Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/32F7F2FC9EAA11EB97EBF441F8AEA228.roa
File: 32F7F2FC9EAA11EB97EBF441F8AEA228.roa (raw, json)
Hash identifier: TOFg8z8/QllUB8rjCBN0BMuQMzI8dKWFP0PwxmRO42c=
Subject key identifier: 85:AF:9E:3B:DD:C9:ED:BB:CB:2D:30:A8:FD:46:95:A2:35:C3:91:52
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 0C
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/32F7F2FC9EAA11EB97EBF441F8AEA228.roa
Signing time: Fri 16 Apr 2021 11:52:20 +0000
ROA not before: Fri 16 Apr 2021 11:52:16 +0000
ROA not after: Wed 16 Apr 2031 11:52:16 +0000
asID: 37053
IP address blocks: 196.1.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Apr 16 11:52:16 2021 GMT
Not After : Apr 16 11:52:16 2031 GMT
Subject: CN=60797a74-0a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:16:5a:40:fb:e9:d5:6c:93:56:36:2b:fd:
18:bd:0d:a6:e0:e5:0a:f3:79:1e:58:f0:05:8d:87:
73:fd:a7:12:60:42:6f:d1:5c:d1:45:55:d7:d4:7c:
31:fa:aa:4d:c2:4c:74:d1:4c:19:85:7e:a5:42:59:
24:53:95:a5:2b:05:ca:77:1b:49:6f:3f:f9:35:5a:
fe:29:9c:48:0b:bf:bc:f3:30:1b:7f:1f:11:8a:6d:
c9:c2:55:45:57:be:16:77:09:2c:73:40:97:8f:c6:
7a:0c:dd:2a:61:36:3a:f8:53:16:7d:92:52:13:cf:
2e:69:73:f2:57:ed:61:07:26:91:0d:b5:79:bf:23:
a2:1d:34:b3:06:85:56:fb:fa:1a:0e:29:ec:8b:33:
9f:55:89:cb:1f:b3:2f:f2:ee:23:91:b9:6a:12:74:
bf:a2:30:b2:22:c8:df:99:77:b8:eb:49:c1:50:1d:
9e:f9:ca:0e:5a:33:32:6d:f6:74:d8:66:ff:ae:9b:
29:ae:0a:81:52:a2:98:c2:1b:00:8b:ef:ad:df:b8:
9b:68:20:05:09:02:3c:34:c2:5d:5c:e5:dc:6d:11:
cf:21:63:5e:43:66:a1:9a:38:8d:58:a9:11:6d:c4:
59:aa:1a:dc:22:43:61:3e:87:90:92:73:b0:95:c4:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:9E:3B:DD:C9:ED:BB:CB:2D:30:A8:FD:46:95:A2:35:C3:91:52
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/32F7F2FC9EAA11EB97EBF441F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:41:c2:69:dd:e9:37:70:c9:de:b3:27:3b:d1:ee:28:6d:5d:
5d:fb:2c:3c:e9:b9:13:f9:19:ad:37:eb:8a:15:21:db:b2:67:
4e:33:3e:e5:69:0e:dc:b2:cc:bb:42:86:88:2a:d2:ee:29:26:
b3:bc:2d:bb:7d:2f:b4:ca:c1:f0:09:66:1d:e2:9c:f5:72:78:
5e:5f:f0:6f:03:93:b3:d6:63:2b:52:83:3c:2d:94:c9:e3:c1:
51:ac:44:14:67:6e:ad:15:10:d3:d2:44:ff:2e:fa:69:ca:69:
a5:4a:d9:0d:58:2a:e7:ff:14:53:9a:ba:50:58:e9:46:14:19:
f9:50:17:bc:c7:89:62:4e:a7:7b:ac:1b:18:41:88:e3:02:3a:
a7:19:ad:cd:53:97:17:8a:17:02:7d:28:df:77:9a:b4:88:3e:
12:09:eb:98:b9:ff:16:d4:a8:13:3a:57:40:36:35:e2:2c:ac:
db:34:1e:39:d2:a0:7b:e0:f8:d2:94:de:20:fc:1e:db:1e:4c:
c6:a2:17:00:c4:61:1c:7f:4b:f9:c5:c5:fd:4e:f0:ec:1b:53:
01:9a:15:a5:ff:62:15:46:0a:35:71:bd:26:f5:47:6e:c8:76:
da:76:a2:be:5e:7e:9a:20:94:0c:3d:63:de:d3:57:6e:eb:b8:
fc:68:68:09
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjhBOEFGMTEwLwYDVQQFEyhERjM3NjQ4MERDRjA3QTFCN0FEMTY0REU2NEEzRUEy
MTVGMjQ3NTQxMB4XDTIxMDQxNjExNTIxNloXDTMxMDQxNjExNTIxNlowGDEWMBQG
A1UEAxMNNjA3OTdhNzQtMGE3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCMFlpA++nVbJNWNiv9GL0NpuDlCvN5HljwBY2Hc/2nEmBCb9Fc0UVV19R8
MfqqTcJMdNFMGYV+pUJZJFOVpSsFyncbSW8/+TVa/imcSAu/vPMwG38fEYptycJV
RVe+FncJLHNAl4/GegzdKmE2OvhTFn2SUhPPLmlz8lftYQcmkQ21eb8joh00swaF
Vvv6Gg4p7Iszn1WJyx+zL/LuI5G5ahJ0v6IwsiLI35l3uOtJwVAdnvnKDlozMm32
dNhm/66bKa4KgVKimMIbAIvvrd+4m2ggBQkCPDTCXVzl3G0RzyFjXkNmoZo4jVip
EW3EWaoa3CJDYT6HkJJzsJXEcY8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSFr547
3cntu8stMKj9RpWiNcORUjAfBgNVHSMEGDAWgBTfN2SA3PB6G3rRZN5ko+ohXyR1
QTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkI4QTgvQjVDOTRFNEM5QzI1MTFFQkFENzhGRjUzRjhBRUEyMjgvM3pka2dO
endlaHQ2MFdUZVpLUHFJVjhrZFVFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvM3pka2dOendlaHQ2MFdUZVpLUHFJVjhrZFVFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkI4QTgvQjVDOTRFNEM5QzI1MTFFQkFENzhGRjUzRjhB
RUEyMjgvMzJGN0YyRkM5RUFBMTFFQjk3RUJGNDQxRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMQBgjANBgkqhkiG9w0BAQsF
AAOCAQEAW0HCad3pN3DJ3rMnO9HuKG1dXfssPOm5E/kZrTfrihUh27JnTjM+5WkO
3LLMu0KGiCrS7ikms7wtu30vtMrB8AlmHeKc9XJ4Xl/wbwOTs9ZjK1KDPC2UyePB
UaxEFGdurRUQ09JE/y76acpppUrZDVgq5/8UU5q6UFjpRhQZ+VAXvMeJYk6ne6wb
GEGI4wI6pxmtzVOXF4oXAn0o33eatIg+EgnrmLn/FtSoEzpXQDY14iys2zQeOdKg
e+D40pTeIPwe2x5MxqIXAMRhHH9L+cXF/U7w7BtTAZoVpf9iFUYKNXG9JvVHbsh2
2naivl5+miCUDD1j3tNXbuu4/GhoCQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:05:20 2024 by rpki-client on console-fra.rpki-client.org