Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F4BD80508D6611EBAB9AE063F8AEA228.roa
File: F4BD80508D6611EBAB9AE063F8AEA228.roa (raw, json)
Hash identifier: RF0lRZTaUQSFiW7Iv1IX7ozeNLwTmxuGR1lZD1DN0YU=
Subject key identifier: 1A:96:78:D4:35:0D:72:AF:11:ED:33:34:58:EF:DF:18:96:5A:58:4A
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: CB
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F4BD80508D6611EBAB9AE063F8AEA228.roa
Signing time: Thu 25 Mar 2021 12:38:10 +0000
ROA not before: Thu 25 Mar 2021 12:38:03 +0000
ROA not after: Tue 25 Mar 2031 12:38:03 +0000
asID: 10474
IP address blocks: 196.2.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 25 12:38:03 2021 GMT
Not After : Mar 25 12:38:03 2031 GMT
Subject: CN=605c8432-424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:13:4d:33:59:a3:41:cb:24:0c:75:d9:b7:
1a:57:55:5c:0f:92:87:f3:4f:38:a7:e8:18:40:f2:
a8:78:1a:4e:e3:3f:b3:f9:c3:71:82:aa:80:86:5e:
2c:1c:10:ba:f0:a4:2d:b3:c6:7f:95:d5:92:38:ad:
c7:1b:55:84:34:b6:81:f1:7e:f5:2a:35:11:15:55:
2d:f9:96:24:de:07:8b:10:a5:b5:74:5f:57:34:65:
97:ca:cf:e2:34:24:7f:89:cc:73:88:c2:b1:cb:66:
1b:bf:df:46:48:5b:59:1b:f5:15:c8:fc:05:e9:42:
e4:59:93:8c:c6:47:c5:cb:4f:bd:fa:f2:43:f9:98:
6f:8e:bc:ff:6d:04:17:41:ee:3e:06:5b:f2:8d:21:
d6:d3:a7:55:49:7d:0a:a4:28:26:03:7f:fd:e8:53:
3e:03:16:e4:c2:b0:e6:03:01:26:23:65:b0:89:4d:
bb:2f:f6:7c:37:ff:1c:3c:db:6c:fe:09:36:b4:34:
95:82:77:31:d2:13:4c:46:e9:b3:0f:72:5d:1f:6c:
fc:21:7c:84:43:0e:ce:4b:69:89:e2:76:a9:a7:30:
46:69:0c:87:67:b4:bb:71:ae:2b:40:b1:f6:d1:39:
27:0a:8b:3d:a1:dc:3b:c8:5b:ac:9d:ba:35:78:e3:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:78:D4:35:0D:72:AF:11:ED:33:34:58:EF:DF:18:96:5A:58:4A
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F4BD80508D6611EBAB9AE063F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.136.0/22
Signature Algorithm: sha256WithRSAEncryption
34:04:78:53:d1:1e:c1:4d:70:ed:2f:67:75:e9:d1:b6:a8:be:
5b:e1:9c:c0:a6:04:5e:44:14:f6:0f:24:cf:15:45:83:bd:c8:
15:ab:ef:63:f5:64:fb:e0:1d:64:60:97:cf:ab:cc:6f:8d:b4:
08:7b:96:57:12:aa:ae:8d:a0:df:2a:3a:56:85:1e:80:a5:6d:
db:18:07:64:1d:7e:9d:ce:ac:74:c7:ea:98:64:94:f4:ce:f5:
54:f9:e9:86:04:16:d6:a5:eb:83:64:5c:b8:0a:0d:a5:37:25:
eb:54:ca:b6:b7:6b:58:dc:ad:cf:73:db:25:a0:a1:8d:de:e2:
c7:66:b5:c6:28:0e:a1:ce:4e:1f:83:09:23:fb:07:4a:19:fc:
e1:0a:9e:98:e6:65:89:39:60:44:92:75:e9:24:10:18:02:15:
ff:9d:21:15:c2:98:d3:0c:c2:94:3c:bb:ee:b1:a2:6d:c5:50:
0e:0f:ea:dc:40:32:13:ab:13:73:1b:50:06:4e:ca:33:fb:77:
18:03:8f:b4:8a:6b:50:ca:a1:d5:4f:80:35:1a:97:63:1b:39:
13:cd:39:1d:38:71:c8:7b:33:5b:c6:91:b5:be:c7:02:56:01:
19:1f:00:8e:7d:a7:05:7b:c0:46:c9:61:4a:ba:04:f2:fb:3d:
46:52:e6:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAMswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTAzMjUxMjM4MDNaFw0zMTAzMjUxMjM4MDNaMBgxFjAU
BgNVBAMTDTYwNWM4NDMyLTQyNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfPBNNM1mjQcskDHXZtxpXVVwPkofzTzin6BhA8qh4Gk7jP7P5w3GCqoCG
XiwcELrwpC2zxn+V1ZI4rccbVYQ0toHxfvUqNREVVS35liTeB4sQpbV0X1c0ZZfK
z+I0JH+JzHOIwrHLZhu/30ZIW1kb9RXI/AXpQuRZk4zGR8XLT7368kP5mG+OvP9t
BBdB7j4GW/KNIdbTp1VJfQqkKCYDf/3oUz4DFuTCsOYDASYjZbCJTbsv9nw3/xw8
22z+CTa0NJWCdzHSE0xG6bMPcl0fbPwhfIRDDs5LaYnidqmnMEZpDIdntLtxritA
sfbROScKiz2h3DvIW6ydujV445uZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGpZ4
1DUNcq8R7TM0WO/fGJZaWEowHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4L0Y0QkQ4MDUwOEQ2NjExRUJBQjlBRTA2M0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALEAogwDQYJKoZIhvcNAQEL
BQADggEBADQEeFPRHsFNcO0vZ3Xp0baovlvhnMCmBF5EFPYPJM8VRYO9yBWr72P1
ZPvgHWRgl8+rzG+NtAh7llcSqq6NoN8qOlaFHoClbdsYB2Qdfp3OrHTH6phklPTO
9VT56YYEFtal64NkXLgKDaU3JetUyra3a1jcrc9z2yWgoY3e4sdmtcYoDqHOTh+D
CSP7B0oZ/OEKnpjmZYk5YESSdekkEBgCFf+dIRXCmNMMwpQ8u+6xom3FUA4P6txA
MhOrE3MbUAZOyjP7dxgDj7SKa1DKodVPgDUal2MbORPNOR04cch7M1vGkbW+xwJW
ARkfAI59pwV7wEbJYUq6BPL7PUZS5k8=
-----END CERTIFICATE-----
Generated at Tue May 28 02:10:24 2024 by rpki-client on console-ams.rpki-client.org