Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/F737A0385C1C11ECB7F224705A40D577.roa
File: F737A0385C1C11ECB7F224705A40D577.roa (raw, json)
Hash identifier: 18NMLFQs/eN8MBDmoRWcN8d+TjVQtf8Ttvo8aeXvWZ0=
Subject key identifier: FC:1D:DF:96:62:B6:B9:1C:56:AE:99:68:C2:D3:3B:28:33:B3:2B:40
Certificate issuer: /CN=F3660137AF/serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Certificate serial: 02
Authority key identifier: 14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/F737A0385C1C11ECB7F224705A40D577.roa
Signing time: Mon 13 Dec 2021 14:00:02 +0000
ROA not before: Mon 13 Dec 2021 13:59:57 +0000
ROA not after: Wed 31 Dec 2031 13:59:57 +0000
asID: 327900
IP address blocks: 102.177.80.0/21 maxlen: 24
102.217.72.0/22 maxlen: 24
2c0f:ef00::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660137AF/serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Validity
Not Before: Dec 13 13:59:57 2021 GMT
Not After : Dec 31 13:59:57 2031 GMT
Subject: CN=61b751e2-dcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:77:54:0a:b3:79:dc:e9:03:55:42:1a:c3:
e1:18:fd:de:63:c1:8d:6b:a7:60:06:a1:2c:1d:26:
56:31:87:a3:06:2b:fe:80:68:b1:47:d4:84:c7:b1:
d6:c1:49:39:d6:a5:b2:7c:42:c5:d6:20:b2:a6:86:
ae:c4:f7:43:38:2a:9e:93:ae:f5:8f:a7:43:0f:82:
54:0d:95:03:50:4d:94:f5:4f:20:e5:93:ce:68:f6:
68:8d:7f:2e:b4:6e:be:a5:1f:5d:98:1e:4a:09:46:
0f:ad:a1:d7:65:ee:06:f7:54:79:21:8c:e3:74:81:
9e:d9:4f:46:36:30:f4:d6:b0:0e:73:82:c5:d3:59:
7f:4a:0c:1a:e8:38:e1:11:86:47:ee:8b:d0:37:6d:
ef:55:ef:70:41:4a:5b:70:7f:bf:d0:b3:a7:f6:58:
20:d3:0d:72:a3:39:f8:b4:28:23:22:c9:29:08:26:
d1:14:39:5c:cd:c1:49:37:b1:b7:58:3c:af:49:a7:
b6:9b:78:e8:aa:7e:44:0a:41:ef:7a:94:57:29:12:
9c:4f:d5:60:d5:1a:25:4c:1c:e8:c3:d5:e6:0e:53:
bd:52:99:ce:84:27:e3:e9:22:24:6e:90:f1:68:90:
d0:e7:37:c9:d5:b4:50:6c:d1:06:37:9b:ce:6d:90:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1D:DF:96:62:B6:B9:1C:56:AE:99:68:C2:D3:3B:28:33:B3:2B:40
X509v3 Authority Key Identifier:
keyid:14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/F737A0385C1C11ECB7F224705A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.80.0/21
102.217.72.0/22
IPv6:
2c0f:ef00::/32
Signature Algorithm: sha256WithRSAEncryption
bd:6c:2c:6a:fd:10:ef:e9:29:57:c4:55:58:df:d1:c7:c5:72:
e1:45:26:96:19:9a:5f:53:ae:24:96:59:05:47:8b:e6:82:9b:
