Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F4533E28BCD911EBBCAA8312F8AEA228.roa
File: F4533E28BCD911EBBCAA8312F8AEA228.roa (raw, json)
Hash identifier: bboLIVXYq2O3wUuYCh3K8XBi8YfVrAplJiEY8UNX6H0=
Subject key identifier: 71:E0:29:2A:C1:16:73:93:53:5C:CB:38:84:8A:68:F3:0C:EE:25:DF
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 017B
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F4533E28BCD911EBBCAA8312F8AEA228.roa
Signing time: Mon 24 May 2021 21:49:46 +0000
ROA not before: Mon 24 May 2021 21:49:39 +0000
ROA not after: Fri 24 May 2041 21:49:39 +0000
asID: 3741
IP address blocks: 196.28.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 21:49:39 2021 GMT
Not After : May 24 21:49:39 2041 GMT
Subject: CN=60ac1f7a-8f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:4b:d0:fc:77:cf:e0:ea:e0:7e:67:88:75:
c1:77:63:31:23:29:40:bd:25:c5:04:37:1d:64:8a:
02:81:fa:a5:75:40:69:62:dc:75:ef:29:0b:bd:79:
e9:69:47:2e:69:4c:bb:a4:8f:3a:06:36:56:1b:e9:
f3:62:a9:ce:21:8a:52:1f:de:ca:29:2c:70:2e:3c:
b1:f6:6e:a8:c0:46:16:dd:b2:48:43:cc:e7:b6:81:
fe:1a:4e:6a:ea:2b:da:41:7a:b8:14:6e:01:c1:87:
bf:1e:da:68:26:e2:e2:e3:25:d3:ea:44:bc:7e:e6:
fc:81:27:9f:79:66:c9:c1:ce:65:5a:60:51:d7:b0:
9d:3c:ec:cd:e3:a6:d6:28:56:a2:81:83:92:4f:a9:
f3:13:58:0d:1c:51:a8:c1:b0:d3:07:b1:02:f1:93:
b4:5b:d0:2b:4e:69:70:1a:c6:79:05:48:3f:66:8c:
fc:84:a1:9c:c2:31:8f:fe:7a:6e:ce:ab:b9:28:25:
a0:57:0a:e6:d9:4a:5a:4c:18:00:8b:5e:34:6f:c0:
d2:f4:02:c4:38:0a:c0:db:0c:ae:76:51:28:41:cc:
cf:34:b7:2c:cc:0e:1f:aa:79:23:ea:73:4c:ae:cc:
7e:8f:1f:d9:b3:03:4d:84:ab:2b:f1:e4:5c:98:a9:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:29:2A:C1:16:73:93:53:5C:CB:38:84:8A:68:F3:0C:EE:25:DF
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F4533E28BCD911EBBCAA8312F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.64.0/18
Signature Algorithm: sha256WithRSAEncryption
d1:3e:16:7e:a7:d5:b5:9b:61:b4:9d:7a:54:66:ca:96:92:e6:
e0:b9:9d:39:69:e2:e3:4f:85:9f:02:3d:67:c6:e6:40:51:7d:
d1:50:68:55:c9:c7:d7:c2:a8:f0:76:37:15:81:70:f7:9e:37:
c3:6a:3f:b9:55:db:ac:11:f0:17:8a:8a:c6:69:4c:68:71:2f:
8b:b3:ab:b7:de:5b:39:88:d3:46:81:78:e2:40:82:b5:cd:fe:
11:87:6a:00:3e:87:6d:49:1b:27:f9:2c:1a:0d:ea:fe:c3:cb:
34:00:f8:51:d8:11:2e:23:0d:7e:2d:f8:fe:85:d1:92:1d:2b:
b2:49:42:45:e0:82:5d:93:7b:0e:95:ab:6f:40:e5:ea:eb:0c:
37:8b:a9:49:1a:5d:62:ac:a0:8d:2e:bb:8c:09:d0:7d:a5:cb:
2c:48:dd:c2:78:40:03:7b:44:b9:06:9d:d1:2c:4a:3d:e8:4b:
89:5f:e3:62:c4:9b:40:47:eb:95:4c:b4:4f:46:79:58:81:55:
18:ce:76:f8:15:d6:20:e6:33:78:17:82:c5:48:88:6c:43:5f:
c6:f7:80:3e:c8:bd:cb:8c:05:89:7a:66:86:d3:95:db:3d:99:
85:76:12:0e:57:73:b8:47:e1:64:f1:49:67:ae:b1:4e:45:41:
04:34:f9:c8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAXswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTA1MjQyMTQ5MzlaFw00MTA1MjQyMTQ5MzlaMBgxFjAU
BgNVBAMTDTYwYWMxZjdhLThmNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjGUvQ/HfP4OrgfmeIdcF3YzEjKUC9JcUENx1kigKB+qV1QGli3HXvKQu9
eelpRy5pTLukjzoGNlYb6fNiqc4hilIf3sopLHAuPLH2bqjARhbdskhDzOe2gf4a
TmrqK9pBergUbgHBh78e2mgm4uLjJdPqRLx+5vyBJ595ZsnBzmVaYFHXsJ087M3j
ptYoVqKBg5JPqfMTWA0cUajBsNMHsQLxk7Rb0CtOaXAaxnkFSD9mjPyEoZzCMY/+
em7Oq7koJaBXCubZSlpMGACLXjRvwNL0AsQ4CsDbDK52UShBzM80tyzMDh+qeSPq
c0yuzH6PH9mzA02Eqyvx5FyYqVt7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUceAp
KsEWc5NTXMs4hIpo8wzuJd8wHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4L0Y0NTMzRTI4QkNEOTExRUJCQ0FBODMxMkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbEHEAwDQYJKoZIhvcNAQEL
BQADggEBANE+Fn6n1bWbYbSdelRmypaS5uC5nTlp4uNPhZ8CPWfG5kBRfdFQaFXJ
x9fCqPB2NxWBcPeeN8NqP7lV26wR8BeKisZpTGhxL4uzq7feWzmI00aBeOJAgrXN
/hGHagA+h21JGyf5LBoN6v7DyzQA+FHYES4jDX4t+P6F0ZIdK7JJQkXggl2Tew6V
q29A5errDDeLqUkaXWKsoI0uu4wJ0H2lyyxI3cJ4QAN7RLkGndEsSj3oS4lf42LE
m0BH65VMtE9GeViBVRjOdvgV1iDmM3gXgsVIiGxDX8b3gD7IvcuMBYl6ZobTlds9
mYV2Eg5Xc7hH4WTxSWeusU5FQQQ0+cg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org