Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/C237033624A011EDACDA0690F1222468.roa
File: C237033624A011EDACDA0690F1222468.roa (raw, json)
Hash identifier: D/DHDU6oMRTGaAGz0aykkPymb01YZKRl9kWAaqrzvqM=
Subject key identifier: 4B:69:7A:8C:32:91:1A:4E:12:83:6B:57:C5:AF:3C:E5:69:71:EA:5E
Certificate issuer: /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial: 04
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/C237033624A011EDACDA0690F1222468.roa
Signing time: Thu 25 Aug 2022 18:07:19 +0000
ROA not before: Thu 25 Aug 2022 18:07:15 +0000
ROA not after: Sun 25 Aug 2024 18:07:15 +0000
asID: 328835
IP address blocks: 2c0f:3a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 24 Jun 2024 00:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Validity
Not Before: Aug 25 18:07:15 2022 GMT
Not After : Aug 25 18:07:15 2024 GMT
Subject: CN=6307ba57-97b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:b4:c2:fa:82:03:5e:c2:b5:b8:e9:b2:dd:
7d:da:c2:d8:04:46:dc:ee:73:0e:74:a9:c7:06:95:
10:3a:9b:3e:f8:28:eb:1c:8c:61:37:a6:94:05:81:
c2:dc:92:5f:b2:ad:dd:8d:91:dd:a6:8d:dd:0c:7f:
7c:8e:a5:a4:90:59:35:e4:87:c3:2a:44:46:bb:ab:
68:02:34:24:1f:5d:fc:0e:59:41:70:fd:a6:78:82:
ff:5e:1a:22:a3:5e:3e:ad:33:b4:6a:d2:fe:c4:6a:
09:c7:81:43:76:07:a3:63:2b:66:c5:88:27:d8:59:
8a:1f:91:fc:a7:0b:b0:56:10:0a:df:d7:7c:14:99:
a9:14:75:ce:37:1a:4b:00:b7:93:94:e8:97:4b:be:
02:26:cf:90:af:93:5a:f9:42:a0:c9:99:e0:4b:b7:
0f:c3:1f:55:77:5b:8a:81:13:de:36:c0:dd:54:9e:
35:b3:dd:b3:e9:7d:bc:68:14:56:f5:9b:18:e5:66:
b1:4f:7e:36:d7:6f:32:6a:f1:bb:d3:4e:05:c5:4a:
d9:59:0f:4c:5f:26:2b:eb:77:67:58:0a:3f:e6:d9:
7a:ed:ff:d2:dc:88:6b:9a:e7:05:32:5f:04:7e:49:
8c:9f:1a:4d:f0:62:32:c2:0a:29:48:d5:ba:0c:64:
27:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:7A:8C:32:91:1A:4E:12:83:6B:57:C5:AF:3C:E5:69:71:EA:5E
X509v3 Authority Key Identifier:
keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/C237033624A011EDACDA0690F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:3a00::/32
Signature Algorithm: sha256WithRSAEncryption
ba:20:8e:a5:45:53:a8:ea:99:f1:cb:6b:2b:88:5f:48:10:3c:
14:5b:a7:99:c2:12:73:32:7d:00:92:ae:e4:50:46:30:51:28:
90:3e:18:a7:38:45:dd:6a:a1:bb:42:0e:d6:b0:e4:ba:c4:11:
17:b6:23:4c:71:5b:bb:27:af:2c:da:60:90:c3:f5:94:28:af:
1e:47:88:83:d7:91:b3:bc:29:52:4f:d8:34:73:e4:65:0f:70:
8d:32:6a:12:cb:1a:52:49:04:94:cc:47:45:cd:00:5f:ec:e7:
c7:f9:31:2f:45:cd:f1:e9:35:4f:6c:17:30:f2:b1:2b:d4:6a:
32:e9:3e:98:1a:7c:9c:0a:93:f2:e3:55:cd:b1:01:3b:9a:a3:
19:cb:0d:5a:71:a5:c1:75:10:5c:08:18:ae:2a:cd:9a:1f:68:
86:80:ea:12:de:d2:99:49:b4:66:80:98:be:1f:82:37:ed:78:
ab:f5:19:7d:ac:42:80:7d:8f:2a:28:f8:20:64:6f:52:13:d4:
72:f8:30:22:c9:c2:5a:04:0a:e1:f4:8c:68:f9:92:08:61:8f:
88:e9:18:17:0e:95:dc:89:be:14:72:91:88:01:bf:c2:40:33:
50:86:09:2d:88:54:bc:18:ae:af:34:fa:e1:18:d2:b1:21:e1:
83:71:b9:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY4
MjYxNUFGMTEwLwYDVQQFEyg1RDBENjM2RjUxNTk0RTYzNjdGOUNBQjJEMTQzOEZE
M0ExQzVEREVGMB4XDTIyMDgyNTE4MDcxNVoXDTI0MDgyNTE4MDcxNVowGDEWMBQG
A1UEAwwNNjMwN2JhNTctOTdiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM+5tML6ggNewrW46bLdfdrC2ARG3O5zDnSpxwaVEDqbPvgo6xyMYTemlAWB
wtySX7Kt3Y2R3aaN3Qx/fI6lpJBZNeSHwypERruraAI0JB9d/A5ZQXD9pniC/14a
IqNePq0ztGrS/sRqCceBQ3YHo2MrZsWIJ9hZih+R/KcLsFYQCt/XfBSZqRR1zjca
SwC3k5Tol0u+AibPkK+TWvlCoMmZ4Eu3D8MfVXdbioET3jbA3VSeNbPds+l9vGgU
VvWbGOVmsU9+NtdvMmrxu9NOBcVK2VkPTF8mK+t3Z1gKP+bZeu3/0tyIa5rnBTJf
BH5JjJ8aTfBiMsIKKUjVugxkJ7UCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRLaXqM
MpEaThKDa1fFrzzlaXHqXjAfBgNVHSMEGDAWgBRdDWNvUVlOY2f5yrLRQ4/TocXd
7zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODI2MTUvNzc0NjA5MDAyNDlFMTFFREE0OEYwOTg4RjEyMjI0NjgvWFExamIx
RlpUbU5uLWNxeTBVT1AwNkhGM2U4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWFExamIxRlpUbU5uLWNxeTBVT1AwNkhGM2U4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODI2MTUvNzc0NjA5MDAyNDlFMTFFREE0OEYwOTg4RjEy
MjI0NjgvQzIzNzAzMzYyNEEwMTFFREFDREEwNjkwRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPOgAwDQYJKoZIhvcNAQEL
BQADggEBALogjqVFU6jqmfHLayuIX0gQPBRbp5nCEnMyfQCSruRQRjBRKJA+GKc4
Rd1qobtCDtaw5LrEERe2I0xxW7snryzaYJDD9ZQorx5HiIPXkbO8KVJP2DRz5GUP
cI0yahLLGlJJBJTMR0XNAF/s58f5MS9FzfHpNU9sFzDysSvUajLpPpgafJwKk/Lj
Vc2xATuaoxnLDVpxpcF1EFwIGK4qzZofaIaA6hLe0plJtGaAmL4fgjfteKv1GX2s
QoB9jyoo+CBkb1IT1HL4MCLJwloECuH0jGj5kghhj4jpGBcOldyJvhRykYgBv8JA
M1CGCS2IVLwYrq80+uEY0rEh4YNxuU8=
-----END CERTIFICATE-----
Generated at Sat Jun 22 03:13:55 2024 by rpki-client on console-ams.rpki-client.org