Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/688FF63C70EA11EBB58E686CF8AEA228.roa
File: 688FF63C70EA11EBB58E686CF8AEA228.roa (raw, json)
Hash identifier: mnhwlEYLBW14RTC3favyxPOzROufnwHo5mG4Z0mXmcE=
Subject key identifier: 64:44:2D:F5:36:56:55:27:2F:5E:5F:60:A4:CE:60:56:2C:B9:CC:6F
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 06A9
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/688FF63C70EA11EBB58E686CF8AEA228.roa
Signing time: Wed 17 Feb 2021 06:36:05 +0000
ROA not before: Wed 17 Feb 2021 06:35:58 +0000
ROA not after: Fri 26 Sep 2025 06:35:58 +0000
asID: 11845
IP address blocks: 102.220.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705 (0x6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Feb 17 06:35:58 2021 GMT
Not After : Sep 26 06:35:58 2025 GMT
Subject: CN=602cb955-e0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:8f:4f:d4:d6:9b:f0:bb:d0:c1:9a:59:93:
26:bc:d0:48:2b:9c:e4:42:97:ee:d7:8a:3e:be:c8:
8d:34:32:c0:9e:ca:91:ae:26:4a:c7:b9:60:e8:06:
47:91:87:e8:54:82:f7:0a:00:37:aa:78:39:91:c2:
91:0c:47:8f:b4:26:10:82:61:bc:ff:f9:b2:ec:6e:
b7:eb:ee:52:a3:32:33:c3:ce:a1:2c:1a:28:c8:61:
19:a1:1c:54:f4:4f:b1:a0:29:1e:b3:de:a5:a7:bb:
aa:8d:b8:48:7f:b1:a3:96:04:12:04:25:27:c0:96:
b3:d9:6e:92:85:e5:4b:29:88:d2:89:fa:24:15:40:
0c:a2:e0:36:20:ae:a1:c5:79:97:13:39:bc:54:a7:
77:df:42:99:35:74:48:77:ef:e3:38:a8:b7:d2:9a:
d6:9f:10:0b:b2:a1:50:f1:52:f2:37:7c:68:9f:3c:
b2:35:36:48:3b:ed:7c:69:ac:aa:d5:13:6c:fa:0f:
72:80:36:aa:16:41:c8:86:1f:08:99:94:80:ee:80:
b9:be:e1:55:9f:88:86:45:7a:a6:01:e3:71:fb:ab:
74:77:4d:15:06:34:28:7d:64:be:53:38:2a:bb:7f:
4e:f8:84:14:73:17:18:05:4f:8e:01:02:b1:75:93:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:2D:F5:36:56:55:27:2F:5E:5F:60:A4:CE:60:56:2C:B9:CC:6F
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/688FF63C70EA11EBB58E686CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:29:3d:85:bb:ce:c4:60:13:5a:1a:a7:98:81:fd:8f:79:54:
8d:05:a1:62:94:95:a6:dd:f2:73:ce:94:66:fe:c5:cf:d4:f3:
f1:f3:28:31:75:6f:42:2a:98:8d:44:6d:9c:91:b4:34:f8:b0:
86:8e:f1:a0:a9:a8:d8:1c:c8:01:73:30:66:ed:13:c2:3b:d5:
d8:98:13:ad:06:01:7d:5c:da:eb:d5:c1:95:da:84:42:76:86:
7c:69:ee:5b:d9:5e:22:ec:06:d0:ba:86:a6:74:3f:fb:cf:49:
f9:12:60:1f:01:4f:15:90:18:68:86:06:0c:05:17:90:c4:b3:
1b:76:97:ae:cd:45:b6:8a:fd:72:a6:6d:4a:a0:80:2d:3c:0c:
73:39:87:7d:5b:e8:70:6f:68:db:f1:93:40:86:37:b7:55:ee:
05:9b:a0:df:65:28:89:5d:8d:ce:27:28:f5:90:79:39:71:4e:
c7:58:8a:61:25:35:c8:35:70:40:c3:ec:ad:9d:b0:15:2d:cd:
27:e2:70:a2:04:4a:0a:7d:82:c5:1e:52:25:2d:15:b9:7c:df:
66:36:57:eb:0a:18:5f:bf:8b:dc:7d:76:f8:1b:f2:95:88:2d:
2b:21:3e:b9:bb:d5:0a:c6:f5:52:04:d7:79:92:69:3c:ed:85:
45:64:db:8b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yMTAyMTcwNjM1NThaFw0yNTA5MjYwNjM1NThaMBgxFjAU
BgNVBAMTDTYwMmNiOTU1LWUwZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEyI9P1Nab8LvQwZpZkya80EgrnORCl+7Xij6+yI00MsCeypGuJkrHuWDo
BkeRh+hUgvcKADeqeDmRwpEMR4+0JhCCYbz/+bLsbrfr7lKjMjPDzqEsGijIYRmh
HFT0T7GgKR6z3qWnu6qNuEh/saOWBBIEJSfAlrPZbpKF5UspiNKJ+iQVQAyi4DYg
rqHFeZcTObxUp3ffQpk1dEh37+M4qLfSmtafEAuyoVDxUvI3fGifPLI1Nkg77Xxp
rKrVE2z6D3KANqoWQciGHwiZlIDugLm+4VWfiIZFeqYB43H7q3R3TRUGNCh9ZL5T
OCq7f074hBRzFxgFT44BArF1k2FjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZEQt
9TZWVScvXl9gpM5gViy5zG8wHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4
QUVBMjI4LzY4OEZGNjNDNzBFQTExRUJCNThFNjg2Q0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3NAwDQYJKoZIhvcNAQEL
BQADggEBALIpPYW7zsRgE1oap5iB/Y95VI0FoWKUlabd8nPOlGb+xc/U8/HzKDF1
b0IqmI1EbZyRtDT4sIaO8aCpqNgcyAFzMGbtE8I71diYE60GAX1c2uvVwZXahEJ2
hnxp7lvZXiLsBtC6hqZ0P/vPSfkSYB8BTxWQGGiGBgwFF5DEsxt2l67NRbaK/XKm
bUqggC08DHM5h31b6HBvaNvxk0CGN7dV7gWboN9lKIldjc4nKPWQeTlxTsdYimEl
Ncg1cEDD7K2dsBUtzSficKIESgp9gsUeUiUtFbl832Y2V+sKGF+/i9x9dvgb8pWI
LSshPrm71QrG9VIE13mSaTzthUVk24s=
-----END CERTIFICATE-----
Generated at Mon May 6 01:48:14 2024 by rpki-client on console-fra.rpki-client.org