Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/F89CA5242F8B11EEA482BB864AD9E6FC.roa
File: F89CA5242F8B11EEA482BB864AD9E6FC.roa (raw, json)
Hash identifier: eGV+joBGsN/fAOGzmvxqTQ3B0NxI9LKtJziVpA+vuFg=
Subject key identifier: CC:C8:FB:C8:89:F3:CE:AE:D7:47:96:E9:36:4D:8D:28:37:7F:50:66
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 04EB
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/F89CA5242F8B11EEA482BB864AD9E6FC.roa
Signing time: Mon 31 Jul 2023 10:21:11 +0000
ROA not before: Mon 31 Jul 2023 10:21:08 +0000
ROA not after: Fri 31 Jul 2043 10:21:08 +0000
asID: 198949
IP address blocks: 105.160.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 31 10:21:08 2023 GMT
Not After : Jul 31 10:21:08 2043 GMT
Subject: CN=64c78b17-e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:bf:5b:7e:2d:34:9d:0b:32:e1:30:ca:74:
37:cc:50:f3:26:02:b0:5e:f0:21:13:64:c5:bc:87:
c4:80:01:9c:60:bd:4d:a2:80:95:ba:e3:86:8b:64:
2b:2d:df:3e:57:31:c2:8e:fe:83:2f:52:6b:c1:03:
6f:4e:bf:4c:8d:1c:0a:36:5d:18:de:df:7f:c2:19:
97:d9:8e:a6:d6:02:80:f1:c7:3f:b9:f2:a9:8f:7b:
7c:df:78:38:76:fc:cd:b7:8f:0e:90:68:f3:2e:23:
81:5d:fa:c5:d3:ea:2a:73:da:e6:6b:e7:ea:bb:fb:
65:96:13:69:e0:e0:0b:0a:33:18:23:f6:13:bb:4e:
b5:fb:71:7c:f1:ef:3e:bf:c7:0a:f5:55:47:d6:9b:
83:d2:50:6e:41:b2:c7:4e:8e:ce:29:0d:75:a9:5e:
7e:c9:f8:9d:25:1c:11:6f:3d:ed:5d:a8:93:2c:24:
b9:b8:cd:c7:85:3a:ca:11:03:a0:66:f5:fa:e9:54:
10:a9:87:62:78:ed:81:03:7d:d7:57:a2:d0:12:5b:
15:d3:a1:48:45:f3:7c:c2:82:a7:65:1f:40:8a:55:
6e:4d:97:bb:49:f6:d1:b9:ef:f8:5f:ad:4d:17:17:
f4:72:5e:08:fa:c4:ab:55:be:1b:34:71:eb:bf:72:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:FB:C8:89:F3:CE:AE:D7:47:96:E9:36:4D:8D:28:37:7F:50:66
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/F89CA5242F8B11EEA482BB864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.160.0.0/13
Signature Algorithm: sha256WithRSAEncryption
a7:8e:55:65:01:e3:26:eb:b9:a1:a4:d5:6b:fd:08:27:9f:ba:
53:9f:54:54:d3:37:86:fc:4e:af:36:1e:64:a9:3a:4c:a1:59:
1e:9f:3a:3d:74:ff:b9:65:a3:32:5d:de:1b:98:39:24:83:47:
a1:aa:94:d9:64:3f:97:db:4e:d0:db:d6:f2:af:8c:2e:36:8f:
86:17:bc:b3:91:20:c9:d0:7b:4a:a0:9c:13:02:3d:8c:c8:73:
36:51:9b:38:6b:a8:de:1a:99:30:40:7c:3e:29:90:8b:40:59:
d7:b7:d7:b3:1e:b7:8a:43:e5:c0:08:c5:a8:8a:d0:00:09:aa:
a7:62:3f:bf:60:9c:3e:ae:9e:be:ec:a5:67:93:3c:dd:bd:58:
61:dc:fd:88:27:df:30:2d:9f:7e:81:72:bc:86:26:ae:c6:ed:
43:72:08:4a:a2:0f:e7:2c:06:e5:2e:5c:1a:ad:d3:59:a7:74:
3f:c8:78:9f:54:94:aa:a1:f8:00:11:7b:77:ee:93:46:14:8b:
05:68:6d:0a:d8:c0:5e:89:ac:aa:ff:80:04:ac:db:22:dd:16:
92:a1:57:15:ce:a8:2b:4a:bf:8b:ef:d4:9b:b7:3b:89:86:bf:
9b:90:4c:8e:d7:38:32:01:9e:26:cf:bb:3b:f8:32:6b:b3:bb:
78:b9:4a:92
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBOswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODIxMDRBRjExMC8GA1UEBRMoOEIxMDI2OTUzRUNGN0M0Q0UxMzlGRTlBNTlCREQ3
MjI4QTE1MzU0NDAeFw0yMzA3MzExMDIxMDhaFw00MzA3MzExMDIxMDhaMBgxFjAU
BgNVBAMTDTY0Yzc4YjE3LWUwNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfbr9bfi00nQsy4TDKdDfMUPMmArBe8CETZMW8h8SAAZxgvU2igJW644aL
ZCst3z5XMcKO/oMvUmvBA29Ov0yNHAo2XRje33/CGZfZjqbWAoDxxz+58qmPe3zf
eDh2/M23jw6QaPMuI4Fd+sXT6ipz2uZr5+q7+2WWE2ng4AsKMxgj9hO7TrX7cXzx
7z6/xwr1VUfWm4PSUG5BssdOjs4pDXWpXn7J+J0lHBFvPe1dqJMsJLm4zceFOsoR
A6Bm9frpVBCph2J47YEDfddXotASWxXToUhF83zCgqdlH0CKVW5Nl7tJ9tG57/hf
rU0XF/RyXgj6xKtVvhs0ceu/cp4xAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUzMj7
yInzzq7XR5bpNk2NKDd/UGYwHwYDVR0jBBgwFoAUixAmlT7PfEzhOf6aWb3XIooV
NUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4QUVBMjI4L2l4QW1s
VDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2l4QW1sVDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4
QUVBMjI4L0Y4OUNBNTI0MkY4QjExRUVBNDgyQkI4NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwNpoDANBgkqhkiG9w0BAQsF
AAOCAQEAp45VZQHjJuu5oaTVa/0IJ5+6U59UVNM3hvxOrzYeZKk6TKFZHp86PXT/
uWWjMl3eG5g5JINHoaqU2WQ/l9tO0NvW8q+MLjaPhhe8s5EgydB7SqCcEwI9jMhz
NlGbOGuo3hqZMEB8PimQi0BZ17fXsx63ikPlwAjFqIrQAAmqp2I/v2CcPq6evuyl
Z5M83b1YYdz9iCffMC2ffoFyvIYmrsbtQ3IISqIP5ywG5S5cGq3TWad0P8h4n1SU
qqH4ABF7d+6TRhSLBWhtCtjAXomsqv+ABKzbIt0WkqFXFc6oK0q/i+/Um7c7iYa/
m5BMjtc4MgGeJs+7O/gya7O7eLlKkg==
-----END CERTIFICATE-----
Generated at Mon May 6 01:48:16 2024 by rpki-client on console-fra.rpki-client.org