Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36698E4/F20BF188961511EEA29AF12CD25BE465/CB7A91CA973511EE97E20A3FD25BE465.roa
File: CB7A91CA973511EE97E20A3FD25BE465.roa (raw, json)
Hash identifier: Li+5gNFuimhtfimvqYk6IZiOFp5eT1ii6OOvibSCjH0=
Subject key identifier: 97:D5:A0:6B:27:6D:5A:07:63:21:A1:47:D6:3D:D4:97:18:C5:F5:41
Certificate issuer: /CN=F36698E4AF/serialNumber=C300117D5494961E05B7D9DE16D628B23B25B901
Certificate serial: 08
Authority key identifier: C3:00:11:7D:54:94:96:1E:05:B7:D9:DE:16:D6:28:B2:3B:25:B9:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wwARfVSUlh4Ft9neFtYosjsluQE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36698E4/F20BF188961511EEA29AF12CD25BE465/CB7A91CA973511EE97E20A3FD25BE465.roa
Signing time: Sun 10 Dec 2023 08:26:20 +0000
ROA not before: Sun 10 Dec 2023 08:26:16 +0000
ROA not after: Tue 10 Dec 2024 08:26:16 +0000
asID: 329114
IP address blocks: 102.221.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36698E4/F20BF188961511EEA29AF12CD25BE465/wwARfVSUlh4Ft9neFtYosjsluQE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36698E4/F20BF188961511EEA29AF12CD25BE465/wwARfVSUlh4Ft9neFtYosjsluQE.mft
rsync://rpki.afrinic.net/repository/afrinic/wwARfVSUlh4Ft9neFtYosjsluQE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36698E4AF/serialNumber=C300117D5494961E05B7D9DE16D628B23B25B901
Validity
Not Before: Dec 10 08:26:16 2023 GMT
Not After : Dec 10 08:26:16 2024 GMT
Subject: CN=6575762c-4015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:21:47:8a:28:eb:a2:b8:c7:1c:d3:d6:2d:
fb:cf:3a:db:da:68:54:68:08:25:3f:6e:72:12:e9:
ea:26:dd:28:33:b0:b3:d3:eb:b2:86:16:50:e8:cf:
03:04:26:4b:07:46:ae:b1:e5:fc:4e:58:ac:fc:ab:
9f:8a:75:5c:b1:37:74:5e:a1:2c:49:bf:d8:16:e1:
29:5e:60:0b:8d:57:84:35:9b:9c:cc:34:eb:45:e3:
80:9b:c2:1b:45:d3:c5:3b:b4:f1:fc:7a:a6:d2:84:
db:ef:2a:9a:b0:f9:5b:1e:90:bc:7b:65:de:cc:52:
9d:5b:bb:b1:85:4c:9f:bd:c1:6d:9e:3e:b7:08:3a:
47:5b:7d:0c:94:39:c2:98:e9:ce:2a:b7:d0:79:5c:
8b:d9:7d:d6:cd:a1:fd:7f:50:22:40:76:27:ea:40:
6d:0a:f5:d6:c5:5e:b4:64:c0:23:9d:ec:07:c2:a4:
7b:bc:c0:20:5a:46:70:dc:e7:2c:52:bc:40:aa:fb:
b4:94:34:2b:26:94:21:f5:8a:fa:68:8f:58:c6:5e:
e9:04:ef:60:e1:ea:ee:b6:1f:fb:8d:e8:fd:a4:ae:
f5:38:b8:6b:e9:f9:e9:5e:bf:67:bd:c3:7e:63:e5:
bc:db:7c:2d:76:f6:f5:86:aa:d5:fe:0f:d2:9f:e7:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D5:A0:6B:27:6D:5A:07:63:21:A1:47:D6:3D:D4:97:18:C5:F5:41
X509v3 Authority Key Identifier:
keyid:C3:00:11:7D:54:94:96:1E:05:B7:D9:DE:16:D6:28:B2:3B:25:B9:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36698E4/F20BF188961511EEA29AF12CD25BE465/wwARfVSUlh4Ft9neFtYosjsluQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wwARfVSUlh4Ft9neFtYosjsluQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36698E4/F20BF188961511EEA29AF12CD25BE465/CB7A91CA973511EE97E20A3FD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.142.0/23
