Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/D9ED8CAC6EB311EF96086184762E951A.roa
File: D9ED8CAC6EB311EF96086184762E951A.roa (raw, json)
Hash identifier: 6w3a+eg92q7dxLHTR3vq9vXUwlds4W9m99UG/J3eEsM=
Subject key identifier: D0:B2:A0:B3:96:0B:0F:C7:B2:4E:A3:31:1C:80:7C:13:6F:DB:63:5A
Certificate issuer: /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial: 030E
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/D9ED8CAC6EB311EF96086184762E951A.roa
Signing time: Mon 09 Sep 2024 14:00:21 +0000
ROA not before: Mon 09 Sep 2024 14:00:17 +0000
ROA not after: Thu 09 Sep 2027 14:00:17 +0000
asID: 328334
IP address blocks: 102.134.88.0/22 maxlen: 22
102.134.88.0/24 maxlen: 24
102.134.89.0/24 maxlen: 24
102.134.90.0/24 maxlen: 24
102.134.91.0/24 maxlen: 24
2c0f:ef30::/32 maxlen: 32
2c0f:ef30:10::/44 maxlen: 44
2c0f:ef30:20::/44 maxlen: 44
2c0f:ef30:30::/44 maxlen: 44
2c0f:ef30:40::/44 maxlen: 44
2c0f:ef30:50::/44 maxlen: 44
2c0f:ef30:60::/44 maxlen: 44
2c0f:ef30:70::/44 maxlen: 44
2c0f:ef30:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Validity
Not Before: Sep 9 14:00:17 2024 GMT
Not After : Sep 9 14:00:17 2027 GMT
Subject: CN=66deff74-beff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:ad:89:f9:08:f8:e4:64:44:2b:05:6d:63:
5b:f5:a7:44:53:30:17:59:52:35:0d:bb:c2:c5:e4:
f8:13:18:b0:30:2c:9e:21:3c:d4:bf:43:10:f3:9f:
c4:15:f7:00:ca:62:15:14:13:56:56:6c:7c:c6:4b:
d9:43:2e:a0:de:8c:86:7a:4b:9a:f5:f2:a1:e1:c9:
c7:98:94:48:bd:70:fb:ae:2a:31:10:92:15:11:9e:
f2:ab:ca:14:08:7e:46:78:c7:30:ae:71:d6:11:74:
d7:cb:7e:79:c6:fc:ca:cc:ec:6c:9a:ad:1e:2e:24:
b2:ab:a4:7a:a5:9a:5c:c9:34:3e:0d:e1:c4:0c:79:
64:ea:a5:a4:6d:74:d8:84:30:01:59:3c:30:97:78:
eb:83:84:89:84:b3:b7:08:ec:2a:bc:d6:63:af:ea:
4b:a2:a9:47:61:83:5d:a1:43:c2:a3:63:69:ee:8e:
ca:5e:9f:83:f9:70:3f:b1:cb:bf:39:62:9d:b8:c0:
8d:80:54:ea:c4:6f:60:93:68:bf:8a:57:c4:1c:cd:
c8:a3:0d:5c:69:b9:27:da:2c:35:3a:0b:55:86:cd:
8c:54:17:42:cc:a5:93:a5:36:e4:40:11:df:db:69:
82:67:b8:20:44:c7:46:51:49:22:71:c1:a2:15:50:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B2:A0:B3:96:0B:0F:C7:B2:4E:A3:31:1C:80:7C:13:6F:DB:63:5A
X509v3 Authority Key Identifier:
keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/D9ED8CAC6EB311EF96086184762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.88.0/22
IPv6:
2c0f:ef30::/32
Signature Algorithm: sha256WithRSAEncryption
