Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9AE3BD2A8C7F11EBA28A076DF8AEA228.roa
File: 9AE3BD2A8C7F11EBA28A076DF8AEA228.roa (raw, json)
Hash identifier: 2cZe/Jyc5MPwujEBGLErrH4XO0uKrFQmN569pquYXhE=
Subject key identifier: C4:88:8F:0D:57:97:E8:B2:73:41:EF:C1:06:04:44:B5:3C:B0:9A:98
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 8E
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9AE3BD2A8C7F11EBA28A076DF8AEA228.roa
Signing time: Wed 24 Mar 2021 09:02:05 +0000
ROA not before: Wed 24 Mar 2021 09:01:58 +0000
ROA not after: Mon 24 Mar 2031 09:01:58 +0000
asID: 12258
IP address blocks: 197.81.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 09:01:58 2021 GMT
Not After : Mar 24 09:01:58 2031 GMT
Subject: CN=605b000d-3aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:b7:65:ee:69:13:54:4c:cb:ab:26:b9:6b:
3e:7e:dd:db:59:82:63:95:85:04:dd:38:d8:9e:79:
52:6e:f4:4e:95:6d:96:2f:fd:66:4f:e2:64:39:27:
0d:b0:9d:5a:5f:c2:cc:88:2a:46:ac:ae:af:e6:3e:
22:ca:38:64:df:38:43:f2:2d:1a:db:0f:39:53:ed:
83:32:ad:3b:93:8c:b9:a0:57:7c:0c:a6:11:84:a7:
f3:aa:af:37:e8:7d:e8:e8:c0:34:49:ea:72:54:1e:
11:5f:7e:0a:19:ef:ed:33:a2:06:de:49:3c:f9:16:
4d:a4:19:1c:ff:c4:4e:e5:8a:85:1f:d5:fd:89:dc:
d2:7f:71:c3:ff:b9:c7:67:be:15:5e:90:a4:bc:b3:
cf:94:9d:92:f6:29:5f:42:cd:56:8b:ea:64:72:f4:
e9:07:58:db:13:1c:a6:cc:18:fb:6b:79:dc:fb:ce:
a5:0e:e2:53:35:0a:e5:16:e1:72:7b:eb:17:0e:01:
92:d5:6a:af:0f:1d:73:be:32:4e:2b:ff:2e:3e:58:
4a:57:97:52:11:c9:82:a6:29:18:e7:d1:56:71:d3:
14:43:c3:c1:fa:b1:fd:3c:58:e1:d5:39:ea:dc:0a:
e3:00:bb:70:61:ca:87:bd:3a:6e:bf:aa:76:82:4f:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:88:8F:0D:57:97:E8:B2:73:41:EF:C1:06:04:44:B5:3C:B0:9A:98
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9AE3BD2A8C7F11EBA28A076DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.81.155.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e6:4f:bf:4a:9a:3c:f9:eb:19:b0:7c:81:83:54:9b:49:0e:
17:bb:34:89:f6:07:05:5d:86:15:10:54:67:43:d6:8d:25:95:
78:e8:29:95:9a:e2:fe:2d:36:b5:72:25:fd:5f:1d:65:54:ff:
ff:0d:4e:16:e2:77:98:a0:06:32:3f:aa:7a:cf:0f:85:19:83:
6f:27:0c:b0:2b:5c:40:23:1d:25:f0:71:a4:a0:89:b7:cd:3c:
c6:cb:1f:d7:56:03:68:05:65:6f:05:34:8b:8c:c1:39:7d:b8:
66:6f:84:08:3e:69:2d:b8:64:52:c9:d5:81:72:ea:a3:fd:5f:
23:6a:cf:48:ef:7d:5c:45:b3:a0:8d:31:2d:ef:e8:cf:05:02:
98:8c:65:63:1d:ee:67:1d:de:e2:cd:41:15:97:fb:86:0b:1c:
4c:8b:75:99:cb:60:e9:aa:81:c3:61:68:5d:36:4c:57:c0:19:
9a:97:f2:94:04:47:a1:16:05:f5:bd:91:eb:2d:60:43:36:ad:
1f:51:9f:ef:56:9e:56:09:e5:d5:25:77:24:97:b5:62:04:da:
58:e1:39:49:dd:2a:52:69:e7:a9:ea:f7:1c:83:6b:ea:f4:b8:
80:7a:da:ce:4a:89:3f:7a:86:c3:2c:fc:32:4b:c9:ba:04:dc:
d7:f6:cd:2a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTAzMjQwOTAxNThaFw0zMTAzMjQwOTAxNThaMBgxFjAU
BgNVBAMTDTYwNWIwMDBkLTNhZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0G7dl7mkTVEzLqya5az5+3dtZgmOVhQTdONieeVJu9E6VbZYv/WZP4mQ5
Jw2wnVpfwsyIKkasrq/mPiLKOGTfOEPyLRrbDzlT7YMyrTuTjLmgV3wMphGEp/Oq
rzfofejowDRJ6nJUHhFffgoZ7+0zogbeSTz5Fk2kGRz/xE7lioUf1f2J3NJ/ccP/
ucdnvhVekKS8s8+UnZL2KV9CzVaL6mRy9OkHWNsTHKbMGPtredz7zqUO4lM1CuUW
4XJ76xcOAZLVaq8PHXO+Mk4r/y4+WEpXl1IRyYKmKRjn0VZx0xRDw8H6sf08WOHV
OercCuMAu3Bhyoe9Om6/qnaCT4ipAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxIiP
DVeX6LJzQe/BBgREtTywmpgwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4LzlBRTNCRDJBOEM3RjExRUJBMjhBMDc2REY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADFUZswDQYJKoZIhvcNAQEL
BQADggEBABLmT79Kmjz56xmwfIGDVJtJDhe7NIn2BwVdhhUQVGdD1o0llXjoKZWa
4v4tNrVyJf1fHWVU//8NThbid5igBjI/qnrPD4UZg28nDLArXEAjHSXwcaSgibfN
PMbLH9dWA2gFZW8FNIuMwTl9uGZvhAg+aS24ZFLJ1YFy6qP9XyNqz0jvfVxFs6CN
MS3v6M8FApiMZWMd7mcd3uLNQRWX+4YLHEyLdZnLYOmqgcNhaF02TFfAGZqX8pQE
R6EWBfW9kestYEM2rR9Rn+9WnlYJ5dUldySXtWIE2ljhOUndKlJp56nq9xyDa+r0
uIB62s5KiT96hsMs/DJLyboE3Nf2zSo=
-----END CERTIFICATE-----
Generated at Tue May 28 02:10:23 2024 by rpki-client on console-ams.rpki-client.org