Signature Algorithm: sha256WithRSAEncryption
38:4e:a8:31:f5:25:96:c5:96:73:e8:57:fe:31:d8:f9:b2:00:
be:6b:ce:ff:53:73:2b:9b:8f:30:ca:03:dc:9c:7e:9f:25:89:
31:90:a6:98:05:5e:37:fa:f0:17:1f:1e:0b:1b:41:59:3b:c6:
e6:4a:e3:85:c9:f6:2c:66:5e:f5:6b:3b:bb:53:50:27:e0:85:
cc:ef:00:16:f2:39:74:c9:b1:2d:70:6b:c6:82:c4:9b:9e:d3:
27:9a:42:bd:52:87:66:fd:a4:96:78:32:1b:d4:f0:af:f8:51:
a1:c0:9c:3f:77:33:3f:39:9f:75:b0:2a:5c:84:d7:92:7f:28:
82:84:7b:04:fc:2a:68:96:fa:a6:c6:d9:be:02:2f:9a:f0:43:
5b:5f:0c:9a:64:0c:64:03:03:0b:e9:c0:87:67:72:ce:06:55:
74:21:51:4f:a6:40:a6:f6:22:5b:d8:e9:44:3a:7b:3e:f5:2a:
c7:92:e0:8f:a6:7d:e5:ad:6a:b8:5c:02:1c:ef:77:9a:57:11:
00:cf:21:0c:9c:e4:c7:db:b1:42:a8:8d:92:1d:9d:1a:ed:c4:
3d:d9:d8:d3:91:73:bb:0f:ec:9e:f7:2c:1b:77:e3:40:8c:7b:
65:c1:34:d7:87:9c:6c:ae:f6:54:b7:31:04:1e:e2:ec:0d:de:
3b:f1:e7:75
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
OThFNEFGMTEwLwYDVQQFEyhDMzAwMTE3RDU0OTQ5NjFFMDVCN0Q5REUxNkQ2MjhC
MjNCMjVCOTAxMB4XDTIzMTIxMDA4MjYxNloXDTI0MTIxMDA4MjYxNlowGDEWMBQG
A1UEAxMNNjU3NTc2MmMtNDAxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGAIUeKKOuiuMcc09Yt+88629poVGgIJT9uchLp6ibdKDOws9PrsoYWUOjP
AwQmSwdGrrHl/E5YrPyrn4p1XLE3dF6hLEm/2BbhKV5gC41XhDWbnMw060XjgJvC
G0XTxTu08fx6ptKE2+8qmrD5Wx6QvHtl3sxSnVu7sYVMn73BbZ4+twg6R1t9DJQ5
wpjpziq30Hlci9l91s2h/X9QIkB2J+pAbQr11sVetGTAI53sB8Kke7zAIFpGcNzn
LFK8QKr7tJQ0KyaUIfWK+miPWMZe6QTvYOHq7rYf+43o/aSu9Ti4a+n56V6/Z73D
fmPlvNt8LXb29Yaq1f4P0p/nCqsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSX1aBr
J21aB2MhoUfWPdSXGMX1QTAfBgNVHSMEGDAWgBTDABF9VJSWHgW32d4W1iiyOyW5
ATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Njk4RTQvRjIwQkYxODg5NjE1MTFFRUEyOUFGMTJDRDI1QkU0NjUvd3dBUmZW
U1VsaDRGdDluZUZ0WW9zanNsdVFFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvd3dBUmZWU1VsaDRGdDluZUZ0WW9zanNsdVFFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Njk4RTQvRjIwQkYxODg5NjE1MTFFRUEyOUFGMTJDRDI1
QkU0NjUvQ0I3QTkxQ0E5NzM1MTFFRTk3RTIwQTNGRDI1QkU0NjUucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbdjjANBgkqhkiG9w0BAQsF
AAOCAQEAOE6oMfUllsWWc+hX/jHY+bIAvmvO/1NzK5uPMMoD3Jx+nyWJMZCmmAVe
N/rwFx8eCxtBWTvG5krjhcn2LGZe9Ws7u1NQJ+CFzO8AFvI5dMmxLXBrxoLEm57T
J5pCvVKHZv2klngyG9Twr/hRocCcP3czPzmfdbAqXITXkn8ogoR7BPwqaJb6psbZ
vgIvmvBDW18MmmQMZAMDC+nAh2dyzgZVdCFRT6ZApvYiW9jpRDp7PvUqx5Lgj6Z9
5a1quFwCHO93mlcRAM8hDJzkx9uxQqiNkh2dGu3EPdnY05Fzuw/snvcsG3fjQIx7
ZcE014ecbK72VLcxBB7i7A3eO/HndQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org