Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/670D5B028C5F11EB8848A348F8AEA228.roa
File: 670D5B028C5F11EB8848A348F8AEA228.roa (raw, json)
Hash identifier: 6at9CemceUCuz+5JDwwXey0Qi+5k0q8f1mPdDjCI2zQ=
Subject key identifier: F8:AE:14:68:57:97:EE:5F:51:3D:48:D0:AF:41:4A:8F:82:7D:14:49
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 41
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/670D5B028C5F11EB8848A348F8AEA228.roa
Signing time: Wed 24 Mar 2021 05:11:35 +0000
ROA not before: Wed 24 Mar 2021 05:11:28 +0000
ROA not after: Mon 24 Mar 2031 05:11:28 +0000
asID: 10474
IP address blocks: 197.80.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 05:11:28 2021 GMT
Not After : Mar 24 05:11:28 2031 GMT
Subject: CN=605aca06-df6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:ab:e5:6e:1d:4a:da:14:7a:20:09:52:14:
5a:f5:10:93:23:9b:5f:22:a2:31:21:d5:e3:5c:1a:
7a:c4:27:5c:ff:85:ad:b7:02:29:1e:20:11:5f:58:
94:67:60:b8:01:cb:59:00:e2:56:29:05:82:cf:72:
2d:fd:02:5f:dc:32:e0:ed:3c:f6:44:9a:f0:1e:14:
b5:08:d8:19:f2:1f:0a:84:96:1a:2b:3c:fd:57:af:
e9:ba:55:3a:5f:46:e4:60:1c:c2:4a:e7:03:20:c7:
5f:9c:57:bb:b5:7a:dd:f7:2d:5a:77:b4:8e:02:b6:
92:6b:44:aa:ba:05:c4:c5:bb:e7:ab:6c:e2:7f:50:
bf:84:52:a4:bb:c7:cf:bb:5f:7b:74:de:f0:14:5f:
5f:70:7c:87:49:ae:63:7e:1b:26:31:e5:10:da:86:
22:15:c3:4f:a2:bd:45:4d:3b:a4:42:6a:98:91:b4:
dd:d4:d6:a3:9a:eb:47:03:22:b5:18:d9:af:88:ec:
f0:f1:02:45:ae:06:db:8c:a8:b6:c6:8d:3a:d7:ed:
ac:31:f6:d4:d5:f2:cc:a4:37:de:a4:45:38:6e:15:
fe:c1:ea:5a:01:69:8a:76:23:56:f4:8d:2f:ab:b4:
ea:24:60:f8:8f:ef:bb:a7:5e:6d:3f:0a:a6:90:82:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:14:68:57:97:EE:5F:51:3D:48:D0:AF:41:4A:8F:82:7D:14:49
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/670D5B028C5F11EB8848A348F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.80.0.0/13
Signature Algorithm: sha256WithRSAEncryption
80:be:ac:0d:7a:4f:5c:72:d5:4c:46:ee:fd:b5:1f:41:2b:20:
91:00:5d:a0:8f:ca:26:47:04:8b:02:a0:6d:ed:98:23:40:37:
b0:2e:cd:99:39:f1:19:df:16:59:36:08:95:56:b6:0d:b4:a0:
5d:f9:e7:70:f3:77:5d:68:1b:54:15:a0:80:25:e7:7e:9c:4a:
fd:55:f7:d4:a3:84:90:c3:b3:57:06:97:54:97:bc:52:cd:3c:
1d:aa:a5:49:18:94:09:39:63:8c:59:2d:54:6e:7d:85:a7:2e:
2b:0a:3d:91:2f:57:c2:6b:2b:37:32:04:fb:86:81:30:7c:3c:
a2:24:16:40:bc:2a:df:a9:ec:a2:98:a2:41:b8:89:0f:b8:6f:
70:47:7b:f5:75:ea:49:b9:53:4a:65:b5:c7:d2:f6:8c:8d:14:
d5:3f:93:a3:9b:71:c8:97:be:5e:14:88:fc:cc:88:42:d8:af:
95:26:a7:d0:4d:1b:9c:36:e4:68:16:60:e4:7b:55:34:ef:15:
c7:ec:ce:e0:5e:ea:90:aa:08:c1:23:73:83:a8:13:bc:ec:c7:
23:e6:a3:2b:e5:4d:8b:fe:97:9d:4e:f6:8a:81:c7:3d:dc:f6:
7c:d0:36:4e:d4:10:f7:51:fa:2f:de:6f:81:94:4b:6c:5b:c3:
37:5e:b9:70
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBQTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
QjIxNkFGMTEwLwYDVQQFEygyRjQwN0ZFQ0Q4QjdERERDQTVENUI5MEE1RTE5NTg5
RDA2QzEwMURDMB4XDTIxMDMyNDA1MTEyOFoXDTMxMDMyNDA1MTEyOFowGDEWMBQG
A1UEAxMNNjA1YWNhMDYtZGY2YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJV3q+VuHUraFHogCVIUWvUQkyObXyKiMSHV41waesQnXP+FrbcCKR4gEV9Y
lGdguAHLWQDiVikFgs9yLf0CX9wy4O089kSa8B4UtQjYGfIfCoSWGis8/Vev6bpV
Ol9G5GAcwkrnAyDHX5xXu7V63fctWne0jgK2kmtEqroFxMW756ts4n9Qv4RSpLvH
z7tfe3Te8BRfX3B8h0muY34bJjHlENqGIhXDT6K9RU07pEJqmJG03dTWo5rrRwMi
tRjZr4js8PECRa4G24yotsaNOtftrDH21NXyzKQ33qRFOG4V/sHqWgFpinYjVvSN
L6u06iRg+I/vu6debT8KppCCu70CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBT4rhRo
V5fuX1E9SNCvQUqPgn0USTAfBgNVHSMEGDAWgBQvQH/s2Lfd3KXVuQpeGVidBsEB
3DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0IyMTYvMzZBQzBGOTY4N0Q1MTFFQkFBRkYzNDQ3RjhBRUEyMjgvTDBCXzdO
aTMzZHlsMWJrS1hobFluUWJCQWR3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTDBCXzdOaTMzZHlsMWJrS1hobFluUWJCQWR3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0IyMTYvMzZBQzBGOTY4N0Q1MTFFQkFBRkYzNDQ3RjhB
RUEyMjgvNjcwRDVCMDI4QzVGMTFFQjg4NDhBMzQ4RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDA8VQMA0GCSqGSIb3DQEBCwUA
A4IBAQCAvqwNek9cctVMRu79tR9BKyCRAF2gj8omRwSLAqBt7ZgjQDewLs2ZOfEZ
3xZZNgiVVrYNtKBd+edw83ddaBtUFaCAJed+nEr9VffUo4SQw7NXBpdUl7xSzTwd
qqVJGJQJOWOMWS1Ubn2Fpy4rCj2RL1fCays3MgT7hoEwfDyiJBZAvCrfqeyimKJB
uIkPuG9wR3v1depJuVNKZbXH0vaMjRTVP5Ojm3HIl75eFIj8zIhC2K+VJqfQTRuc
NuRoFmDke1U07xXH7M7gXuqQqgjBI3ODqBO87Mcj5qMr5U2L/pedTvaKgcc93PZ8
0DZO1BD3Ufov3m+BlEtsW8M3Xrlw
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org