Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/C932EC9CFCAB11EEA50FB13D017001B1.roa
File: C932EC9CFCAB11EEA50FB13D017001B1.roa (raw, json)
Hash identifier: soaQW82/e+F//4kWweC8tiIghLAikW6miQJwkkJvfRg=
Subject key identifier: CD:15:B8:65:BA:E8:84:4B:77:8E:20:F3:44:3C:6A:38:25:33:FD:12
Certificate issuer: /CN=F3659F22AF/serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Certificate serial: 02
Authority key identifier: 55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/C932EC9CFCAB11EEA50FB13D017001B1.roa
Signing time: Wed 17 Apr 2024 11:15:24 +0000
ROA not before: Wed 17 Apr 2024 11:15:19 +0000
ROA not after: Thu 01 May 2025 11:15:19 +0000
asID: 34465
IP address blocks: 102.222.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F22AF/serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Validity
Not Before: Apr 17 11:15:19 2024 GMT
Not After : May 1 11:15:19 2025 GMT
Subject: CN=661faf4c-cf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:60:9f:9f:65:9a:18:90:5b:75:b1:74:f0:
14:88:e6:2b:12:0b:15:33:08:2c:e8:b2:a5:ff:a8:
1a:5f:ac:35:ca:b0:26:27:b9:e2:02:7c:79:8f:f8:
11:fc:66:2c:3a:c1:fa:27:3a:18:f2:d1:09:80:e9:
28:30:67:82:bd:17:36:fe:a0:21:e1:59:4f:60:e9:
7e:ba:9f:14:e8:43:c6:eb:57:f5:70:60:5d:e7:b3:
d8:62:2b:4d:e9:4a:40:c6:13:a4:6e:51:ee:a7:87:
e0:d2:8a:e6:05:08:4b:8e:9f:0d:c3:4e:87:2d:8b:
a8:84:1f:dc:fe:e3:4a:a2:4b:40:f7:c2:b6:ac:61:
06:9d:db:c1:33:6c:ca:fa:d1:54:6f:cc:63:f9:5c:
ee:72:f2:7b:d5:63:9b:2e:01:d1:de:79:73:01:d9:
2e:0f:2b:9d:cf:ee:f2:ea:da:9c:f2:26:2c:7a:49:
aa:da:95:c1:af:bb:4f:1f:86:40:99:cb:ec:48:28:
51:81:a5:05:b6:54:ee:1c:f0:59:87:81:43:bd:00:
c4:94:b4:32:50:62:ae:f1:03:f8:57:21:72:ae:45:
19:67:ea:d3:09:17:db:4d:ef:5f:2a:9c:5b:6c:24:
67:d8:2f:68:84:1a:ae:f0:ee:1b:75:74:09:ef:64:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:B8:65:BA:E8:84:4B:77:8E:20:F3:44:3C:6A:38:25:33:FD:12
X509v3 Authority Key Identifier:
keyid:55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/C932EC9CFCAB11EEA50FB13D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.156.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:5d:e5:3d:ad:18:c1:96:61:ff:b7:7a:5e:b4:f9:88:4b:94:
ba:19:23:b6:63:b4:91:b8:bc:5a:68:c8:81:5d:23:61:a4:cd:
01:54:d6:85:0d:cc:d0:38:3e:0a:9b:b6:2e:4d:97:f9:01:3d:
2a:01:34:0c:14:c1:47:84:75:36:5f:0e:46:24:42:10:cb:6c:
de:a8:7c:ae:07:85:0f:81:25:f7:60:72:c2:63:a8:d8:10:a2:
33:56:1a:8a:8f:20:02:5f:82:01:da:33:c2:1e:f1:44:b0:dd:
94:c5:20:00:f0:ef:b1:41:6a:82:a4:df:ab:1c:f5:bf:4f:fa:
1b:e3:b1:f9:a2:e1:9e:60:55:4f:0a:5d:bb:af:02:96:4f:29:
6c:39:d7:ec:bf:4d:c5:5e:25:42:38:2b:f9:1e:ab:5f:70:1b:
8a:72:35:55:f7:49:7a:18:39:0d:df:c5:e5:30:24:b4:d7:2a:
11:3b:62:59:51:c0:ed:ac:50:01:de:84:85:8f:f5:63:f2:c9:
9e:ab:3b:aa:28:8a:25:9d:d4:80:7a:1c:d2:45:5d:a3:25:92:
5c:ab:16:b0:db:b1:1a:9b:f6:d7:ca:38:5c:6c:ca:8d:0c:ad:
02:eb:07:db:46:80:6a:b7:f8:01:e7:eb:ec:46:64:4d:e4:c1:
14:f7:d6:b8
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
OUYyMkFGMTEwLwYDVQQFEyg1NTU2RDYzNzI3OEE0RDY5ODdENDQ4NzYzQkQzQ0FF
QkEwNThBNTBGMB4XDTI0MDQxNzExMTUxOVoXDTI1MDUwMTExMTUxOVowGDEWMBQG
A1UEAxMNNjYxZmFmNGMtY2Y0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKRoYJ+fZZoYkFt1sXTwFIjmKxILFTMILOiypf+oGl+sNcqwJie54gJ8eY/4
EfxmLDrB+ic6GPLRCYDpKDBngr0XNv6gIeFZT2DpfrqfFOhDxutX9XBgXeez2GIr
TelKQMYTpG5R7qeH4NKK5gUIS46fDcNOhy2LqIQf3P7jSqJLQPfCtqxhBp3bwTNs
yvrRVG/MY/lc7nLye9Vjmy4B0d55cwHZLg8rnc/u8uranPImLHpJqtqVwa+7Tx+G
QJnL7EgoUYGlBbZU7hzwWYeBQ70AxJS0MlBirvED+Fchcq5FGWfq0wkX203vXyqc
W2wkZ9gvaIQarvDuG3V0Ce9kVo0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTNFbhl
uuiES3eOIPNEPGo4JTP9EjAfBgNVHSMEGDAWgBRVVtY3J4pNaYfUSHY708rroFil
DzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTlGMjIvOUEwODMyRjZGQ0FCMTFFRUE2OTAxQjNEMDE3MDAxQjEvVlZiV055
ZUtUV21IMUVoMk85UEs2NkJZcFE4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVlZiV055ZUtUV21IMUVoMk85UEs2NkJZcFE4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTlGMjIvOUEwODMyRjZGQ0FCMTFFRUE2OTAxQjNEMDE3
MDAxQjEvQzkzMkVDOUNGQ0FCMTFFRUE1MEZCMTNEMDE3MDAxQjEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbenDANBgkqhkiG9w0BAQsF
AAOCAQEAql3lPa0YwZZh/7d6XrT5iEuUuhkjtmO0kbi8WmjIgV0jYaTNAVTWhQ3M
0Dg+Cpu2Lk2X+QE9KgE0DBTBR4R1Nl8ORiRCEMts3qh8rgeFD4El92BywmOo2BCi
M1Yaio8gAl+CAdozwh7xRLDdlMUgAPDvsUFqgqTfqxz1v0/6G+Ox+aLhnmBVTwpd
u68Clk8pbDnX7L9NxV4lQjgr+R6rX3AbinI1VfdJehg5Dd/F5TAktNcqETtiWVHA
7axQAd6EhY/1Y/LJnqs7qiiKJZ3UgHoc0kVdoyWSXKsWsNuxGpv218o4XGzKjQyt
AusH20aAarf4Aefr7EZkTeTBFPfWuA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:45 2024 by rpki-client on console-ams.rpki-client.org