Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/76C25FA6F62211ECA4A5A1CEF1222468.roa
File: 76C25FA6F62211ECA4A5A1CEF1222468.roa (raw, json)
Hash identifier: bltEFXn7G4T8us2DT/CcL4lO2ojz0kPAbTbNgBQhLGQ=
Subject key identifier: AE:B2:3B:FB:7D:0A:91:2C:82:44:1B:FB:CB:03:2E:D2:63:E3:F1:92
Certificate issuer: /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial: 0A
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/76C25FA6F62211ECA4A5A1CEF1222468.roa
Signing time: Mon 27 Jun 2022 14:07:22 +0000
ROA not before: Mon 27 Jun 2022 14:07:19 +0000
ROA not after: Sun 27 Jun 2032 14:07:19 +0000
asID: 328915
IP address blocks: 102.218.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Validity
Not Before: Jun 27 14:07:19 2022 GMT
Not After : Jun 27 14:07:19 2032 GMT
Subject: CN=62b9b99a-4110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:a4:59:5b:17:d8:50:0f:b1:e2:2b:fc:62:
40:99:aa:73:25:e5:e0:68:70:d7:db:d9:5e:cc:d4:
9d:f0:90:51:87:93:fe:33:d2:83:9d:3d:de:d1:36:
f7:db:13:b9:c9:46:b1:0e:d5:83:6b:c7:41:21:76:
8d:6c:93:58:39:13:d9:92:95:b5:9b:d4:04:ea:72:
8c:e1:79:0b:5c:d2:06:d3:a0:ef:d3:fd:d5:da:06:
ff:49:90:26:91:56:ab:39:7c:e2:ba:c3:c2:73:ea:
a7:7a:9c:51:9d:16:51:f2:c9:4e:55:5b:58:32:e5:
be:a1:0b:74:9f:21:02:4a:58:d3:05:82:27:81:a7:
ed:90:d1:0c:96:9e:fb:12:0f:41:19:e0:0e:ac:7c:
89:e6:b7:34:47:5b:4a:e1:ad:20:9f:f5:f4:90:05:
80:78:09:53:05:9b:1d:b2:9a:c6:a7:81:cc:43:73:
63:b5:68:39:b3:ae:55:84:12:a1:34:9b:91:74:0e:
c7:28:00:cd:4d:dd:52:8e:36:ba:36:4d:db:7a:20:
aa:b0:60:fd:d2:c8:85:9d:22:74:63:95:a0:54:2b:
34:ca:75:f0:47:45:be:4a:79:f0:f9:ff:1f:33:04:
38:93:3a:b8:27:e1:f9:9c:6e:7b:ad:75:5f:c8:79:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B2:3B:FB:7D:0A:91:2C:82:44:1B:FB:CB:03:2E:D2:63:E3:F1:92
X509v3 Authority Key Identifier:
keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/76C25FA6F62211ECA4A5A1CEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.206.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9b:54:ab:bc:5e:30:3e:43:70:7b:7d:bc:c8:c9:43:84:11:
0c:20:c8:fc:bc:b2:5b:91:fc:39:ea:f8:65:0b:1e:33:5d:b3:
40:f1:06:0d:ef:23:f8:a8:bd:07:5f:3b:87:58:60:a8:de:51:
38:bf:d8:f6:8b:e0:d5:2b:d5:3a:14:bb:4f:de:8a:cd:4f:50:
79:df:7d:6a:6a:c0:65:ec:26:fc:24:83:e4:1c:af:eb:c6:e8:
06:3a:c7:34:f3:66:ea:9f:1b:98:50:30:89:24:c2:c1:d9:49:
49:9d:53:d0:1f:a6:23:13:74:d6:64:fd:36:a1:f4:39:49:77:
fe:02:a5:fa:4b:38:d2:99:44:51:92:f4:79:4c:e9:86:3a:33:
a5:62:cd:78:c8:f1:56:95:2f:8f:7f:d3:87:4b:48:00:f6:63:
0a:88:ee:2a:78:d0:1d:4d:8f:9d:50:5a:d3:73:dc:38:c8:2a:
4b:e7:f5:92:3a:4f:b8:a0:57:40:fa:2b:8f:aa:9a:e5:9c:05:
df:b2:77:c2:c6:b1:65:cc:4f:30:e0:48:8e:fa:96:6f:33:15:
60:d0:ff:95:c3:cb:9c:ff:85:0d:85:49:0a:a4:be:73:d6:60:
c2:29:5d:db:2b:94:2e:e2:54:4f:79:46:df:c3:13:8e:3d:81:
54:c4:60:30
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
QkM0NEFGMTEwLwYDVQQFEygyRDAwMTU0RTYwMEE2NDBBQzMyQTMyODVEOUNFOUZD
NTBBOTQxQUIzMB4XDTIyMDYyNzE0MDcxOVoXDTMyMDYyNzE0MDcxOVowGDEWMBQG
A1UEAwwNNjJiOWI5OWEtNDExMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANtHpFlbF9hQD7HiK/xiQJmqcyXl4Ghw19vZXszUnfCQUYeT/jPSg5093tE2
99sTuclGsQ7Vg2vHQSF2jWyTWDkT2ZKVtZvUBOpyjOF5C1zSBtOg79P91doG/0mQ
JpFWqzl84rrDwnPqp3qcUZ0WUfLJTlVbWDLlvqELdJ8hAkpY0wWCJ4Gn7ZDRDJae
+xIPQRngDqx8iea3NEdbSuGtIJ/19JAFgHgJUwWbHbKaxqeBzENzY7VoObOuVYQS
oTSbkXQOxygAzU3dUo42ujZN23ogqrBg/dLIhZ0idGOVoFQrNMp18EdFvkp58Pn/
HzMEOJM6uCfh+Zxue611X8h55scCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSusjv7
fQqRLIJEG/vLAy7SY+PxkjAfBgNVHSMEGDAWgBQtABVOYApkCsMqMoXZzp/FCpQa
szAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUJDNDQvODkyRDQ5QzZGNjE4MTFFQ0JFMUIzOEFGRjEyMjI0NjgvTFFBVlRt
QUtaQXJES2pLRjJjNmZ4UXFVR3JNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTFFBVlRtQUtaQXJES2pLRjJjNmZ4UXFVR3JNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJDNDQvODkyRDQ5QzZGNjE4MTFFQ0JFMUIzOEFGRjEy
MjI0NjgvNzZDMjVGQTZGNjIyMTFFQ0E0QTVBMUNFRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbazjANBgkqhkiG9w0BAQsF
AAOCAQEAUZtUq7xeMD5DcHt9vMjJQ4QRDCDI/LyyW5H8Oer4ZQseM12zQPEGDe8j
+Ki9B187h1hgqN5ROL/Y9ovg1SvVOhS7T96KzU9Qed99amrAZewm/CSD5Byv68bo
BjrHNPNm6p8bmFAwiSTCwdlJSZ1T0B+mIxN01mT9NqH0OUl3/gKl+ks40plEUZL0
eUzphjozpWLNeMjxVpUvj3/Th0tIAPZjCojuKnjQHU2PnVBa03PcOMgqS+f1kjpP
uKBXQPorj6qa5ZwF37J3wsaxZcxPMOBIjvqWbzMVYND/lcPLnP+FDYVJCqS+c9Zg
wild2yuULuJUT3lG38MTjj2BVMRgMA==
-----END CERTIFICATE-----
Generated at Sat May 18 03:48:45 2024 by rpki-client on console-fra.rpki-client.org