Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/F03028BEB90911EDBC9A54ABF1222468.roa
File: F03028BEB90911EDBC9A54ABF1222468.roa (raw, json)
Hash identifier: zsopuqLK1tSA7mCbtNRUucoV89sK9pi/Z0DfSXu183E=
Subject key identifier: 98:B8:36:C2:15:5B:81:82:41:48:41:9D:DE:93:E2:CE:03:35:6A:AD
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 23
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/F03028BEB90911EDBC9A54ABF1222468.roa
Signing time: Thu 02 Mar 2023 14:53:05 +0000
ROA not before: Thu 02 Mar 2023 14:53:02 +0000
ROA not after: Mon 02 Mar 2026 14:53:02 +0000
asID: 33763
IP address blocks: 160.242.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:53:02 2023 GMT
Not After : Mar 2 14:53:02 2026 GMT
Subject: CN=6400b851-6ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:0b:7e:47:2f:50:69:01:1a:4a:40:41:8e:
ba:ee:e7:f6:3d:8e:08:f9:c6:89:d9:02:8c:36:f3:
57:fb:48:04:d4:34:86:d9:3b:88:6d:b3:6f:99:83:
ab:29:19:15:c6:e6:a5:5c:44:b5:c7:40:6c:9e:89:
23:89:6b:d2:8a:40:f6:0f:8e:1d:3b:78:9e:02:25:
b0:42:cb:a3:73:3f:81:59:64:b1:7c:4d:e9:87:e0:
b1:0f:b9:1b:b3:52:f2:5b:6f:6f:89:90:78:f7:d8:
09:c3:21:47:e3:c5:5d:dc:19:29:96:6e:38:6b:b4:
e5:df:91:83:ae:3d:55:3c:37:6f:e3:b5:40:3f:3a:
a2:c4:86:0c:33:10:b6:4c:d4:f8:5e:1a:b3:76:d9:
5b:9f:53:25:b5:08:e9:7f:df:12:b8:26:08:33:dc:
23:ab:2d:5f:a4:60:9a:dd:83:e2:58:f0:47:14:e8:
7f:08:7a:b8:ec:07:9d:9b:93:1a:4d:e7:12:71:ef:
3c:61:3e:fd:4a:ca:39:e8:03:08:c4:9a:86:3d:6f:
24:3d:64:49:91:fd:8f:a3:c8:32:61:26:4a:95:01:
67:ca:48:fa:ea:cf:be:3d:35:5a:81:54:f8:14:ff:
27:01:ff:6e:43:85:fe:c8:d3:d5:d9:ee:9b:91:23:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:36:C2:15:5B:81:82:41:48:41:9D:DE:93:E2:CE:03:35:6A:AD
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/F03028BEB90911EDBC9A54ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.104.0/21
Signature Algorithm: sha256WithRSAEncryption
07:7e:5a:48:03:f5:f0:ed:2c:51:bc:85:03:9b:ba:3b:7f:81:
c9:63:08:88:ce:45:ed:20:09:69:33:1e:7f:a8:07:d2:7e:e5:
12:8d:65:25:04:de:0f:1a:c9:7a:c3:36:60:de:7d:e4:cc:a3:
b5:67:0d:a2:6c:72:27:7a:06:fd:87:d7:60:46:9e:3d:f2:c1:
ea:24:c1:94:45:05:9c:df:36:b5:5b:d0:d1:a6:88:72:00:39:
d7:a7:b6:82:42:79:d7:6e:72:82:02:c0:44:b4:c0:88:5a:0d:
4c:6f:dd:43:47:9a:f7:57:28:d9:56:5e:b4:78:74:39:fa:71:
24:f8:ab:52:4b:22:9d:d8:a2:20:04:09:d9:e5:a6:ae:bd:e3:
92:90:0c:5f:7e:62:50:92:59:fd:7d:df:83:ac:6a:32:77:73:
d5:11:58:fd:cb:0c:25:47:98:a8:47:3b:80:2d:58:0a:44:d3:
92:33:37:c1:8c:83:23:07:73:5d:4e:39:50:28:e0:dc:0c:d8:
ae:f2:f3:3f:12:74:d4:9b:17:42:c3:94:11:c9:14:d6:0c:57:
6b:ea:46:ff:d3:91:6d:16:3c:30:26:72:31:e4:fe:c7:db:97:
6e:d9:6a:9c:de:40:2d:8a:ee:fe:31:50:80:89:08:06:ad:1d:
14:5b:90:cb
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBIzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY4
ODZCM0FSMTEwLwYDVQQFEyhEOUMwQjIzM0FDQjA2MzU0MzU3NEQzRjVGMzI3QkVC
OEIyQjk5MTE4MB4XDTIzMDMwMjE0NTMwMloXDTI2MDMwMjE0NTMwMlowGDEWMBQG
A1UEAwwNNjQwMGI4NTEtNmRkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMcXC35HL1BpARpKQEGOuu7n9j2OCPnGidkCjDbzV/tIBNQ0htk7iG2zb5mD
qykZFcbmpVxEtcdAbJ6JI4lr0opA9g+OHTt4ngIlsELLo3M/gVlksXxN6YfgsQ+5
G7NS8ltvb4mQePfYCcMhR+PFXdwZKZZuOGu05d+Rg649VTw3b+O1QD86osSGDDMQ
tkzU+F4as3bZW59TJbUI6X/fErgmCDPcI6stX6Rgmt2D4ljwRxTofwh6uOwHnZuT
Gk3nEnHvPGE+/UrKOegDCMSahj1vJD1kSZH9j6PIMmEmSpUBZ8pI+urPvj01WoFU
+BT/JwH/bkOF/sjT1dnum5EjxK0CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSYuDbC
FVuBgkFIQZ3ek+LOAzVqrTAfBgNVHSMEGDAWgBTZwLIzrLBjVDV00/XzJ764srmR
GDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODg2QjMvNUE0MTFGOUVCOEVGMTFFREE1QjA5RERBRjEyMjI0NjgvMmNDeU02
eXdZMVExZE5QMTh5ZS11TEs1a1JnLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
MmNDeU02eXdZMVExZE5QMTh5ZS11TEs1a1JnLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODg2QjMvNUE0MTFGOUVCOEVGMTFFREE1QjA5RERBRjEyMjI0
NjgvRjAzMDI4QkVCOTA5MTFFREJDOUE1NEFCRjEyMjI0Njgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA6DyaDANBgkqhkiG9w0BAQsFAAOC
AQEAB35aSAP18O0sUbyFA5u6O3+ByWMIiM5F7SAJaTMef6gH0n7lEo1lJQTeDxrJ
esM2YN595MyjtWcNomxyJ3oG/YfXYEaePfLB6iTBlEUFnN82tVvQ0aaIcgA516e2
gkJ5125yggLARLTAiFoNTG/dQ0ea91co2VZetHh0OfpxJPirUksindiiIAQJ2eWm
rr3jkpAMX35iUJJZ/X3fg6xqMndz1RFY/csMJUeYqEc7gC1YCkTTkjM3wYyDIwdz
XU45UCjg3AzYrvLzPxJ01JsXQsOUEckU1gxXa+pG/9ORbRY8MCZyMeT+x9uXbtlq
nN5ALYru/jFQgIkIBq0dFFuQyw==
-----END CERTIFICATE-----
Generated at Sat May 18 03:48:49 2024 by rpki-client on console-fra.rpki-client.org