Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0FD4084EB81B11EB810A7364F8AEA228.roa
File: 0FD4084EB81B11EB810A7364F8AEA228.roa (raw, json)
Hash identifier: zU1K7P6CvbuPRMc/VughHlUNAw+qLw9n1QTeVwl9p+M=
Subject key identifier: F7:49:E0:72:44:19:3D:E7:B7:C8:36:76:D9:72:31:76:C8:1D:BB:58
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0134
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0FD4084EB81B11EB810A7364F8AEA228.roa
Signing time: Tue 18 May 2021 20:53:13 +0000
ROA not before: Tue 18 May 2021 20:53:06 +0000
ROA not after: Sat 18 May 2041 20:53:06 +0000
asID: 3741
IP address blocks: 196.2.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 18 20:53:06 2021 GMT
Not After : May 18 20:53:06 2041 GMT
Subject: CN=60a42939-9fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:a2:15:5f:dd:ac:8f:e1:7d:c3:6d:5f:c9:
a0:b6:d2:e9:b3:1b:86:72:8e:9f:bd:fa:10:5a:1b:
7c:cc:e5:da:b0:a5:7b:73:d0:08:df:da:df:53:1d:
e6:0b:81:ee:66:f9:c8:fd:72:2f:d4:c0:40:da:4d:
ad:1a:ec:80:a1:6e:26:f3:65:1c:77:64:6c:43:64:
56:c4:95:a9:ce:60:b3:1e:af:78:97:49:18:a6:4a:
30:d3:23:91:b8:41:cd:de:02:d0:97:85:5d:a6:c8:
fd:25:6e:8e:19:69:c6:71:d2:be:b7:34:0c:0b:78:
3e:50:c6:da:ab:ce:d3:8d:54:b6:98:f5:1a:63:9f:
0b:78:b9:46:9d:35:31:88:6b:5a:df:74:76:2e:58:
3c:58:5c:f8:e2:c6:c9:81:46:61:3a:34:3f:b2:31:
45:e2:1d:21:21:e5:cb:d0:22:5f:b5:32:df:51:7c:
ea:7f:70:c4:8c:91:79:a3:29:e1:44:8c:0e:04:d5:
05:d1:b7:29:a9:26:2a:17:26:68:39:ae:37:79:e9:
53:c6:44:c6:8b:54:22:84:bb:7b:68:31:62:4d:d9:
18:c8:4e:24:22:ae:b7:67:6d:81:21:03:40:d2:c6:
27:34:00:dd:12:c4:e4:af:22:8a:c3:29:e9:7f:76:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:E0:72:44:19:3D:E7:B7:C8:36:76:D9:72:31:76:C8:1D:BB:58
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0FD4084EB81B11EB810A7364F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:54:74:ef:b5:fb:b7:a2:ce:5d:7d:ad:e7:04:cb:9f:4e:24:
73:2a:08:5d:0a:2e:43:ee:71:44:df:9b:4b:f7:79:d4:ec:7e:
f6:62:da:ed:6a:d4:0b:13:da:31:5f:3b:c6:41:80:57:34:bf:
b6:07:dd:cb:a2:76:96:10:ad:ed:02:74:53:83:cb:88:f1:74:
47:e8:5c:64:74:2c:8a:b8:b5:35:0e:96:e9:ea:cd:9b:9c:e5:
0e:ab:58:6f:d9:a9:33:e4:30:66:74:f2:eb:13:15:93:8a:02:
d4:10:f6:09:d7:9f:65:0a:c4:a9:e2:18:7c:86:96:52:34:90:
fa:1c:ac:78:4e:d6:88:7e:cf:14:76:d4:75:72:e8:d9:71:47:
36:b3:cd:ad:7f:24:1f:e0:4d:76:8a:68:ff:81:76:b1:b3:9c:
97:34:13:cc:b1:38:de:52:c3:7f:b4:cd:61:2b:c1:a0:5a:1b:
f8:9a:c9:c8:45:4d:74:b6:41:03:9b:88:49:be:76:84:fc:1f:
2c:6b:fc:03:42:d0:3d:43:ff:60:86:89:f0:b8:2f:73:4a:c5:
7b:3c:e0:5c:83:a4:5c:79:6e:fa:4b:5a:66:00:0a:d1:4c:1c:
34:34:f4:67:cf:b9:08:a3:2e:02:9f:f3:c1:8d:96:85:a3:c6:
95:13:38:03
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICATQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTA1MTgyMDUzMDZaFw00MTA1MTgyMDUzMDZaMBgxFjAU
BgNVBAMTDTYwYTQyOTM5LTlmYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0naIVX92sj+F9w21fyaC20umzG4Zyjp+9+hBaG3zM5dqwpXtz0Ajf2t9T
HeYLge5m+cj9ci/UwEDaTa0a7IChbibzZRx3ZGxDZFbElanOYLMer3iXSRimSjDT
I5G4Qc3eAtCXhV2myP0lbo4ZacZx0r63NAwLeD5QxtqrztONVLaY9Rpjnwt4uUad
NTGIa1rfdHYuWDxYXPjixsmBRmE6ND+yMUXiHSEh5cvQIl+1Mt9RfOp/cMSMkXmj
KeFEjA4E1QXRtympJioXJmg5rjd56VPGRMaLVCKEu3toMWJN2RjITiQirrdnbYEh
A0DSxic0AN0SxOSvIorDKel/dqvXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU90ng
ckQZPee3yDZ22XIxdsgdu1gwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4LzBGRDQwODRFQjgxQjExRUI4MTBBNzM2NEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALEAowwDQYJKoZIhvcNAQEL
BQADggEBAKxUdO+1+7eizl19recEy59OJHMqCF0KLkPucUTfm0v3edTsfvZi2u1q
1AsT2jFfO8ZBgFc0v7YH3cuidpYQre0CdFODy4jxdEfoXGR0LIq4tTUOlunqzZuc
5Q6rWG/ZqTPkMGZ08usTFZOKAtQQ9gnXn2UKxKniGHyGllI0kPocrHhO1oh+zxR2
1HVy6NlxRzazza1/JB/gTXaKaP+BdrGznJc0E8yxON5Sw3+0zWErwaBaG/iaychF
TXS2QQObiEm+doT8Hyxr/ANC0D1D/2CGifC4L3NKxXs84FyDpFx5bvpLWmYACtFM
HDQ09GfPuQijLgKf88GNloWjxpUTOAM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org