Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/7A4D6530E0D411EB863D3F12F8AEA228.roa
File: 7A4D6530E0D411EB863D3F12F8AEA228.roa (raw, json)
Hash identifier: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=
Subject key identifier: 42:5E:D4:1B:D4:BD:8E:37:B6:EF:07:91:06:F9:24:C9:D4:87:78:F1
Certificate issuer: /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial: 97
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/7A4D6530E0D411EB863D3F12F8AEA228.roa
Signing time: Fri 09 Jul 2021 16:41:15 +0000
ROA not before: Fri 09 Jul 2021 16:41:10 +0000
ROA not after: Wed 31 Dec 2031 16:41:10 +0000
asID: 37025
IP address blocks: 102.219.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Validity
Not Before: Jul 9 16:41:10 2021 GMT
Not After : Dec 31 16:41:10 2031 GMT
Subject: CN=60e87c2b-30ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:10:3b:2d:89:40:e0:db:70:50:13:ed:ba:
0f:d8:fc:49:d7:6e:5f:d3:ba:0b:4d:f0:e6:b4:2f:
4d:35:b4:3e:49:1f:74:97:77:f3:02:3c:b5:15:8a:
2f:da:ea:14:1b:38:f8:52:07:25:d0:29:ee:85:7c:
19:7c:06:3c:2d:98:1c:4f:a1:1d:07:43:ad:ce:d4:
b9:7e:1a:5f:3f:16:87:3e:bf:23:21:67:36:7b:0f:
11:09:ba:d9:1b:08:90:69:26:2c:a6:b9:eb:c3:40:
2f:09:e2:34:92:f2:68:d0:e9:2d:7d:82:6e:08:ed:
78:54:8c:4f:74:e5:fb:23:f1:4e:a0:2a:e3:62:08:
05:cd:62:71:e3:37:8d:f0:8b:f1:41:ae:bd:21:17:
53:c1:23:db:ce:80:4d:f9:53:f6:8d:38:83:ff:06:
62:8e:4b:a3:49:a0:a7:af:ef:ef:5f:b6:e4:96:68:
ee:33:08:a8:61:03:b1:81:5b:76:23:e5:6c:46:ff:
2d:00:39:39:a3:9c:c9:5e:2d:9b:5e:85:99:99:02:
00:30:81:d8:e8:34:6e:9c:22:ca:18:59:73:b2:94:
5d:3a:76:a4:2d:76:42:16:87:4f:6d:17:1b:55:33:
0f:57:4e:48:84:14:c5:d3:94:a0:f1:38:f0:5d:42:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5E:D4:1B:D4:BD:8E:37:B6:EF:07:91:06:F9:24:C9:D4:87:78:F1
X509v3 Authority Key Identifier:
keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/7A4D6530E0D411EB863D3F12F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.195.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9a:cd:9e:8f:ae:26:1f:a9:fc:5d:97:64:00:5c:c1:26:48:
cb:a7:2a:52:43:78:96:2a:00:a9:29:f0:21:c1:23:84:40:36:
26:02:70:2f:30:f5:cb:03:cc:c8:be:c7:65:d3:a1:6a:c8:b4:
5c:2b:1a:5a:6f:41:9b:45:89:c5:9c:a0:f2:5c:6a:74:78:b6:
9f:ed:63:06:41:62:c8:cc:9e:c2:0f:d4:44:e5:fa:2b:63:b8:
fb:e8:3a:8f:03:a3:e8:b4:55:4a:5e:58:f5:15:51:01:a6:91:
c2:c3:da:eb:4a:1c:0f:d6:fc:2b:22:66:75:74:72:42:6e:14:
1b:c7:d8:ad:39:df:5f:08:10:b1:ee:96:72:49:be:fb:28:52:
4f:fb:c0:e7:06:f7:6d:45:d3:d7:31:9f:83:4e:1d:34:2a:0b:
7b:4b:c3:d7:06:54:39:dd:57:e1:bf:f5:cf:6b:1d:5d:be:ef:
ec:8e:fb:42:35:03:a3:23:e6:da:e0:fb:6f:c7:2f:a4:85:23:
58:26:08:a4:c0:2a:b9:01:a5:1b:f6:be:2c:6b:ec:c7:49:57:
fa:1f:49:a8:ca:30:fc:74:ae:83:92:ed:22:b0:05:67:10:d8:
c1:27:b6:72:4a:1c:6a:b7:59:88:5b:ff:41:eb:23:03:f4:38:
9f:b8:5d:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzJDRkVBRjExMC8GA1UEBRMoODAxNzY0NzAwNUI5MTkxNDIwQzk5MUIxQUUwNzk4
QjVBQ0ExNEQwQzAeFw0yMTA3MDkxNjQxMTBaFw0zMTEyMzExNjQxMTBaMBgxFjAU
BgNVBAMTDTYwZTg3YzJiLTMwYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+VBA7LYlA4NtwUBPtug/Y/EnXbl/TugtN8Oa0L001tD5JH3SXd/MCPLUV
ii/a6hQbOPhSByXQKe6FfBl8BjwtmBxPoR0HQ63O1Ll+Gl8/Foc+vyMhZzZ7DxEJ
utkbCJBpJiymuevDQC8J4jSS8mjQ6S19gm4I7XhUjE905fsj8U6gKuNiCAXNYnHj
N43wi/FBrr0hF1PBI9vOgE35U/aNOIP/BmKOS6NJoKev7+9ftuSWaO4zCKhhA7GB
W3Yj5WxG/y0AOTmjnMleLZtehZmZAgAwgdjoNG6cIsoYWXOylF06dqQtdkIWh09t
FxtVMw9XTkiEFMXTlKDxOPBdQk4bAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQl7U
G9S9jje27weRBvkkydSHePEwHwYDVR0jBBgwFoAUgBdkcAW5GRQgyZGxrgeYtayh
TQwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyQ0ZFLzUwMEIyOTkwODI4NTExRUI4MEM3RUY3OUY4QUVBMjI4L2dCZGtj
QVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dCZGtjQVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjMyQ0ZFLzUwMEIyOTkwODI4NTExRUI4MEM3RUY3OUY4
QUVBMjI4LzdBNEQ2NTMwRTBENDExRUI4NjNEM0YxMkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm28MwDQYJKoZIhvcNAQEL
BQADggEBACWazZ6PriYfqfxdl2QAXMEmSMunKlJDeJYqAKkp8CHBI4RANiYCcC8w
9csDzMi+x2XToWrItFwrGlpvQZtFicWcoPJcanR4tp/tYwZBYsjMnsIP1ETl+itj
uPvoOo8Do+i0VUpeWPUVUQGmkcLD2utKHA/W/CsiZnV0ckJuFBvH2K05318IELHu
lnJJvvsoUk/7wOcG921F09cxn4NOHTQqC3tLw9cGVDndV+G/9c9rHV2+7+yO+0I1
A6Mj5trg+2/HL6SFI1gmCKTAKrkBpRv2vixr7MdJV/ofSajKMPx0roOS7SKwBWcQ
2MEntnJKHGq3WYhb/0HrIwP0OJ+4XW4=
-----END CERTIFICATE-----
Generated at Sat May 18 04:03:35 2024 by rpki-client on console-ams.rpki-client.org