Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/D1B2AC1C5EEF11EF93C62C89762E951A.roa
File: D1B2AC1C5EEF11EF93C62C89762E951A.roa (raw, json)
Hash identifier: vRmvo/WQ/7K1j/7ZFTOcVY6BLEhOIM6uf+eDFKl2Nlc=
Subject key identifier: 39:2A:14:C6:C5:9D:7A:B7:B1:AE:75:0B:A2:40:71:09:6B:74:38:89
Certificate issuer: /CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Certificate serial: 04
Authority key identifier: 50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/D1B2AC1C5EEF11EF93C62C89762E951A.roa
Signing time: Tue 20 Aug 2024 12:29:18 +0000
ROA not before: Tue 20 Aug 2024 12:29:13 +0000
ROA not after: Thu 01 Aug 2030 12:29:13 +0000
asID: 328480
IP address blocks: 102.68.120.0/24 maxlen: 24
102.68.121.0/24 maxlen: 24
102.68.122.0/24 maxlen: 24
102.68.123.0/24 maxlen: 24
102.219.168.0/24 maxlen: 24
102.219.169.0/24 maxlen: 24
102.219.170.0/24 maxlen: 24
102.219.171.0/24 maxlen: 24
102.221.232.0/24 maxlen: 24
102.221.233.0/24 maxlen: 24
102.221.234.0/24 maxlen: 24
102.221.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Validity
Not Before: Aug 20 12:29:13 2024 GMT
Not After : Aug 1 12:29:13 2030 GMT
Subject: CN=66c48c1e-3bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:90:6d:c7:3f:9b:2b:cd:87:e8:28:d9:68:
c6:a1:ce:34:d8:88:ef:50:e1:de:16:7f:77:c7:a8:
d7:02:c0:70:b5:6f:9a:3b:66:f5:41:08:3d:c1:f4:
29:16:30:a3:01:8a:10:16:14:9a:1a:a7:8d:56:e7:
47:d5:a0:46:68:03:69:c9:ca:bc:12:c1:fa:29:69:
d5:47:72:9e:fe:4b:e7:fe:12:30:37:27:97:c8:43:
f0:6f:6a:ed:c5:3f:7d:35:08:4f:97:8f:f8:43:cf:
6f:ab:cb:8d:44:23:82:13:86:93:62:1b:0f:74:ad:
b3:c0:4d:d0:51:69:d1:4e:74:11:29:fe:f6:7e:bf:
f5:7d:d0:54:60:d5:26:00:7c:d5:6b:63:cb:37:c4:
e3:fe:49:8a:c3:e7:41:0d:01:9a:86:d1:c9:f4:a0:
91:22:09:63:ff:69:36:2e:ab:1f:17:e6:10:e5:33:
c1:f9:05:44:47:fe:e4:05:63:85:f4:24:78:c3:f1:
99:82:eb:7d:a8:cd:47:32:80:c5:57:23:75:38:1b:
3e:15:d8:3f:11:a8:9e:6c:32:9d:85:5f:5f:1b:39:
ec:54:a0:79:89:04:63:14:41:4b:da:27:43:47:c3:
9d:bf:42:18:14:0d:ab:6f:55:19:44:8f:18:7e:d2:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:14:C6:C5:9D:7A:B7:B1:AE:75:0B:A2:40:71:09:6B:74:38:89
X509v3 Authority Key Identifier:
keyid:50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/D1B2AC1C5EEF11EF93C62C89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.120.0/22
102.219.168.0/22
102.221.232.0/22
Signature Algorithm: sha256WithRSAEncryption
90:87:2a:ef:a8:57:39:25:58:0f:95:03:37:cb:63:43:15:96:
