Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/365FE0469DF411EB9F82B84AF8AEA228.roa
File: 365FE0469DF411EB9F82B84AF8AEA228.roa (raw, json)
Hash identifier: Ws8N8X7YiONJc56TyVAJKcp66X/6QscYInYVrETeq+o=
Subject key identifier: F5:95:5E:A8:7A:4F:86:D3:B5:21:91:5B:05:2E:7B:79:38:57:F4:03
Certificate issuer: /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial: 3F
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/365FE0469DF411EB9F82B84AF8AEA228.roa
Signing time: Thu 15 Apr 2021 14:09:38 +0000
ROA not before: Thu 15 Apr 2021 14:09:31 +0000
ROA not after: Sun 15 Apr 2029 14:09:31 +0000
asID: 328795
IP address blocks: 102.220.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Validity
Not Before: Apr 15 14:09:31 2021 GMT
Not After : Apr 15 14:09:31 2029 GMT
Subject: CN=60784922-442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:8e:af:e5:89:cb:e2:62:ca:6e:c5:e8:e6:
be:55:33:2a:03:3e:09:27:7a:5f:43:51:93:36:49:
49:23:7c:b6:f8:9a:8d:07:57:0b:7f:ca:88:f3:af:
c7:00:96:1a:87:3a:11:4c:60:06:2a:1d:9e:66:fb:
2e:41:be:28:95:a8:7d:ed:6a:b6:17:b6:fd:f6:a7:
f4:7e:38:17:81:ec:50:0d:9e:8a:2c:d6:49:50:93:
cd:ff:66:4c:fa:f4:a3:60:79:97:6f:6f:26:8f:3a:
08:97:ea:2e:32:91:3a:19:ff:af:32:44:cd:c4:06:
a2:0f:07:65:cd:7c:cd:62:39:85:c7:97:b0:9c:7d:
ca:8a:42:9c:bb:eb:33:00:58:07:d5:a0:57:73:65:
bf:00:ea:77:ed:53:09:19:5e:bf:74:ab:2f:aa:ee:
cd:04:52:4b:38:bf:36:79:fa:05:a6:7d:ab:45:95:
bb:89:c5:73:bf:ec:25:e4:ff:c8:9a:9d:e6:d2:84:
d9:c9:f7:9c:9c:21:c3:74:4c:20:95:bc:46:9a:9e:
97:ee:f3:ad:9d:ea:c7:82:d1:ad:41:ec:28:59:be:
23:0c:a1:4d:07:3b:93:3c:df:e8:90:45:11:84:4e:
71:b6:28:8e:30:db:17:c4:43:8c:84:16:7a:55:88:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:5E:A8:7A:4F:86:D3:B5:21:91:5B:05:2E:7B:79:38:57:F4:03
X509v3 Authority Key Identifier:
keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/365FE0469DF411EB9F82B84AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ac:19:6e:23:9a:f3:81:7a:27:04:83:23:90:a2:16:b7:24:
e9:82:41:02:24:31:b0:05:71:e7:fb:06:ca:cc:3e:76:80:ba:
a1:12:33:4a:b8:60:e6:23:90:15:a0:d1:49:cc:01:4b:64:ed:
df:31:64:37:3f:6f:86:e5:52:48:9e:21:15:df:b8:d9:34:d4:
02:00:91:ad:91:32:1b:1b:b1:d8:f0:f1:7d:92:49:04:b3:59:
b4:a8:2d:76:d7:f9:22:46:20:a6:3d:11:87:66:d4:a4:9b:fa:
50:a3:15:1f:64:a2:9b:cc:73:17:da:12:74:58:81:e1:30:e8:
ef:59:2e:37:63:42:d0:af:94:b5:76:06:9e:1d:6c:49:88:9b:
f1:93:b9:50:04:ab:fa:06:ed:ec:88:e9:16:df:b0:fa:4c:b4:
53:d2:5a:35:b4:9a:b1:07:ca:80:92:01:1e:a3:34:9e:7c:04:
b6:6d:35:3c:47:87:3a:06:f9:1e:af:3e:f9:c4:b6:66:34:d3:
ca:ca:d8:fa:ca:f7:77:9c:fd:65:bf:88:ca:bc:d1:10:d5:bd:
1e:90:a0:05:c1:27:cf:ad:f2:80:24:e6:23:27:a0:bb:de:9f:
f5:1c:61:04:a1:7a:b3:27:1d:cb:31:bb:57:f6:12:78:97:d7:
98:15:9d:fe
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBPzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
QTNEMUFGMTEwLwYDVQQFEyhBRTUxRDI1NzE2RERCNENDQTMxQjJFOTg1RTBBNzUy
NUY3RjRCOUM2MB4XDTIxMDQxNTE0MDkzMVoXDTI5MDQxNTE0MDkzMVowGDEWMBQG
A1UEAxMNNjA3ODQ5MjItNDQyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMKrjq/licviYspuxejmvlUzKgM+CSd6X0NRkzZJSSN8tviajQdXC3/KiPOv
xwCWGoc6EUxgBiodnmb7LkG+KJWofe1qthe2/fan9H44F4HsUA2eiizWSVCTzf9m
TPr0o2B5l29vJo86CJfqLjKROhn/rzJEzcQGog8HZc18zWI5hceXsJx9yopCnLvr
MwBYB9WgV3NlvwDqd+1TCRlev3SrL6ruzQRSSzi/Nnn6BaZ9q0WVu4nFc7/sJeT/
yJqd5tKE2cn3nJwhw3RMIJW8Rpqel+7zrZ3qx4LRrUHsKFm+IwyhTQc7kzzf6JBF
EYROcbYojjDbF8RDjIQWelWIj80CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBT1lV6o
ek+G07UhkVsFLnt5OFf0AzAfBgNVHSMEGDAWgBSuUdJXFt20zKMbLpheCnUl9/S5
xjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OEEzRDEvNzM3MzJFNTY3MDI4MTFFQkIyRjk2ODI1RjhBRUEyMjgvcmxIU1Z4
YmR0TXlqR3k2WVhncDFKZmYwdWNZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcmxIU1Z4YmR0TXlqR3k2WVhncDFKZmYwdWNZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OEEzRDEvNzM3MzJFNTY3MDI4MTFFQkIyRjk2ODI1RjhB
RUEyMjgvMzY1RkUwNDY5REY0MTFFQjlGODJCODRBRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbc/zANBgkqhkiG9w0BAQsF
AAOCAQEAPawZbiOa84F6JwSDI5CiFrck6YJBAiQxsAVx5/sGysw+doC6oRIzSrhg
5iOQFaDRScwBS2Tt3zFkNz9vhuVSSJ4hFd+42TTUAgCRrZEyGxux2PDxfZJJBLNZ
tKgtdtf5IkYgpj0Rh2bUpJv6UKMVH2Sim8xzF9oSdFiB4TDo71kuN2NC0K+UtXYG
nh1sSYib8ZO5UASr+gbt7IjpFt+w+ky0U9JaNbSasQfKgJIBHqM0nnwEtm01PEeH
Ogb5Hq8++cS2ZjTTysrY+sr3d5z9Zb+IyrzRENW9HpCgBcEnz63ygCTmIyegu96f
9RxhBKF6sycdyzG7V/YSeJfXmBWd/g==
-----END CERTIFICATE-----
Generated at Fri Apr 26 03:50:32 2024 by rpki-client on console-ams.rpki-client.org