJ8IPu9SOgmJcxWE2Nb
SStBp8ie3eMRm1uC1c6n4tDoP6+dAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUuqYK
8a7Y/2ZhNSeSnn+gHqza8EowHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4LzIyNDlGODdFRjg0MjExRUFCMzk2RTcyQ0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEK6YwDQYJKoZIhvcNAQEL
BQADggEBAKSI4ZQwH9bfvw8n4uQhFmlXWNEVEP7Z2B90CYldpVgO4FYGyNAdIy/o
OAdOC4K6iOo5E2jNgOkckEZdUaHy2UtU1f2F/DG+HfgVfsEl0cVFbjbZxLjVglq0
Ixzc/3b5LokBtj16T/t1mvN6Fun4PQUV0sfdde9XNdsNx665LziKYOBXj83LPeP9
45SUO5JwXLOM402uBIpZP40awxfimfy3rHUr2pyB/wxxGkRhADF2kiwOSEK4CSQT
zyJQl/VktfvlpQ3jEArbt/Kl70uunD6+l8MgPlk5P2Vmsd5QruaTdTxzEC8r8W3z
kNhzgk+rPWKGPClznszU0qRURvliVQw=
-----END CERTIFICATE-----
Generated at Sun May 19 01:46:45 2024 by rpki-client on console-fra.rpki-client.org