Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/66456C5EA97711EE82772DA2775412E6.roa
File: 66456C5EA97711EE82772DA2775412E6.roa (raw, json)
Hash identifier: nnv2wC9302+3Jy3xrrAKkIS0rIVeajmhrACjCN0mcQM=
Subject key identifier: 11:C2:08:65:3A:85:58:90:01:B3:57:DB:91:9C:A9:C1:01:2D:FE:73
Certificate issuer: /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial: 0C
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/66456C5EA97711EE82772DA2775412E6.roa
Signing time: Tue 02 Jan 2024 14:01:18 +0000
ROA not before: Wed 03 Jan 2024 14:01:14 +0000
ROA not after: Sat 05 Jan 2030 14:01:14 +0000
asID: 329380
IP address blocks: 102.210.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Validity
Not Before: Jan 3 14:01:14 2024 GMT
Not After : Jan 5 14:01:14 2030 GMT
Subject: CN=6594172e-b7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:c1:e4:f5:2e:3d:82:4e:ca:69:b2:cc:eb:
09:ce:4d:de:eb:7a:2d:cc:08:0c:e3:4c:ae:7d:5b:
59:cf:11:21:26:f3:61:d9:b6:cf:9f:08:f5:ef:a6:
f4:16:21:52:7b:f4:a1:8f:50:0f:f1:7d:4b:1a:99:
d8:e9:64:ad:f3:3a:43:c7:5b:32:21:f4:2e:af:69:
b3:67:01:5c:9e:1c:9f:92:51:aa:04:ca:40:ce:37:
1d:7d:91:ab:2a:be:13:ab:3c:d3:68:81:b7:3f:66:
8e:39:b7:be:86:4a:69:d3:e5:65:07:61:54:44:45:
ab:cc:59:79:fc:b0:a4:28:65:ab:34:14:3b:8f:07:
1e:9e:4f:37:d0:15:4d:d9:1b:6e:75:39:2e:5e:ea:
0d:ad:cf:3b:b7:3f:f8:17:e3:87:de:a2:f7:5a:64:
fc:33:6b:7f:ae:69:1b:a2:6f:b5:ef:fa:54:f5:91:
47:f3:a8:00:21:94:55:0c:cf:9e:1d:49:77:52:a3:
48:a5:0b:01:a7:0d:0e:b0:b5:3e:75:d6:1e:bb:7a:
6f:13:72:9f:d7:48:76:18:eb:12:18:43:f5:7f:af:
d3:9b:75:27:41:53:68:02:d7:11:28:f4:38:ad:80:
0a:52:d1:e4:8d:a8:2b:23:9f:f5:38:9f:89:02:6c:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C2:08:65:3A:85:58:90:01:B3:57:DB:91:9C:A9:C1:01:2D:FE:73
X509v3 Authority Key Identifier:
keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/66456C5EA97711EE82772DA2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:23:d2:4a:55:5a:8b:7f:85:b1:b5:c6:97:f9:a9:c6:93:d6:
70:b3:5d:25:75:81:2d:8f:2f:ea:8e:5a:0f:99:6f:18:b3:bd:
c5:15:f6:7b:6c:3c:5f:fa:71:e2:78:ea:cb:b2:89:0c:15:3d:
37:7c:d9:1e:37:b4:43:be:d1:ee:2e:f5:38:1d:56:d8:60:59:
d8:94:2d:2e:4c:b8:d2:70:23:8e:b7:26:80:69:76:0e:e5:47:
61:36:cf:be:ca:9f:0c:16:9c:73:f1:a1:f6:3b:ff:66:c2:02:
58:a5:fb:e0:c6:36:71:65:5a:59:51:d5:c7:0b:0d:1e:32:14:
7b:09:ff:8d:24:6a:b6:44:30:fa:e0:50:ad:20:52:4f:b2:5d:
aa:6b:f4:48:9a:60:fb:92:84:cb:29:89:52:3d:a8:e2:dd:b1:
3c:6a:32:84:8f:60:a7:dd:a1:17:c3:c6:82:34:7a:74:3c:ef:
f3:f1:9e:28:00:47:74:eb:5b:f8:95:4e:56:84:f2:8c:fd:9d:
30:42:cb:32:ff:11:d2:e1:33:80:2b:29:0c:78:8e:5f:1f:22:
53:5c:a9:3d:63:22:8f:df:74:36:ba:04:e4:1c:00:b8:63:a5:
e9:2d:af:48:97:73:cb:36:95:12:39:ac:e9:eb:22:f8:fc:5d:
d2:a0:c7:f9
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
QTBDOUFGMTEwLwYDVQQFEyg2NjQxRjZCNjYwNTQ0RUQxNTAxQkNDMDk1QUEwN0Y5
Q0IwRkI1QzREMB4XDTI0MDEwMzE0MDExNFoXDTMwMDEwNTE0MDExNFowGDEWMBQG
A1UEAxMNNjU5NDE3MmUtYjdiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWjweT1Lj2CTsppsszrCc5N3ut6LcwIDONMrn1bWc8RISbzYdm2z58I9e+m
9BYhUnv0oY9QD/F9SxqZ2OlkrfM6Q8dbMiH0Lq9ps2cBXJ4cn5JRqgTKQM43HX2R
qyq+E6s802iBtz9mjjm3voZKadPlZQdhVERFq8xZefywpChlqzQUO48HHp5PN9AV
TdkbbnU5Ll7qDa3PO7c/+Bfjh96i91pk/DNrf65pG6Jvte/6VPWRR/OoACGUVQzP
nh1Jd1KjSKULAacNDrC1PnXWHrt6bxNyn9dIdhjrEhhD9X+v05t1J0FTaALXESj0
OK2AClLR5I2oKyOf9TifiQJs55sCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQRwghl
OoVYkAGzV9uRnKnBAS3+czAfBgNVHSMEGDAWgBRmQfa2YFRO0VAbzAlaoH+csPtc
TTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NEEwQzkvQjg5NzE0NEFBNjZBMTFFRThBODJDRThDNzc1NDEyRTYvWmtIMnRt
QlVUdEZRRzh3SldxQl9uTEQ3WEUwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWmtIMnRtQlVUdEZRRzh3SldxQl9uTEQ3WEUwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEEwQzkvQjg5NzE0NEFBNjZBMTFFRThBODJDRThDNzc1
NDEyRTYvNjY0NTZDNUVBOTc3MTFFRTgyNzcyREEyNzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbSRDANBgkqhkiG9w0BAQsF
AAOCAQEAnSPSSlVai3+FsbXGl/mpxpPWcLNdJXWBLY8v6o5aD5lvGLO9xRX2e2w8
X/px4njqy7KJDBU9N3zZHje0Q77R7i71OB1W2GBZ2JQtLky40nAjjrcmgGl2DuVH
YTbPvsqfDBacc/Gh9jv/ZsICWKX74MY2cWVaWVHVxwsNHjIUewn/jSRqtkQw+uBQ
rSBST7Jdqmv0SJpg+5KEyymJUj2o4t2xPGoyhI9gp92hF8PGgjR6dDzv8/GeKABH
dOtb+JVOVoTyjP2dMELLMv8R0uEzgCspDHiOXx8iU1ypPWMij990NroE5BwAuGOl
6S2vSJdzyzaVEjms6esi+Pxd0qDH+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:33 2024 by rpki-client on console-fra.rpki-client.org