75:0f:f3:83:bb:5d:9a:0e:62:b3:c6:ac:79:ec:a6:19:8b:2e:
4f:b3:64:6e:02:e3:d9:a2:f7:56:d0:25:30:f5:11:4d:27:e6:
4c:30:66:1a:c6:3a:68:8e:27:14:8c:4c:f8:3a:9b:7a:a6:49:
14:87:86:a1:f1:76:53:51:59:46:f8:a4:07:01:52:12:7e:1d:
4e:18:34:20:77:50:81:d1:63:73:1f:48:f4:33:c1:8c:f8:e9:
a7:73:08:0a:47:09:83:1e:b4:b7:f8:f4:0f:02:7e:d1:c1:35:
b6:6b:99:b8:75:55:52:9c:38:f6:40:f3:45:1c:cf:33:67:41:
34:78:ab:d8:c4:56:aa:89:3b:25:1d:a9:8e:19:92:26:45:24:
0f:c8:9a:8c:a6:76:80:2b:ff:c8:b6:32:d6:d8:81:cb:c7:09:
bb:bb:e7:73:5f:08:ae:47:1f:cb:57:74:81:48:87:42:56:f0:
ca:35:ce:62:9d:e1:7f:6e:18:c1:a3:b4:30:b6:42:55:e8:50:
85:85:5e:31:99:79:a7:02:0a:b2:bb:51:e9:58:e2:28:59:7e:
05:78:05:d4
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY2
MDEzN0FGMTEwLwYDVQQFEygxNDA2RDg0QjNBMjJBQ0Y0OTQ4Mzk3MjY2NjMxOUNF
OTg5M0Q2OEM0MB4XDTIxMTIxMzEzNTk1N1oXDTMxMTIzMTEzNTk1N1owGDEWMBQG
A1UEAwwNNjFiNzUxZTItZGNmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANF1d1QKs3nc6QNVQhrD4Rj93mPBjWunYAahLB0mVjGHowYr/oBosUfUhMex
1sFJOdalsnxCxdYgsqaGrsT3QzgqnpOu9Y+nQw+CVA2VA1BNlPVPIOWTzmj2aI1/
LrRuvqUfXZgeSglGD62h12XuBvdUeSGM43SBntlPRjYw9NawDnOCxdNZf0oMGug4
4RGGR+6L0Ddt71XvcEFKW3B/v9Czp/ZYINMNcqM5+LQoIyLJKQgm0RQ5XM3BSTex
t1g8r0mntpt46Kp+RApB73qUVykSnE/VYNUaJUwc6MPV5g5TvVKZzoQn4+kiJG6Q
8WiQ0Oc3ydW0UGzRBjebzm2QZRsCAwEAAaOCArowggK2MB0GA1UdDgQWBBT8Hd+W
Yra5HFaumWjC0zsoM7MrQDAfBgNVHSMEGDAWgBQUBthLOiKs9JSDlyZmMZzpiT1o
xDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjAxMzcvNEFBRjQwNjQ1QzFDMTFFQzk1NEQzRDZFNUE0MEQ1NzcvRkFiWVN6
b2lyUFNVZzVjbVpqR2M2WWs5YU1RLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRkFiWVN6b2lyUFNVZzVjbVpqR2M2WWs5YU1RLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjAxMzcvNEFBRjQwNjQ1QzFDMTFFQzk1NEQzRDZFNUE0
MEQ1NzcvRjczN0EwMzg1QzFDMTFFQ0I3RjIyNDcwNUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA2axUAMEAmbZSDANBAIAAjAH
AwUALA/vADANBgkqhkiG9w0BAQsFAAOCAQEAvWwsav0Q7+kpV8RVWN/Rx8Vy4UUm
lhmaX1OuJJZZBUeL5oKbdQ/zg7tdmg5is8aseeymGYsuT7NkbgLj2aL3VtAlMPUR
TSfmTDBmGsY6aI4nFIxM+DqbeqZJFIeGofF2U1FZRvikBwFSEn4dThg0IHdQgdFj
cx9I9DPBjPjpp3MICkcJgx60t/j0DwJ+0cE1tmuZuHVVUpw49kDzRRzPM2dBNHir
2MRWqok7JR2pjhmSJkUkD8iajKZ2gCv/yLYy1tiBy8cJu7vnc18Irkcfy1d0gUiH
QlbwyjXOYp3hf24YwaO0MLZCVehQhYVeMZl5pwIKsrtR6VjiKFl+BXgF1A==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:19 2024 by rpki-client on console-ams.rpki-client.org