Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/D157BD5EBCCA11EBB49C4A75F8AEA228.roa
File: D157BD5EBCCA11EBB49C4A75F8AEA228.roa (raw, json)
Hash identifier: J3docay2a+mQxu6cagWSWxOeJyWx0mqpB/72eijeZZY=
Subject key identifier: FE:1B:96:B7:A4:06:C9:8F:27:E9:1E:F1:F5:49:2F:B8:B8:61:E3:38
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 014C
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/D157BD5EBCCA11EBB49C4A75F8AEA228.roa
Signing time: Mon 24 May 2021 20:01:25 +0000
ROA not before: Mon 24 May 2021 20:01:18 +0000
ROA not after: Fri 24 May 2041 20:01:18 +0000
asID: 3741
IP address blocks: 196.2.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 20:01:18 2021 GMT
Not After : May 24 20:01:18 2041 GMT
Subject: CN=60ac0615-7136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:7a:4b:af:46:14:71:b7:28:13:18:3e:cb:
f8:8b:ff:4b:57:a8:30:e3:d3:bf:82:ae:b2:fc:e7:
aa:8e:84:35:79:b2:9e:71:0a:5d:d0:7d:21:cf:3e:
95:85:7b:c4:f1:00:59:8e:06:fd:b0:91:ef:67:22:
c4:fd:27:b2:bf:49:98:e5:1e:74:e9:0e:90:67:fa:
c0:f3:cc:3f:d4:21:2e:ec:4c:6b:5e:c3:1a:b5:ef:
c4:d3:b6:d1:0b:f5:25:a2:ec:c4:32:ef:c5:88:30:
f6:40:0c:8a:9d:eb:17:2a:d2:51:f5:61:bf:56:fb:
5f:7d:06:a6:31:50:b8:bc:00:02:4d:f9:25:33:ff:
0b:4d:ba:f2:97:96:33:c3:52:7e:74:30:a8:e4:95:
2d:c2:b7:b0:2a:55:95:e6:c5:40:42:42:e4:01:49:
03:4d:55:ee:f4:9a:5b:5e:61:7a:22:d2:79:56:5f:
d5:b0:e1:33:5c:64:e3:2a:b2:4f:45:38:27:4e:90:
2d:af:74:56:0b:ac:3f:bb:92:17:41:f6:5d:9c:a9:
34:a7:c9:3d:50:ea:b7:83:29:1b:de:37:c9:b2:07:
26:d7:c9:ec:0b:4c:44:88:cf:33:85:5a:b4:16:95:
19:df:9e:7a:85:99:87:e6:ba:d8:7c:8c:81:db:a7:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1B:96:B7:A4:06:C9:8F:27:E9:1E:F1:F5:49:2F:B8:B8:61:E3:38
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/D157BD5EBCCA11EBB49C4A75F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.32.0/22
Signature Algorithm: sha256WithRSAEncryption
77:aa:49:02:51:ec:01:1a:a5:d1:02:11:2d:71:15:92:8d:b7:
48:eb:7d:c0:07:9e:b4:8c:f2:c2:24:7d:b9:87:89:82:e2:88:
82:68:ac:20:10:d0:56:58:25:06:a1:40:59:8f:9d:42:37:37:
c1:cf:f4:0d:c4:bf:a2:4b:2b:95:1e:07:7d:ff:4b:c3:1e:7b:
5e:de:c7:9c:f9:b4:d6:8b:31:02:73:40:77:76:b5:23:0a:65:
84:b0:9f:41:25:39:94:88:8a:84:49:fc:5e:b5:fd:88:02:0b:
e4:82:fd:11:d6:0b:79:5b:64:7e:f0:5b:94:2d:1d:a2:54:9d:
4f:2c:6e:77:f5:b9:c0:21:d0:40:65:3b:39:dd:02:f8:1a:cb:
ed:2d:2d:27:8a:05:87:3a:40:ad:43:c7:c9:b3:07:bf:0d:31:
d6:41:b9:3f:35:e6:53:da:e2:eb:01:c7:d5:10:39:01:c8:91:
17:bf:dd:90:d9:f4:d3:d1:84:b4:1d:0d:3a:66:a8:ef:bb:7e:
8d:49:71:d3:cf:91:49:c8:95:98:83:d8:6a:42:dc:cc:52:ee:
6b:4b:51:ee:66:c8:87:c7:ab:55:86:cf:4b:be:ad:f5:09:85:
66:3c:df:71:c8:48:47:58:da:8e:90:60:61:0a:9d:fe:c1:58:
a9:11:94:92
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTA1MjQyMDAxMThaFw00MTA1MjQyMDAxMThaMBgxFjAU
BgNVBAMTDTYwYWMwNjE1LTcxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXmnpLr0YUcbcoExg+y/iL/0tXqDDj07+CrrL856qOhDV5sp5xCl3QfSHP
PpWFe8TxAFmOBv2wke9nIsT9J7K/SZjlHnTpDpBn+sDzzD/UIS7sTGtewxq178TT
ttEL9SWi7MQy78WIMPZADIqd6xcq0lH1Yb9W+199BqYxULi8AAJN+SUz/wtNuvKX
ljPDUn50MKjklS3Ct7AqVZXmxUBCQuQBSQNNVe70mlteYXoi0nlWX9Ww4TNcZOMq
sk9FOCdOkC2vdFYLrD+7khdB9l2cqTSnyT1Q6reDKRveN8myBybXyewLTESIzzOF
WrQWlRnfnnqFmYfmuth8jIHbp505AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/huW
t6QGyY8n6R7x9UkvuLhh4zgwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4L0QxNTdCRDVFQkNDQTExRUJCNDlDNEE3NUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALEAiAwDQYJKoZIhvcNAQEL
BQADggEBAHeqSQJR7AEapdECES1xFZKNt0jrfcAHnrSM8sIkfbmHiYLiiIJorCAQ
0FZYJQahQFmPnUI3N8HP9A3Ev6JLK5UeB33/S8Mee17ex5z5tNaLMQJzQHd2tSMK
ZYSwn0ElOZSIioRJ/F61/YgCC+SC/RHWC3lbZH7wW5QtHaJUnU8sbnf1ucAh0EBl
OzndAvgay+0tLSeKBYc6QK1Dx8mzB78NMdZBuT815lPa4usBx9UQOQHIkRe/3ZDZ
9NPRhLQdDTpmqO+7fo1JcdPPkUnIlZiD2GpC3MxS7mtLUe5myIfHq1WGz0u+rfUJ
hWY833HISEdY2o6QYGEKnf7BWKkRlJI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org