Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/ECC95BD248EB11EF9E6AB0A8762E951A.roa
File: ECC95BD248EB11EF9E6AB0A8762E951A.roa (raw, json)
Hash identifier: oLh1HXERxgDkZE8Kx15N1v8Oh2muKtEvQ5qn9c925Ag=
Subject key identifier: F5:C2:F3:E7:4A:53:69:B7:27:D8:8C:6F:EF:9F:B4:2E:E5:39:FD:81
Certificate issuer: /CN=F364EAB0AF/serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
Certificate serial: 02
Authority key identifier: D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/ECC95BD248EB11EF9E6AB0A8762E951A.roa
Signing time: Tue 23 Jul 2024 12:06:00 +0000
ROA not before: Tue 23 Jul 2024 12:05:57 +0000
ROA not after: Sat 31 Dec 2044 12:05:57 +0000
asID: 16509
IP address blocks: 102.208.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl
rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Oct 2024 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364EAB0AF/serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
Validity
Not Before: Jul 23 12:05:57 2024 GMT
Not After : Dec 31 12:05:57 2044 GMT
Subject: CN=669f9ca8-ceed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:a7:fe:1b:f4:c8:e6:1a:73:41:e0:7a:fc:
ee:08:54:a1:88:21:5c:7d:39:61:4a:66:bd:a0:c7:
14:80:b4:35:71:ff:08:d3:9f:7c:1b:34:ad:55:9a:
de:ef:ae:c0:38:64:37:e6:a7:35:00:2f:fd:9c:16:
dd:71:71:f2:ec:aa:9f:5e:c5:89:71:f7:1a:a0:6f:
a9:be:73:5e:b1:41:3d:0c:9c:ee:ea:9e:4c:a7:eb:
b6:85:8f:9a:99:0b:5a:d9:71:6c:cc:90:17:fc:a4:
48:a6:01:0a:a7:b9:41:5a:78:01:e4:8f:50:40:e5:
4c:20:02:c7:ec:ca:7c:de:52:a9:ec:d1:a4:ae:62:
d3:a0:93:77:f0:66:3b:32:96:79:ff:57:56:6c:d7:
44:5c:12:5f:bb:58:60:cd:6b:f0:97:0b:98:96:8e:
fe:bc:7d:b9:56:10:f3:a6:ce:15:fe:b5:da:06:94:
fc:cd:8a:64:b0:db:c1:b1:d1:99:92:6c:78:53:13:
3f:99:c8:4c:8d:5e:61:dd:9b:fd:46:5a:99:96:35:
1b:3f:1c:93:84:75:96:e6:01:c6:67:b8:cc:34:b1:
ca:01:06:ac:ad:51:a7:35:e7:14:25:b3:ae:95:4f:
1a:e5:c4:ea:f0:24:c8:03:c9:68:64:ef:e8:b4:7f:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:F3:E7:4A:53:69:B7:27:D8:8C:6F:EF:9F:B4:2E:E5:39:FD:81
X509v3 Authority Key Identifier:
keyid:D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/ECC95BD248EB11EF9E6AB0A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.248.0/22
Signature Algorithm: sha256WithRSAEncryption
15:f7:9b:c8:4f:b0:d2:55:72:cc:a5:94:2e:fc:9f:dc:01:a1:
16:cd:ee:a7:3e:e3:1f:26:b3:f5:d2:f0:75:e3:0d:75:48:2a:
