Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/B353146E9CCA11EFA5527350762E951A.roa
File: B353146E9CCA11EFA5527350762E951A.roa (raw, json)
Hash identifier: YpIhrtJj2dseoZxFXCpF4FkzTaR3wt1o8HuPvAxVoMc=
Subject key identifier: 1E:3D:A3:A9:9B:7A:B3:EC:2F:F1:0C:A8:67:82:1E:21:71:9F:E9:75
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 0540
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/B353146E9CCA11EFA5527350762E951A.roa
Signing time: Thu 07 Nov 2024 05:39:48 +0000
ROA not before: Thu 07 Nov 2024 05:39:44 +0000
ROA not after: Thu 28 Nov 2024 05:39:44 +0000
asID: 43260
IP address blocks: 102.36.161.0/24 maxlen: 24
102.36.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Nov 7 05:39:44 2024 GMT
Not After : Nov 28 05:39:44 2024 GMT
Subject: CN=672c52a4-7ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:b5:aa:dc:ad:20:ba:27:09:ed:f2:f4:eb:
26:af:4e:19:3a:15:29:d0:24:b6:44:37:a3:36:2b:
42:a5:13:2c:25:5c:58:d4:b2:e8:4a:c0:9c:25:11:
57:35:08:2b:9d:ae:6c:41:1c:15:d0:be:d6:3a:f4:
92:ba:34:d6:c8:1e:82:ba:3e:72:8c:36:21:3d:1f:
76:27:e0:c0:cd:e9:54:1a:aa:d6:81:2f:f9:ce:fb:
d3:7a:08:a4:64:9c:27:31:ae:e8:a9:fc:88:58:cc:
e8:10:e4:ed:27:43:58:ed:68:b6:43:76:0e:c5:03:
77:ca:e3:48:e0:97:08:77:77:36:32:36:38:ac:ba:
e3:1f:0b:c6:d2:86:df:76:1e:e2:8f:0a:9e:d9:41:
73:56:5c:fd:83:99:6a:80:37:c4:40:42:8f:88:57:
81:67:5f:08:99:2b:4e:bc:eb:18:f6:0d:7d:a8:bf:
fd:48:ff:96:22:ae:c0:a1:e3:96:50:d9:3a:5a:4b:
46:2b:1d:df:26:dd:15:66:6a:2a:03:63:e0:a6:c6:
e6:19:74:fc:63:cb:a4:f3:bd:aa:c3:46:cc:02:ec:
88:87:aa:c1:54:06:30:80:59:cf:69:ca:36:86:07:
79:e9:86:74:3f:b2:cf:e5:58:d6:35:b6:ee:19:82:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:A3:A9:9B:7A:B3:EC:2F:F1:0C:A8:67:82:1E:21:71:9F:E9:75
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/B353146E9CCA11EFA5527350762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.161.0-102.36.162.255
Signature Algorithm: sha256WithRSAEncryption
66:c0:09:f0:98:f6:b3:fc:77:b0:25:00:fa:e3:6d:1c:8a:92:
c1:90:b4:f8:9e:dd:ee:41:e9:e8:99:05:6c:55:f3:39:07:e0:
20:49:a0:b7:36:f1:f0:65:7c:98:25:ce:16:d0:89:93:6a:5e:
b0:43:d9:64:91:fe:74:9a:6f:3f:70:c6:49:ac:a3:a1:6e:94:
cd:5d:3e:b7:66:13:3d:a6:aa:14:ca:35:e5:6c:65:b3:4c:1e:
5e:bd:0d:6b:cd:df:2e:80:e1:68:68:51:07:67:27:85:c9:d7:
4b:ba:6f:26:d1:94:fa:7a:b8:a4:64:ce:2b:82:10:8a:9a:02:
3c:e6:cd:95:c6:40:72:4d:d4:87:f2:d5:c9:9c:3f:fa:82:87:
6d:7a:48:a6:04:65:c8:b9:64:9d:b6:79:14:e1:30:d7:8e:44:
20:43:19:f7:6e:01:d0:90:92:cd:6a:21:5f:ab:aa:e3:c5:23:
c5:67:d2:f0:38:7c:cb:d5:2f:83:30:05:c6:27:0d:c4:a5:59:
66:28:4e:fd:f9:34:13:43:53:7a:2c:14:f9:8b:b2:cb:78:ef:
8d:09:54:fe:4d:f1:a8:47:0c:ff:4e:a3:4b:b2:78:22:c3:82:
2e:87:ad:a2:61:4e:08:e1:fc:18:02:16:fc:81:1e:40:a2:2d:
fc:af:31:49
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkMxOENBRjExMC8GA1UEBRMoNjNFMEJCNkIzNDMzQ0Q1RDcxQTQyQjAxNjlCREIw
MUUyMEU0NTU3RjAeFw0yNDExMDcwNTM5NDRaFw0yNDExMjgwNTM5NDRaMBgxFjAU
BgNVBAMTDTY3MmM1MmE0LTdhZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGmbWq3K0guicJ7fL06yavThk6FSnQJLZEN6M2K0KlEywlXFjUsuhKwJwl
EVc1CCudrmxBHBXQvtY69JK6NNbIHoK6PnKMNiE9H3Yn4MDN6VQaqtaBL/nO+9N6
CKRknCcxruip/IhYzOgQ5O0nQ1jtaLZDdg7FA3fK40jglwh3dzYyNjisuuMfC8bS
ht92HuKPCp7ZQXNWXP2DmWqAN8RAQo+IV4FnXwiZK0686xj2DX2ov/1I/5YirsCh
45ZQ2TpaS0YrHd8m3RVmaioDY+CmxuYZdPxjy6TzvarDRswC7IiHqsFUBjCAWc9p
yjaGB3nphnQ/ss/lWNY1tu4ZgnIdAgMBAAGjggKtMIICqTAdBgNVHQ4EFgQUHj2j
qZt6s+wv8QyoZ4IeIXGf6XUwHwYDVR0jBBgwFoAUY+C7azQzzV1xpCsBab2wHiDk
VX8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4QUVBMjI4L1ktQzdh
elF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQzdhelF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4
QUVBMjI4L0IzNTMxNDZFOUNDQTExRUZBNTUyNzM1MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAGYkoQMEAGYkojANBgkq
hkiG9w0BAQsFAAOCAQEAZsAJ8Jj2s/x3sCUA+uNtHIqSwZC0+J7d7kHp6JkFbFXz
OQfgIEmgtzbx8GV8mCXOFtCJk2pesEPZZJH+dJpvP3DGSayjoW6UzV0+t2YTPaaq
FMo15Wxls0weXr0Na83fLoDhaGhRB2cnhcnXS7pvJtGU+nq4pGTOK4IQipoCPObN
lcZAck3Uh/LVyZw/+oKHbXpIpgRlyLlknbZ5FOEw145EIEMZ924B0JCSzWohX6uq
48UjxWfS8Dh8y9UvgzAFxicNxKVZZihO/fk0E0NTeiwU+Yuyy3jvjQlU/k3xqEcM
/06jS7J4IsOCLoetomFOCOH8GAIW/IEeQKIt/K8xSQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org