19:e3:be:ef:75:51:a7:ec:fe:16:c3:e9:1b:c3:be:cc:c7:53:
5b:ed:f8:52:8e:09:5b:1b:1b:ec:a4:e8:05:71:58:2b:40:b7:
88:6e:a0:66:4a:fa:ad:c6:b0:48:51:e8:2c:27:a4:24:be:9f:
04:7b:71:e9:5a:11:3d:4a:c1:f6:bc:7b:43:bf:36:10:50:d7:
a4:fc:42:12:32:41:2d:41:85:f7:77:6b:54:9c:82:a8:7a:1f:
15:ff:e2:38:85:b3:be:aa:c7:0c:2a:20:d7:49:f9:55:3d:ec:
b9:aa:b4:23:cc:78:a0:3b:e8:81:b3:c3:93:ba:bf:04:9d:f6:
36:65:7d:6b:95:fe:db:7f:12:f9:e6:1f:79:7e:a0:59:20:37:
da:95:18:c4:f2:bb:5f:9a:c6:57:55:e0:e9:0d:a6:79:a3:e7:
9c:48:d6:52:a0:ff:7c:58:fd:32:97:4b:39:0e:94:1c:fd:a7:
ef:96:29:f6:a7:c9:b4:bb:a4:3c:14:c6:8f:b5:dd:3d:2a:c0:
07:40:c6:16:9e:c2:0e:90:dd:6b:e1:bc:5a:ee:6a:49:f6:d6:
4c:70:ed:9c:9f:18:f1:08:2c:22:d9:61:7b:d1:0e:e1:a1:9b:
af:52:38:9f:a5:fc:03:22:dd:9a:54:df:1c:9d:9c:57:14:f1:
e2:de:92:9b
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQyNkFBRjExMC8GA1UEBRMoMUI0QUIwQjcyMEQ4MzlCNzlBOTg5MjMyM0IwRkFC
RUQ5NjcwNUFBMjAeFw0yNDA5MDkxNDAwMTdaFw0yNzA5MDkxNDAwMTdaMBgxFjAU
BgNVBAMTDTY2ZGVmZjc0LWJlZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzg62J+Qj45GREKwVtY1v1p0RTMBdZUjUNu8LF5PgTGLAwLJ4hPNS/QxDz
n8QV9wDKYhUUE1ZWbHzGS9lDLqDejIZ6S5r18qHhyceYlEi9cPuuKjEQkhURnvKr
yhQIfkZ4xzCucdYRdNfLfnnG/MrM7GyarR4uJLKrpHqlmlzJND4N4cQMeWTqpaRt
dNiEMAFZPDCXeOuDhImEs7cI7Cq81mOv6kuiqUdhg12hQ8KjY2nujspen4P5cD+x
y785Yp24wI2AVOrEb2CTaL+KV8QczcijDVxpuSfaLDU6C1WGzYxUF0LMpZOlNuRA
Ed/baYJnuCBEx0ZRSSJxwaIVUPmxAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQU0LKg
s5YLD8eyTqMxHIB8E2/bY1owHwYDVR0jBBgwFoAUG0qwtyDYObeamJIyOw+r7ZZw
WqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0MjZBLzcxQTVCMTg0MjhEQzExRUQ5OUZGM0Q4RkYxMjIyNDY4L0cwcXd0
eURZT2JlYW1KSXlPdy1yN1pad1dxSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0cwcXd0eURZT2JlYW1KSXlPdy1yN1pad1dxSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjc0MjZBLzcxQTVCMTg0MjhEQzExRUQ5OUZGM0Q4RkYx
MjIyNDY4L0Q5RUQ4Q0FDNkVCMzExRUY5NjA4NjE4NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmhlgwDQQCAAIwBwMFACwP
7zAwDQYJKoZIhvcNAQELBQADggEBABnjvu91Uafs/hbD6RvDvszHU1vt+FKOCVsb
G+yk6AVxWCtAt4huoGZK+q3GsEhR6CwnpCS+nwR7celaET1Kwfa8e0O/NhBQ16T8
QhIyQS1Bhfd3a1Scgqh6HxX/4jiFs76qxwwqINdJ+VU97LmqtCPMeKA76IGzw5O6
vwSd9jZlfWuV/tt/EvnmH3l+oFkgN9qVGMTyu1+axldV4OkNpnmj55xI1lKg/3xY
/TKXSzkOlBz9p++WKfanybS7pDwUxo+13T0qwAdAxhaewg6Q3WvhvFruakn21kxw
7ZyfGPEILCLZYXvRDuGhm69SOJ+l/AMi3ZpU3xydnFcU8eLekps=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org