Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8E2D5128D56411EEA63167B8775412E6.roa
File: 8E2D5128D56411EEA63167B8775412E6.roa (raw, json)
Hash identifier: P9NltESFRgnxLac5AnZGlJ3H17e3/9jIUTXgZmgr9/c=
Subject key identifier: E7:C0:10:F2:A6:63:9F:72:48:2B:E6:24:9A:6F:55:11:13:E4:73:B6
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 05C4
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8E2D5128D56411EEA63167B8775412E6.roa
Signing time: Tue 27 Feb 2024 11:37:15 +0000
ROA not before: Tue 27 Feb 2024 11:37:11 +0000
ROA not after: Tue 28 Feb 2034 11:37:11 +0000
asID: 20011
IP address blocks: 197.97.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1476 (0x5c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Feb 27 11:37:11 2024 GMT
Not After : Feb 28 11:37:11 2034 GMT
Subject: CN=65ddc96b-7b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:45:79:49:86:b0:5b:a3:12:47:e9:35:b2:
ee:8c:f6:59:f9:82:fd:0b:54:d2:42:55:68:7e:5f:
bf:02:f3:18:48:8d:e6:ec:75:46:6d:39:94:3e:3d:
99:3c:f8:8d:32:28:b8:a0:cb:1e:0b:be:c2:07:76:
8a:93:a7:db:69:64:65:61:7f:a7:5f:9f:90:84:49:
ce:da:6f:40:55:97:52:0c:82:b8:c9:0d:c9:22:9e:
b4:53:80:93:08:cd:91:9a:3e:72:68:da:23:05:20:
45:64:36:e0:10:14:37:11:44:5c:2e:95:70:6c:15:
0a:a5:c8:f3:e2:98:4c:a7:b0:ee:a8:94:18:82:cf:
47:23:fe:f2:1f:96:b4:01:f4:d1:2b:9c:22:aa:88:
04:7f:94:9a:76:cc:a9:b1:e7:21:41:06:b3:b1:0e:
86:29:d1:d4:33:48:0c:f0:94:87:96:00:29:e8:e6:
00:4b:56:a5:87:25:d4:62:ba:25:fe:58:0e:ce:33:
83:c2:9a:e6:24:e9:89:fd:02:ae:e5:4c:21:99:ca:
fb:17:ea:c0:56:8d:44:d0:77:b0:83:db:17:56:c6:
71:13:83:d3:22:87:4b:23:25:73:e4:f7:c1:d0:f4:
69:40:b3:66:0b:ae:04:38:9e:1f:9b:d5:81:0e:1d:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:10:F2:A6:63:9F:72:48:2B:E6:24:9A:6F:55:11:13:E4:73:B6
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8E2D5128D56411EEA63167B8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.97.20.0/22
Signature Algorithm: sha256WithRSAEncryption
25:98:58:a1:f2:2e:4d:47:ac:a0:cd:df:71:c5:32:18:8a:49:
82:e7:65:ca:59:90:b8:b9:2c:c2:ea:9d:ac:35:c8:c4:c3:81:
b4:86:3f:7d:09:10:9d:27:b6:56:90:ed:de:4d:a0:bf:79:ec:
96:2c:70:10:59:8a:aa:e6:e1:88:08:09:c3:48:2b:9a:c7:07:
03:a4:82:ef:5a:e9:3a:74:9a:89:6c:93:99:3b:c2:16:98:a6:
17:0d:2c:9d:9d:75:d4:01:24:ec:e1:cc:fe:43:e8:d6:3d:88:
a8:ba:f2:44:07:d6:07:f7:d5:02:ed:46:3d:1f:a7:42:17:a0:
bd:0c:6f:a5:03:8d:8c:d4:af:7f:f8:55:65:28:8b:f9:f0:fc:
e2:7e:af:c5:63:59:16:2a:41:b9:fb:59:38:a2:a6:1b:1a:68:
b4:4a:3d:a1:56:3a:f1:01:57:c8:43:85:dc:d4:ae:c3:64:af:
89:9c:4c:8d:ed:48:9d:64:5b:f6:65:b6:74:b8:65:8e:65:84:
05:a5:ca:cf:17:0c:3a:72:9b:05:31:df:bc:40:42:da:c0:96:
9a:74:10:6d:27:f3:c0:86:8d:38:2d:5a:94:60:8d:25:9d:4f:
cb:ec:c1:9a:da:12:1b:a1:4f:98:fa:f7:1b:d8:4d:17:a3:2f:
dc:d9:5b:e5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yNDAyMjcxMTM3MTFaFw0zNDAyMjgxMTM3MTFaMBgxFjAU
BgNVBAMTDTY1ZGRjOTZiLTdiM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVvEV5SYawW6MSR+k1su6M9ln5gv0LVNJCVWh+X78C8xhIjebsdUZtOZQ+
PZk8+I0yKLigyx4LvsIHdoqTp9tpZGVhf6dfn5CESc7ab0BVl1IMgrjJDckinrRT
gJMIzZGaPnJo2iMFIEVkNuAQFDcRRFwulXBsFQqlyPPimEynsO6olBiCz0cj/vIf
lrQB9NErnCKqiAR/lJp2zKmx5yFBBrOxDoYp0dQzSAzwlIeWACno5gBLVqWHJdRi
uiX+WA7OM4PCmuYk6Yn9Aq7lTCGZyvsX6sBWjUTQd7CD2xdWxnETg9Mih0sjJXPk
98HQ9GlAs2YLrgQ4nh+b1YEOHRJXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU58AQ
8qZjn3JIK+Ykmm9VERPkc7YwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4LzhFMkQ1MTI4RDU2NDExRUVBNjMxNjdCODc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALFYRQwDQYJKoZIhvcNAQEL
BQADggEBACWYWKHyLk1HrKDN33HFMhiKSYLnZcpZkLi5LMLqnaw1yMTDgbSGP30J
EJ0ntlaQ7d5NoL957JYscBBZiqrm4YgICcNIK5rHBwOkgu9a6Tp0molsk5k7whaY
phcNLJ2dddQBJOzhzP5D6NY9iKi68kQH1gf31QLtRj0fp0IXoL0Mb6UDjYzUr3/4
VWUoi/nw/OJ+r8VjWRYqQbn7WTiiphsaaLRKPaFWOvEBV8hDhdzUrsNkr4mcTI3t
SJ1kW/ZltnS4ZY5lhAWlys8XDDpymwUx37xAQtrAlpp0EG0n88CGjTgtWpRgjSWd
T8vswZraEhuhT5j69xvYTRejL9zZW+U=
-----END CERTIFICATE-----
Generated at Sun May 19 02:39:31 2024 by rpki-client on console-fra.rpki-client.org