Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/04F6FEFE55CC11ED9C17B393F1222468.roa
File: 04F6FEFE55CC11ED9C17B393F1222468.roa (raw, json)
Hash identifier: JFxqQtwYQ6GCSD4A94ECbukEigF4S2ClwmoBMIrahsI=
Subject key identifier: A5:04:8E:CE:F1:74:AA:4E:FA:B2:D8:27:34:CC:B0:44:EA:18:57:18
Certificate issuer: /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial: 04
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/04F6FEFE55CC11ED9C17B393F1222468.roa
Signing time: Thu 27 Oct 2022 07:50:26 +0000
ROA not before: Thu 27 Oct 2022 07:50:23 +0000
ROA not after: Sun 26 Oct 2025 07:50:23 +0000
asID: 328785
IP address blocks: 102.215.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Validity
Not Before: Oct 27 07:50:23 2022 GMT
Not After : Oct 26 07:50:23 2025 GMT
Subject: CN=635a3842-091c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:3c:0b:7a:d6:d7:c3:99:2b:ba:08:a3:54:
e3:71:1d:ca:4b:19:3e:25:0d:4c:ab:d3:ac:12:a3:
bb:d0:c1:e1:81:35:87:7a:e9:26:aa:1b:8a:aa:e9:
75:7f:14:37:e3:e1:79:0c:bb:69:5e:01:1f:b8:fc:
78:fc:5d:8e:0a:98:5d:2f:f3:af:c0:9c:fb:b6:65:
56:0f:c4:8c:61:1a:0b:ce:ec:9c:d5:e0:b8:c9:41:
ba:1d:c1:36:3c:ad:52:22:b8:33:a6:16:3d:1b:ae:
e2:4b:e8:4b:47:08:dc:8b:22:09:e5:57:c2:e1:6f:
ea:f2:96:9e:71:33:84:7f:d7:4e:1a:fc:20:44:18:
cb:40:7c:39:ad:01:21:ea:28:ec:e1:cf:be:35:f8:
6c:a7:8a:9e:c4:b2:ad:81:e4:c9:d5:f6:c6:d5:e2:
5c:4a:7c:cb:06:7d:f0:6c:ab:ee:0e:34:a4:21:b8:
17:ca:af:66:e5:61:d2:cf:2c:96:75:d9:66:4a:65:
ac:45:b4:d7:db:a8:99:fe:c7:f9:c1:cb:ec:19:13:
2f:14:10:0d:68:50:cd:4e:3f:37:42:e1:a0:e6:88:
01:d4:03:3a:c6:94:f2:46:64:2d:70:18:88:7e:6a:
6d:3f:14:e5:fa:3a:cd:37:95:cb:a4:c4:b2:dc:c7:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:8E:CE:F1:74:AA:4E:FA:B2:D8:27:34:CC:B0:44:EA:18:57:18
X509v3 Authority Key Identifier:
keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/04F6FEFE55CC11ED9C17B393F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.128.0/22
Signature Algorithm: sha256WithRSAEncryption
41:70:46:7a:68:e6:6b:c4:bb:bb:fe:e6:2e:ce:01:2d:18:ed:
99:36:cf:01:ca:68:77:36:b7:cc:6b:5b:c8:34:b5:52:5f:90:
8c:d3:32:b1:06:3a:68:58:61:79:03:c8:4e:e4:53:54:7e:34:
10:5d:71:af:24:87:7d:d2:0a:ea:3e:83:e1:65:d5:c9:ad:4c:
ad:d6:fb:7c:ea:0f:38:36:9a:7e:07:be:f0:45:29:db:d8:ac:
13:b8:71:9f:81:9f:ee:cd:9d:f6:f0:bd:d2:40:43:bd:ab:e2:
eb:9b:2e:f4:7f:2c:84:60:cc:c6:33:ee:73:70:3c:9a:13:1b:
13:11:c0:91:bb:f7:19:ae:16:9c:88:56:0d:ba:f7:2d:59:71:
d5:89:5f:d4:f0:55:fe:0d:1c:85:18:00:25:78:db:5e:84:d7:
15:8b:81:87:dc:50:6a:e7:5a:76:df:10:25:d7:c1:ca:29:1b:
3c:5b:bb:3a:4c:bf:47:29:43:0c:7d:89:71:d7:d6:9c:f1:1b:
fc:be:db:5b:c3:ae:df:65:51:92:5a:96:d1:be:71:18:32:ee:
55:b7:85:c0:7c:3b:8a:47:00:dc:74:b3:41:b8:d9:86:95:93:
91:a7:fb:a3:1a:e3:f0:95:6f:c0:7a:78:c4:e1:eb:e7:99:96:
a3:57:0e:e0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY0
NTVGQkFGMTEwLwYDVQQFEyg0NDYyQTJFM0QxNTM2Njg0QTZBRDIzMjgwQ0ZEQTE4
NTg1QkE0NkU4MB4XDTIyMTAyNzA3NTAyM1oXDTI1MTAyNjA3NTAyM1owGDEWMBQG
A1UEAwwNNjM1YTM4NDItMDkxYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMOxPAt61tfDmSu6CKNU43EdyksZPiUNTKvTrBKju9DB4YE1h3rpJqobiqrp
dX8UN+PheQy7aV4BH7j8ePxdjgqYXS/zr8Cc+7ZlVg/EjGEaC87snNXguMlBuh3B
NjytUiK4M6YWPRuu4kvoS0cI3IsiCeVXwuFv6vKWnnEzhH/XThr8IEQYy0B8Oa0B
Ieoo7OHPvjX4bKeKnsSyrYHkydX2xtXiXEp8ywZ98Gyr7g40pCG4F8qvZuVh0s8s
lnXZZkplrEW019uomf7H+cHL7BkTLxQQDWhQzU4/N0LhoOaIAdQDOsaU8kZkLXAY
iH5qbT8U5fo6zTeVy6TEstzHdFUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSlBI7O
8XSqTvqy2Cc0zLBE6hhXGDAfBgNVHSMEGDAWgBREYqLj0VNmhKatIygM/aGFhbpG
6DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDU1RkIvMTU3RDU0RjQ1NUNCMTFFRDk3REY5NjkxRjEyMjI0NjgvUkdLaTQ5
RlRab1NtclNNb0RQMmhoWVc2UnVnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUkdLaTQ5RlRab1NtclNNb0RQMmhoWVc2UnVnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU1RkIvMTU3RDU0RjQ1NUNCMTFFRDk3REY5NjkxRjEy
MjI0NjgvMDRGNkZFRkU1NUNDMTFFRDlDMTdCMzkzRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbXgDANBgkqhkiG9w0BAQsF
AAOCAQEAQXBGemjma8S7u/7mLs4BLRjtmTbPAcpodza3zGtbyDS1Ul+QjNMysQY6
aFhheQPITuRTVH40EF1xrySHfdIK6j6D4WXVya1Mrdb7fOoPODaafge+8EUp29is
E7hxn4Gf7s2d9vC90kBDvavi65su9H8shGDMxjPuc3A8mhMbExHAkbv3Ga4WnIhW
Dbr3LVlx1Ylf1PBV/g0chRgAJXjbXoTXFYuBh9xQaudadt8QJdfByikbPFu7Oky/
RylDDH2JcdfWnPEb/L7bW8Ou32VRklqW0b5xGDLuVbeFwHw7ikcA3HSzQbjZhpWT
kaf7oxrj8JVvwHp4xOHr55mWo1cO4A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org