Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/86345C38BCD411EBB7A89D0AF8AEA228.roa
File: 86345C38BCD411EBB7A89D0AF8AEA228.roa (raw, json)
Hash identifier: fRGS8Sf/8nvrWEg73kzWoEtxQs0sMd7rysN6n95GEfg=
Subject key identifier: D1:80:92:C3:C0:48:7D:AE:72:22:5E:A3:2F:A6:86:41:EA:B5:40:1F
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0167
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/86345C38BCD411EBB7A89D0AF8AEA228.roa
Signing time: Mon 24 May 2021 21:10:53 +0000
ROA not before: Mon 24 May 2021 21:10:43 +0000
ROA not after: Fri 24 May 2041 21:10:43 +0000
asID: 3741
IP address blocks: 197.81.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 21:10:43 2021 GMT
Not After : May 24 21:10:43 2041 GMT
Subject: CN=60ac165d-0ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:71:80:55:42:29:a9:0c:8d:9c:8b:3a:e0:
b4:c5:0f:92:a8:f8:b4:fd:ff:e2:93:c2:c0:02:02:
0c:50:ff:ac:f3:0b:1d:5a:ac:72:ea:57:e1:da:bc:
2d:9c:d7:e0:87:af:5d:ac:44:2b:6f:07:6f:20:9f:
e0:97:b7:e0:0d:02:d9:8f:45:a0:41:e6:eb:d1:a5:
23:65:b9:d6:bf:04:d3:cb:32:9b:27:1f:1c:e3:00:
2e:aa:f7:ab:02:3a:9b:7a:41:78:f0:cd:dc:8a:68:
53:f9:f9:74:4e:a6:da:f8:5c:51:b3:35:31:f7:ca:
d6:0d:e6:1f:e4:72:03:35:8e:69:fd:1b:d6:e8:3b:
7f:2c:f3:45:41:49:c6:27:bd:eb:d2:a7:22:cb:50:
f8:b3:ae:a7:6f:b6:40:73:e0:70:2e:e3:9f:16:55:
ea:e5:ad:6e:9a:ac:5c:a4:05:ee:71:ad:5c:7c:a8:
f4:cb:35:01:72:cf:d7:4f:3e:db:9a:60:6c:75:a5:
65:31:a0:e5:87:67:f1:4d:de:1e:62:6e:4f:f9:4d:
97:31:23:fc:a8:cd:22:02:ea:1f:f9:71:9f:f3:5f:
6e:37:ab:d9:fa:c3:34:59:04:01:9c:59:15:4f:f7:
71:5f:b6:a9:81:cf:7c:da:d4:4b:2b:de:16:e8:55:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:92:C3:C0:48:7D:AE:72:22:5E:A3:2F:A6:86:41:EA:B5:40:1F
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/86345C38BCD411EBB7A89D0AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.81.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9f:60:0c:3f:3a:1d:ab:cb:9a:91:1a:98:53:f7:a0:5a:8c:
54:df:9a:da:4a:22:7d:e9:dd:81:9b:af:8f:98:24:e8:40:d8:
f6:b9:8c:3e:c8:e3:8a:bc:0f:eb:87:ee:a0:cd:65:65:36:8c:
7a:bb:e9:97:5a:ca:64:78:94:a4:ea:3a:c8:72:75:d2:f5:f6:
72:dd:d5:02:30:90:81:7e:aa:da:4e:70:88:9f:b3:f8:0e:42:
ae:40:5b:1b:cd:a9:f8:8d:b8:6a:65:9d:a2:8f:da:3b:68:d1:
f7:d2:6c:b7:b4:9a:5e:f1:55:6a:2a:43:f2:2b:cc:90:1b:b5:
42:6d:7f:3d:6f:c0:98:c0:ee:aa:b5:2f:8f:7e:a7:92:af:ef:
83:fc:6d:1c:6d:fc:86:25:a1:ab:d1:6e:cc:b2:cc:b5:91:2a:
94:59:e2:71:3c:d5:ea:f3:4f:4f:f6:43:05:69:ff:61:30:7f:
b8:c1:98:06:56:6a:5e:0b:b1:f8:5a:65:75:02:82:fc:0e:40:
7e:d5:b1:1c:e5:bb:79:a0:ae:36:02:be:9e:e2:76:4d:3e:6b:
63:cc:90:fe:94:73:d3:96:5f:ae:51:d1:46:42:67:7d:7b:e0:
a4:75:fb:af:53:f5:5c:e1:5c:2e:db:56:5d:11:22:2a:98:83:
b6:eb:18:99
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTA1MjQyMTEwNDNaFw00MTA1MjQyMTEwNDNaMBgxFjAU
BgNVBAMTDTYwYWMxNjVkLTBiYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/sXGAVUIpqQyNnIs64LTFD5Ko+LT9/+KTwsACAgxQ/6zzCx1arHLqV+Ha
vC2c1+CHr12sRCtvB28gn+CXt+ANAtmPRaBB5uvRpSNluda/BNPLMpsnHxzjAC6q
96sCOpt6QXjwzdyKaFP5+XROptr4XFGzNTH3ytYN5h/kcgM1jmn9G9boO38s80VB
ScYnvevSpyLLUPizrqdvtkBz4HAu458WVerlrW6arFykBe5xrVx8qPTLNQFyz9dP
PtuaYGx1pWUxoOWHZ/FN3h5ibk/5TZcxI/yozSIC6h/5cZ/zX243q9n6wzRZBAGc
WRVP93FftqmBz3za1Esr3hboVd67AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0YCS
w8BIfa5yIl6jL6aGQeq1QB8wHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4Lzg2MzQ1QzM4QkNENDExRUJCN0E4OUQwQUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADFUZkwDQYJKoZIhvcNAQEL
BQADggEBAB6fYAw/Oh2ry5qRGphT96BajFTfmtpKIn3p3YGbr4+YJOhA2Pa5jD7I
44q8D+uH7qDNZWU2jHq76ZdaymR4lKTqOshyddL19nLd1QIwkIF+qtpOcIifs/gO
Qq5AWxvNqfiNuGplnaKP2jto0ffSbLe0ml7xVWoqQ/IrzJAbtUJtfz1vwJjA7qq1
L49+p5Kv74P8bRxt/IYloavRbsyyzLWRKpRZ4nE81erzT0/2QwVp/2Ewf7jBmAZW
al4LsfhaZXUCgvwOQH7VsRzlu3mgrjYCvp7idk0+a2PMkP6Uc9OWX65R0UZCZ317
4KR1+69T9VzhXC7bVl0RIiqYg7brGJk=
-----END CERTIFICATE-----
Generated at Sun May 19 02:58:56 2024 by rpki-client on console-ams.rpki-client.org