Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/BC328368A98F11EA845E9024F8AEA228.roa
File: BC328368A98F11EA845E9024F8AEA228.roa (raw, json)
Hash identifier: aEfS+TbQUG5zLx1MMdMyJUk14wIR04mV1qJ0EnnZ2A8=
Subject key identifier: D3:2F:29:80:30:08:E6:43:BF:89:34:0A:83:08:80:E4:7C:AE:2B:22
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0A
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/BC328368A98F11EA845E9024F8AEA228.roa
Signing time: Mon 08 Jun 2020 13:55:39 +0000
ROA not before: Mon 08 Jun 2020 13:55:35 +0000
ROA not after: Tue 31 Dec 2030 13:55:35 +0000
asID: 33771
IP address blocks: 2c0f:fe38::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jun 8 13:55:35 2020 GMT
Not After : Dec 31 13:55:35 2030 GMT
Subject: CN=5ede435b-d0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:f5:e6:05:ed:27:c1:6a:da:b8:62:64:19:
c5:92:c6:cc:b9:b8:5b:73:ec:95:48:ad:49:76:51:
9d:fe:7d:32:d7:f7:8d:a2:91:07:9b:42:07:37:e4:
75:ee:d6:7b:fa:e1:31:40:eb:ab:b6:5b:b7:e5:85:
3a:9d:94:c3:e3:5d:39:df:5a:f8:eb:9b:08:6c:06:
58:60:77:00:9a:ff:75:af:24:4e:f2:b1:d6:ac:fb:
b4:bd:c9:c4:58:85:fa:dd:2a:12:ea:cb:ca:f4:86:
3f:49:df:a2:81:c1:6f:9c:1e:7b:37:f8:a3:58:f6:
9a:7d:35:bf:a9:63:01:c9:1b:3d:da:b5:35:98:85:
69:15:9a:5f:30:24:bd:c3:ce:07:f4:5e:71:5c:ea:
5e:88:6e:d4:dd:cb:3b:9e:b0:63:12:fa:e2:b6:01:
53:bc:2f:75:0f:7e:e2:fc:da:70:1a:ad:32:c4:62:
0a:0e:14:a0:19:aa:dc:89:55:ac:14:8f:8d:c9:be:
36:4b:18:f2:bb:0a:01:f2:b5:f7:da:ba:34:ba:77:
21:e2:fc:01:02:3f:64:66:db:e5:3c:d0:be:5f:33:
ab:41:a0:e4:b6:06:27:84:e7:1f:17:8d:36:c9:5b:
86:12:57:e1:d8:5b:32:91:ea:69:80:3f:13:1d:9e:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2F:29:80:30:08:E6:43:BF:89:34:0A:83:08:80:E4:7C:AE:2B:22
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/BC328368A98F11EA845E9024F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fe38::/32
Signature Algorithm: sha256WithRSAEncryption
6d:1f:4b:6f:e8:09:0d:44:7a:af:6d:88:fb:e2:f7:b5:de:3e:
1e:43:62:59:ec:1f:55:e2:30:8f:81:b7:3c:66:22:be:8a:3e:
b3:34:3e:87:b2:25:26:4a:84:a3:30:10:ed:94:0f:3d:a7:d1:
ad:11:c6:79:a7:d6:e2:e1:9e:20:f0:67:0a:ba:e4:30:32:5b:
12:84:00:19:ea:52:49:39:f9:af:c0:4c:af:13:01:e4:1c:a1:
4d:f4:24:5d:3f:5c:2a:e8:e7:de:c0:c3:e9:79:ef:47:32:bc:
69:3d:37:23:6e:0c:ee:4f:46:fc:1c:10:a6:c6:d5:00:ff:e3:
30:cb:0a:62:18:30:5f:c7:84:2c:72:40:c1:a7:9e:f0:71:a3:
fd:a4:81:bc:05:e5:89:9e:7c:73:4d:ea:b2:6c:4c:f7:7d:98:
a0:6a:87:f4:7c:b6:67:3b:4b:b7:9f:be:74:ad:79:d3:a2:d9:
95:ee:30:94:d8:cb:86:11:73:62:42:cb:bf:f1:dd:21:f3:4d:
80:30:bf:ae:77:bc:b2:8e:2b:29:73:8e:e2:8b:55:7c:43:35:
e5:00:3a:de:b4:b2:4e:8a:17:69:90:f2:1c:3d:a7:66:34:e9:
83:94:67:a7:9e:4e:b9:9c:77:60:7d:ec:44:b5:7c:4d:15:99:
cd:f5:46:3d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
MjEwNEFGMTEwLwYDVQQFEyg4QjEwMjY5NTNFQ0Y3QzRDRTEzOUZFOUE1OUJERDcy
MjhBMTUzNTQ0MB4XDTIwMDYwODEzNTUzNVoXDTMwMTIzMTEzNTUzNVowGDEWMBQG
A1UEAxMNNWVkZTQzNWItZDBkZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwR9eYF7SfBatq4YmQZxZLGzLm4W3PslUitSXZRnf59Mtf3jaKRB5tCBzfk
de7We/rhMUDrq7Zbt+WFOp2Uw+NdOd9a+OubCGwGWGB3AJr/da8kTvKx1qz7tL3J
xFiF+t0qEurLyvSGP0nfooHBb5weezf4o1j2mn01v6ljAckbPdq1NZiFaRWaXzAk
vcPOB/RecVzqXohu1N3LO56wYxL64rYBU7wvdQ9+4vzacBqtMsRiCg4UoBmq3IlV
rBSPjcm+NksY8rsKAfK199q6NLp3IeL8AQI/ZGbb5TzQvl8zq0Gg5LYGJ4TnHxeN
NslbhhJX4dhbMpHqaYA/Ex2ekisCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTTLymA
MAjmQ7+JNAqDCIDkfK4rIjAfBgNVHSMEGDAWgBSLECaVPs98TOE5/ppZvdciihU1
RDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODIxMDQvMDlDQ0I5NENBNzYzMTFFQUJCQzE5MTFDRjhBRUEyMjgvaXhBbWxU
N1BmRXpoT2Y2YVdiM1hJb29WTlVRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvaXhBbWxUN1BmRXpoT2Y2YVdiM1hJb29WTlVRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODIxMDQvMDlDQ0I5NENBNzYzMTFFQUJCQzE5MTFDRjhB
RUEyMjgvQkMzMjgzNjhBOThGMTFFQTg0NUU5MDI0RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP/jgwDQYJKoZIhvcNAQEL
BQADggEBAG0fS2/oCQ1Eeq9tiPvi97XePh5DYlnsH1XiMI+BtzxmIr6KPrM0Poey
JSZKhKMwEO2UDz2n0a0Rxnmn1uLhniDwZwq65DAyWxKEABnqUkk5+a/ATK8TAeQc
oU30JF0/XCro597Aw+l570cyvGk9NyNuDO5PRvwcEKbG1QD/4zDLCmIYMF/HhCxy
QMGnnvBxo/2kgbwF5YmefHNN6rJsTPd9mKBqh/R8tmc7S7efvnStedOi2ZXuMJTY
y4YRc2JCy7/x3SHzTYAwv653vLKOKylzjuKLVXxDNeUAOt60sk6KF2mQ8hw9p2Y0
6YOUZ6eeTrmcd2B97ES1fE0Vmc31Rj0=
-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:11 2024 by rpki-client on console-fra.rpki-client.org