Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E7FEB4A89B7911EBAD5F206DF8AEA228.roa
File: E7FEB4A89B7911EBAD5F206DF8AEA228.roa (raw, json)
Hash identifier: hYTgNJl1cW4+pYFpbz6dVr7HFThTE62G5g5eP6zcf/s=
Subject key identifier: 63:87:CD:A7:23:5A:F4:0C:D7:65:02:EC:E8:7D:1C:03:AC:8A:E1:08
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: FA
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E7FEB4A89B7911EBAD5F206DF8AEA228.roa
Signing time: Mon 12 Apr 2021 10:29:05 +0000
ROA not before: Mon 12 Apr 2021 10:29:00 +0000
ROA not after: Wed 30 Apr 2031 10:29:00 +0000
asID: 10474
IP address blocks: 196.4.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Apr 12 10:29:00 2021 GMT
Not After : Apr 30 10:29:00 2031 GMT
Subject: CN=607420f1-1612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:15:0f:5c:96:d9:af:bb:f6:c2:0f:b3:d7:
f3:0b:12:c6:be:a4:28:09:be:5d:fb:7b:b0:b0:85:
30:92:37:a9:6a:f6:44:f1:f5:d5:10:2e:1b:d3:d9:
75:1b:0c:57:23:78:9f:81:9e:c7:5e:4d:90:9a:74:
4b:5b:eb:9b:1d:2f:86:34:28:be:65:3f:80:9c:ef:
70:b6:ed:09:02:d3:ac:63:9b:9d:d1:d9:5d:f6:f8:
d2:a6:f0:c4:75:82:d6:93:22:ca:45:53:9c:e8:41:
29:23:ca:7a:3c:a4:81:f0:2e:6a:f9:e7:87:dd:a9:
3b:d7:af:c7:ef:d0:33:26:51:fa:ad:33:57:e0:07:
ab:33:42:7d:05:24:20:d7:30:35:f9:a5:ef:70:82:
c3:4e:72:2e:9c:01:ff:13:d1:1d:b6:c8:b7:50:e3:
11:6d:79:35:33:f9:4d:9c:7e:3f:83:22:39:f6:90:
a2:5c:f7:0e:ae:b7:1e:7e:d5:2e:7e:d4:2e:b8:d3:
6e:87:21:b9:e9:3b:c1:89:02:2c:6c:c2:26:98:9d:
c4:da:a1:ec:c7:62:d2:a9:af:c6:14:91:b8:67:bc:
c5:71:77:72:98:90:14:6c:c9:fb:92:eb:ea:28:94:
89:0a:ec:bc:62:a4:54:02:8d:2d:d6:1f:2d:9f:e8:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:CD:A7:23:5A:F4:0C:D7:65:02:EC:E8:7D:1C:03:AC:8A:E1:08
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E7FEB4A89B7911EBAD5F206DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.4.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a2:58:82:57:13:e8:29:3d:89:0a:06:b9:2c:c2:ed:bd:f2:
e3:83:8a:2b:7c:24:1a:e7:e4:15:74:49:bb:45:8d:c7:31:36:
33:47:53:18:5d:8f:7f:a5:24:21:1f:05:a4:88:56:08:f0:52:
95:3a:2c:c4:99:c5:5c:2a:98:7f:7e:15:cf:fa:48:07:d5:89:
67:b5:0d:54:a1:be:7a:f6:ac:19:b3:eb:f6:20:9b:86:66:a3:
3a:b8:9f:0e:cc:3c:4b:cd:5f:00:ad:f7:f2:3b:65:de:7a:fa:
09:c4:f9:64:1b:37:e4:5f:af:0c:43:6a:b7:14:51:e9:ed:e8:
5e:ca:0c:77:a3:84:5e:de:4d:f6:ae:4b:32:a8:40:44:f7:85:
d0:9c:24:84:e8:9d:47:66:8f:04:9b:23:fa:35:81:af:94:81:
c4:ee:95:04:77:00:4a:b9:44:54:2a:7f:2c:5f:be:04:74:08:
6c:50:76:cd:7e:a2:b8:35:45:e2:2a:81:df:e6:4b:33:90:7b:
1d:2b:c9:f6:a6:7a:cf:08:29:16:db:1a:48:35:e8:78:d0:8c:
e6:cf:80:5b:0b:f7:f7:5e:f4:79:16:a1:f6:49:39:aa:76:ab:
fd:bb:07:84:50:31:53:0f:8b:9d:66:3a:f5:68:95:e5:c3:83:
7f:75:d8:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAPowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTA0MTIxMDI5MDBaFw0zMTA0MzAxMDI5MDBaMBgxFjAU
BgNVBAMTDTYwNzQyMGYxLTE2MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgiBUPXJbZr7v2wg+z1/MLEsa+pCgJvl37e7CwhTCSN6lq9kTx9dUQLhvT
2XUbDFcjeJ+BnsdeTZCadEtb65sdL4Y0KL5lP4Cc73C27QkC06xjm53R2V32+NKm
8MR1gtaTIspFU5zoQSkjyno8pIHwLmr554fdqTvXr8fv0DMmUfqtM1fgB6szQn0F
JCDXMDX5pe9wgsNOci6cAf8T0R22yLdQ4xFteTUz+U2cfj+DIjn2kKJc9w6utx5+
1S5+1C64026HIbnpO8GJAixswiaYncTaoezHYtKpr8YUkbhnvMVxd3KYkBRsyfuS
6+oolIkK7LxipFQCjS3WHy2f6K2jAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY4fN
pyNa9AzXZQLs6H0cA6yK4QgwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4L0U3RkVCNEE4OUI3OTExRUJBRDVGMjA2REY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEBKIwDQYJKoZIhvcNAQEL
BQADggEBAI6iWIJXE+gpPYkKBrkswu298uODiit8JBrn5BV0SbtFjccxNjNHUxhd
j3+lJCEfBaSIVgjwUpU6LMSZxVwqmH9+Fc/6SAfViWe1DVShvnr2rBmz6/Ygm4Zm
ozq4nw7MPEvNXwCt9/I7Zd56+gnE+WQbN+RfrwxDarcUUent6F7KDHejhF7eTfau
SzKoQET3hdCcJITonUdmjwSbI/o1ga+UgcTulQR3AEq5RFQqfyxfvgR0CGxQds1+
org1ReIqgd/mSzOQex0ryfames8IKRbbGkg16HjQjObPgFsL9/de9HkWofZJOap2
q/27B4RQMVMPi51mOvVoleXDg3912G4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org