38:e1:37:aa:42:c4:ad:22:c2:e0:41:3b:9e:04:3f:f5:4f:8c:
3c:75:52:a7:06:41:75:a4:4d:cb:46:ec:0b:d2:05:bf:b8:c9:
60:fd:0d:40:c0:ef:db:7c:cf:01:7f:0e:aa:ce:98:83:ea:21:
ac:0c:45:40:08:f4:e4:70:07:94:ae:16:13:2d:dc:fe:d5:91:
45:98:4e:97:0c:a6:49:02:4d:eb:40:36:cd:88:58:e1:db:f6:
29:42:b3:11:49:e2:c0:21:93:6b:1b:0a:40:78:0d:02:1e:8e:
75:cd:6c:97:a4:47:07:4d:ae:2c:5a:6a:82:9f:1a:99:ed:6f:
a6:11:d9:bb:8d:12:73:3a:a8:fc:63:30:81:7f:49:c4:9c:4c:
3d:3d:bc:48:09:b4:77:68:2c:47:17:d1:49:e8:ef:00:04:db:
0e:81:80:c5:df:19:92:0d:f8:15:4e:e2:7e:bc:a2:d9:32:84:
9e:ad:2d:a6:e7:a4:1d:19:09:b6:af:da:c9:8e:43:f4:0b:72:
01:3a:ea:74:07:75:9c:71:2e:cc:a8:3e:b2:22:01:19:d8:0d:
f2:06:c0:a3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
RUFCMEFGMTEwLwYDVQQFEyhENDNBMkE1NEIyQ0QzNjc2NDJDNzY4NjY4QTEzODQ2
Qjg5RUM4REVGMB4XDTI0MDcyMzEyMDU1N1oXDTQ0MTIzMTEyMDU1N1owGDEWMBQG
A1UEAxMNNjY5ZjljYTgtY2VlZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKW9p/4b9MjmGnNB4Hr87ghUoYghXH05YUpmvaDHFIC0NXH/CNOffBs0rVWa
3u+uwDhkN+anNQAv/ZwW3XFx8uyqn17FiXH3GqBvqb5zXrFBPQyc7uqeTKfrtoWP
mpkLWtlxbMyQF/ykSKYBCqe5QVp4AeSPUEDlTCACx+zKfN5SqezRpK5i06CTd/Bm
OzKWef9XVmzXRFwSX7tYYM1r8JcLmJaO/rx9uVYQ86bOFf612gaU/M2KZLDbwbHR
mZJseFMTP5nITI1eYd2b/UZamZY1Gz8ck4R1luYBxme4zDSxygEGrK1RpzXnFCWz
rpVPGuXE6vAkyAPJaGTv6LR/3XUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBT1wvPn
SlNptyfYjG/vn7Qu5Tn9gTAfBgNVHSMEGDAWgBTUOipUss02dkLHaGaKE4RrieyN
7zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NEVBQjAvM0NBQjQwRjQ0OEVBMTFFRjg4NURFRTlFNzYyRTk1MUEvMURvcVZM
TE5OblpDeDJobWloT0VhNG5zamU4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMURvcVZMTE5OblpDeDJobWloT0VhNG5zamU4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEVBQjAvM0NBQjQwRjQ0OEVBMTFFRjg4NURFRTlFNzYy
RTk1MUEvRUNDOTVCRDI0OEVCMTFFRjlFNkFCMEE4NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbQ+DANBgkqhkiG9w0BAQsF
AAOCAQEAFfebyE+w0lVyzKWULvyf3AGhFs3upz7jHyaz9dLwdeMNdUgqOOE3qkLE
rSLC4EE7ngQ/9U+MPHVSpwZBdaRNy0bsC9IFv7jJYP0NQMDv23zPAX8Oqs6Yg+oh
rAxFQAj05HAHlK4WEy3c/tWRRZhOlwymSQJN60A2zYhY4dv2KUKzEUniwCGTaxsK
QHgNAh6Odc1sl6RHB02uLFpqgp8ame1vphHZu40Sczqo/GMwgX9JxJxMPT28SAm0
d2gsRxfRSejvAATbDoGAxd8Zkg34FU7ifryi2TKEnq0tpuekHRkJtq/ayY5D9Aty
ATrqdAd1nHEuzKg+siIBGdgN8gbAow==
-----END CERTIFICATE-----
Generated at Thu Oct 17 04:15:49 2024 by rpki-client on console-ams.rpki-client.org