Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DA7B3DC2B81311EBA275FE56F8AEA228.roa
File: DA7B3DC2B81311EBA275FE56F8AEA228.roa (raw, json)
Hash identifier: nL9CJetvB0msKEo0HLAwTXpNbMYxFdAzkG8swuzpAXU=
Subject key identifier: 98:B8:45:DA:93:5A:ED:C6:A6:AF:70:58:B0:D7:C7:15:8D:12:55:BC
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 012B
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DA7B3DC2B81311EBA275FE56F8AEA228.roa
Signing time: Tue 18 May 2021 20:01:38 +0000
ROA not before: Tue 18 May 2021 20:01:31 +0000
ROA not after: Sat 18 May 2041 20:01:31 +0000
asID: 3741
IP address blocks: 196.2.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 18 20:01:31 2021 GMT
Not After : May 18 20:01:31 2041 GMT
Subject: CN=60a41d21-a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:c5:b6:c3:7f:08:c3:4f:0c:3a:d7:d9:42:
d7:eb:8c:8e:18:9b:a7:b9:1d:a4:26:26:a8:29:37:
f5:15:f8:e1:2b:ca:86:2e:04:84:a5:61:c6:fd:e0:
3a:0f:a3:bd:58:0d:3a:be:40:69:09:f8:89:0c:87:
fd:11:02:80:81:b8:7d:8b:dd:3b:af:80:db:ff:76:
c2:4b:70:2e:b6:ad:83:ad:95:dd:60:f4:42:83:1c:
6f:5a:f8:24:f7:16:4e:c1:c0:bc:d7:1a:d4:95:ce:
f5:95:35:5a:10:a3:88:52:f8:70:be:44:34:0f:c5:
f6:89:5e:66:43:7d:09:e3:4a:02:6b:a1:36:0b:7b:
0b:2e:1c:a1:6b:68:ee:b2:4a:8d:ea:0c:84:0a:03:
38:1f:85:35:05:4d:77:0e:d7:9d:8f:e3:0d:62:9c:
2c:cf:25:7c:dd:9f:01:96:e0:fa:c3:ff:36:2f:00:
e8:9a:3a:57:25:2b:44:07:2b:e4:18:d4:2e:91:ba:
f1:60:c6:e6:1e:33:17:75:4a:83:86:83:d6:ed:cf:
3a:0c:dd:67:4f:04:ee:7e:0a:da:22:34:f8:85:0b:
55:5d:9e:29:fa:53:4e:85:87:40:bc:7a:4d:ea:8e:
9d:04:8f:5d:39:35:d5:a6:b3:25:8d:7d:51:19:7e:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:45:DA:93:5A:ED:C6:A6:AF:70:58:B0:D7:C7:15:8D:12:55:BC
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DA7B3DC2B81311EBA275FE56F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e9:53:d3:bb:72:d5:e7:06:e8:34:d6:c2:35:b7:ed:c1:60:
27:1f:b9:2b:da:e3:3c:f9:1b:39:41:ce:f3:ee:98:26:a6:63:
ad:90:00:48:78:df:b5:7d:a7:ea:ed:c6:ba:df:1e:c7:f5:61:
91:f8:ba:a6:9f:81:3d:69:26:7c:33:e7:17:61:01:83:76:c2:
ea:04:2b:6d:95:33:c8:8d:44:41:b7:31:c6:55:9f:3e:03:a4:
da:6c:0d:18:ae:59:c5:e6:37:3a:46:e9:c8:86:49:30:ea:a5:
eb:14:a4:87:b3:a1:50:50:4d:96:08:2d:25:8c:a0:79:65:00:
b8:f1:a9:bb:41:13:11:6f:a6:41:59:23:99:81:e5:56:73:55:
d0:2e:b6:be:26:dd:36:19:6a:62:3c:fd:9e:1d:bd:e3:13:e9:
e1:dc:0f:4c:d6:cd:7d:ed:ca:ca:ac:31:66:af:69:27:59:15:
15:39:83:c3:7a:a4:2d:5e:13:d7:1b:8c:69:c1:7c:cd:30:6e:
8b:66:41:dd:fd:88:d5:16:d4:a0:dc:4e:99:d8:34:e5:04:3a:
da:b3:51:a5:2b:e6:75:63:52:da:99:4d:89:38:08:a9:61:d2:
01:68:5b:69:71:24:6b:d2:f4:52:83:c3:a0:1c:3b:e5:7e:28:
f5:bf:73:0a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICASswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTA1MTgyMDAxMzFaFw00MTA1MTgyMDAxMzFaMBgxFjAU
BgNVBAMTDTYwYTQxZDIxLWEyNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT5MW2w38Iw08MOtfZQtfrjI4Ym6e5HaQmJqgpN/UV+OEryoYuBISlYcb9
4DoPo71YDTq+QGkJ+IkMh/0RAoCBuH2L3TuvgNv/dsJLcC62rYOtld1g9EKDHG9a
+CT3Fk7BwLzXGtSVzvWVNVoQo4hS+HC+RDQPxfaJXmZDfQnjSgJroTYLewsuHKFr
aO6ySo3qDIQKAzgfhTUFTXcO152P4w1inCzPJXzdnwGW4PrD/zYvAOiaOlclK0QH
K+QY1C6RuvFgxuYeMxd1SoOGg9btzzoM3WdPBO5+CtoiNPiFC1Vdnin6U06Fh0C8
ek3qjp0Ej105NdWmsyWNfVEZfhoLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmLhF
2pNa7camr3BYsNfHFY0SVbwwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4L0RBN0IzREMyQjgxMzExRUJBMjc1RkU1NkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEApYwDQYJKoZIhvcNAQEL
BQADggEBAJvpU9O7ctXnBug01sI1t+3BYCcfuSva4zz5GzlBzvPumCamY62QAEh4
37V9p+rtxrrfHsf1YZH4uqafgT1pJnwz5xdhAYN2wuoEK22VM8iNREG3McZVnz4D
pNpsDRiuWcXmNzpG6ciGSTDqpesUpIezoVBQTZYILSWMoHllALjxqbtBExFvpkFZ
I5mB5VZzVdAutr4m3TYZamI8/Z4dveMT6eHcD0zWzX3tysqsMWavaSdZFRU5g8N6
pC1eE9cbjGnBfM0wbotmQd39iNUW1KDcTpnYNOUEOtqzUaUr5nVjUtqZTYk4CKlh
0gFoW2lxJGvS9FKDw6AcO+V+KPW/cwo=
-----END CERTIFICATE-----
Generated at Tue May 28 02:03:53 2024 by rpki-client on console-fra.rpki-client.org