Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4F6E3BDCD56411EE9EB80AB8775412E6.roa
File: 4F6E3BDCD56411EE9EB80AB8775412E6.roa (raw, json)
Hash identifier: jmlMhNya/ce6NE/oBnMdZIPf3yG7960Oya5Q3wV/Q38=
Subject key identifier: DB:37:65:46:BC:9F:09:D1:EA:42:16:B9:EA:3D:D9:27:EF:97:3B:E9
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 05C2
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4F6E3BDCD56411EE9EB80AB8775412E6.roa
Signing time: Tue 27 Feb 2024 11:35:30 +0000
ROA not before: Tue 27 Feb 2024 11:35:26 +0000
ROA not after: Tue 28 Feb 2034 11:35:26 +0000
asID: 20011
IP address blocks: 197.99.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Feb 27 11:35:26 2024 GMT
Not After : Feb 28 11:35:26 2034 GMT
Subject: CN=65ddc902-a7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:0c:4f:cb:b5:10:69:af:e5:0e:df:36:bb:
ae:aa:ec:93:ba:b4:5d:da:30:4e:4c:46:6e:2f:5a:
a3:a9:9a:6a:1a:2a:9b:ab:1f:5a:0b:77:7b:9a:f4:
64:b5:37:5d:23:0d:38:cc:dc:e6:29:a3:4d:84:a0:
c0:7e:a9:33:a9:ad:f7:16:c6:db:92:0b:50:b7:18:
e4:7c:1e:2e:14:68:39:95:dd:19:b5:15:af:88:ff:
d3:c3:91:41:1f:d1:ab:20:ac:a9:38:84:53:2b:79:
6f:4e:c3:d4:1c:e5:a2:f1:55:a8:29:f1:da:7c:d9:
19:fd:ae:42:16:7d:6c:94:11:6d:43:bd:97:5a:ee:
78:45:13:77:3f:91:fe:0f:7b:62:73:c6:d2:95:b7:
75:21:17:78:f5:3a:16:16:4f:51:86:36:0e:55:50:
fc:84:63:f7:0d:9e:b4:58:ee:5a:ce:7a:77:43:56:
13:53:f0:9d:af:0c:d0:c8:36:08:ea:11:43:0c:a7:
7e:3b:5b:80:fc:3f:44:bf:eb:38:4c:a2:67:f0:a5:
bc:46:7d:ef:10:bc:2e:88:1c:b2:9b:69:45:ea:d4:
74:5b:07:7e:11:df:6c:6b:0a:2a:7b:5a:9d:10:3e:
56:dc:ec:e2:14:5e:b4:8b:3f:c4:e0:12:34:2e:c6:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:65:46:BC:9F:09:D1:EA:42:16:B9:EA:3D:D9:27:EF:97:3B:E9
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4F6E3BDCD56411EE9EB80AB8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.99.249.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4d:4e:32:0c:ff:99:76:a7:27:1c:de:b4:26:b4:52:4d:4e:
84:b3:a5:a1:f9:36:2b:91:3a:c5:46:87:0a:60:b5:5e:cb:9d:
33:d5:0b:80:57:1f:57:02:1f:36:c4:07:39:c4:9f:c4:c2:be:
8e:d0:f2:0a:d2:35:6c:6a:4e:b3:16:90:3d:84:2e:b6:df:17:
20:4e:64:7e:53:cd:f6:37:fc:bc:3a:bf:ad:7a:e2:88:f4:74:
c3:26:42:d5:2b:68:1e:a5:7d:e2:cd:6f:db:01:32:5f:47:4c:
ff:14:35:e7:c8:5b:b3:8a:76:d0:3b:42:c2:23:36:4b:30:18:
e5:e2:ca:31:8b:d7:64:01:ec:22:60:f3:14:bd:13:f4:6d:31:
bd:47:bc:4e:34:2b:87:2d:a5:4a:ea:33:35:6f:a1:2c:9e:ab:
b1:ac:1f:3a:d2:3f:a8:70:f1:e3:8c:ed:94:57:2d:dc:69:85:
b3:03:a3:be:57:a2:5f:83:b8:b5:b5:26:78:6f:d2:5a:65:f5:
d5:4f:a0:73:4a:c4:dc:ec:77:c8:38:a8:34:8f:91:3a:d6:b1:
f5:89:ae:dd:69:5d:f5:39:9d:00:3d:9e:df:1c:e1:ad:54:14:
82:44:6a:b9:21:dd:75:2b:48:60:fc:87:ed:53:47:8c:f9:02:
b5:ea:16:7f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yNDAyMjcxMTM1MjZaFw0zNDAyMjgxMTM1MjZaMBgxFjAU
BgNVBAMTDTY1ZGRjOTAyLWE3YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCszwxPy7UQaa/lDt82u66q7JO6tF3aME5MRm4vWqOpmmoaKpurH1oLd3ua
9GS1N10jDTjM3OYpo02EoMB+qTOprfcWxtuSC1C3GOR8Hi4UaDmV3Rm1Fa+I/9PD
kUEf0asgrKk4hFMreW9Ow9Qc5aLxVagp8dp82Rn9rkIWfWyUEW1DvZda7nhFE3c/
kf4Pe2JzxtKVt3UhF3j1OhYWT1GGNg5VUPyEY/cNnrRY7lrOendDVhNT8J2vDNDI
NgjqEUMMp347W4D8P0S/6zhMomfwpbxGfe8QvC6IHLKbaUXq1HRbB34R32xrCip7
Wp0QPlbc7OIUXrSLP8TgEjQuxkcTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2zdl
RryfCdHqQha56j3ZJ++XO+kwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4LzRGNkUzQkRDRDU2NDExRUU5RUI4MEFCODc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADFY/kwDQYJKoZIhvcNAQEL
BQADggEBAFlNTjIM/5l2pycc3rQmtFJNToSzpaH5NiuROsVGhwpgtV7LnTPVC4BX
H1cCHzbEBznEn8TCvo7Q8grSNWxqTrMWkD2ELrbfFyBOZH5TzfY3/Lw6v6164oj0
dMMmQtUraB6lfeLNb9sBMl9HTP8UNefIW7OKdtA7QsIjNkswGOXiyjGL12QB7CJg
8xS9E/RtMb1HvE40K4ctpUrqMzVvoSyeq7GsHzrSP6hw8eOM7ZRXLdxphbMDo75X
ol+DuLW1Jnhv0lpl9dVPoHNKxNzsd8g4qDSPkTrWsfWJrt1pXfU5nQA9nt8c4a1U
FIJEarkh3XUrSGD8h+1TR4z5ArXqFn8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org