c6:99:b0:ce:ac:73:6d:d9:8e:28:18:82:15:49:bd:41:09:68:
3d:7a:e6:a1:e1:90:38:c9:21:2d:12:5e:9b:67:4b:dc:4a:4d:
c4:b6:34:fa:c4:cd:a2:de:1e:32:63:a3:57:34:ca:b9:29:bb:
d4:9f:29:68:d2:77:b2:cc:a3:fb:71:bc:91:82:3c:a8:cd:08:
83:68:74:c9:04:ab:e8:05:28:ba:8c:d9:5f:4f:bf:98:c5:90:
62:b7:54:e6:7d:44:bf:f0:d6:5e:cc:1a:21:a4:8b:e1:81:d3:
cc:92:b9:31:82:14:e4:94:ab:9c:16:21:11:6d:e9:d0:a6:a8:
bf:a9:3b:25:3b:6a:6e:88:18:98:3b:ed:fb:6b:cd:00:d2:aa:
aa:01:7a:f4:bc:cd:2d:21:1c:e0:8a:95:dc:c4:ea:9b:e9:cf:
3d:c0:38:15:b4:11:d5:08:eb:1f:c3:a3:39:ab:14:25:84:7a:
a3:e7:ec:81:a1:39:3e:f0:7c:14:71:66:fb:da:a3:6a:7d:d8:
8f:97:61:8f:88:28:12:f5:ef:9b:17:f3:27:69:a3:a6:12:f2:
9c:b3:f4:e5:be:d4:04:df:ab:be:e7:99:94:76:b0:08:1c:a7:
01:65:da:ee
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
Mjg5M0FGMTEwLwYDVQQFEyg1MDlBRTgzMkVENkI4OUIxNkE5RThGNzA1OUQzMTAw
MkVCREY1NTE2MB4XDTI0MDgyMDEyMjkxM1oXDTMwMDgwMTEyMjkxM1owGDEWMBQG
A1UEAxMNNjZjNDhjMWUtM2JmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOCzkG3HP5srzYfoKNloxqHONNiI71Dh3hZ/d8eo1wLAcLVvmjtm9UEIPcH0
KRYwowGKEBYUmhqnjVbnR9WgRmgDacnKvBLB+ilp1Udynv5L5/4SMDcnl8hD8G9q
7cU/fTUIT5eP+EPPb6vLjUQjghOGk2IbD3Sts8BN0FFp0U50ESn+9n6/9X3QVGDV
JgB81WtjyzfE4/5JisPnQQ0BmobRyfSgkSIJY/9pNi6rHxfmEOUzwfkFREf+5AVj
hfQkeMPxmYLrfajNRzKAxVcjdTgbPhXYPxGonmwynYVfXxs57FSgeYkEYxRBS9on
Q0fDnb9CGBQNq29VGUSPGH7SnCsCAwEAAaOCArEwggKtMB0GA1UdDgQWBBQ5KhTG
xZ16t7GudQuiQHEJa3Q4iTAfBgNVHSMEGDAWgBRQmugy7WuJsWqej3BZ0xAC699V
FjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTI4OTMvOTc0MkE2NEM1RUVEMTFFRjhDOTM0Mzc5NzYyRTk1MUEvVUpyb011
MXJpYkZxbm85d1dkTVFBdXZmVlJZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVUpyb011MXJpYkZxbm85d1dkTVFBdXZmVlJZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTI4OTMvOTc0MkE2NEM1RUVEMTFFRjhDOTM0Mzc5NzYy
RTk1MUEvRDFCMkFDMUM1RUVGMTFFRjkzQzYyQzg5NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAmZEeAMEAmbbqAMEAmbd6DAN
BgkqhkiG9w0BAQsFAAOCAQEAkIcq76hXOSVYD5UDN8tjQxWWxpmwzqxzbdmOKBiC
FUm9QQloPXrmoeGQOMkhLRJem2dL3EpNxLY0+sTNot4eMmOjVzTKuSm71J8paNJ3
ssyj+3G8kYI8qM0Ig2h0yQSr6AUouozZX0+/mMWQYrdU5n1Ev/DWXswaIaSL4YHT
zJK5MYIU5JSrnBYhEW3p0Kaov6k7JTtqbogYmDvt+2vNANKqqgF69LzNLSEc4IqV
3MTqm+nPPcA4FbQR1QjrH8OjOasUJYR6o+fsgaE5PvB8FHFm+9qjan3Yj5dhj4go
EvXvmxfzJ2mjphLynLP05b7UBN+rvueZlHawCBynAWXa7g==
-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:46 2024 by rpki-client on console-fra.rpki-client.org