Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa
File: CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa (raw, json)
Hash identifier: 89ZoBOyWvLwCDH6XINtqPI4XAUHBP8Wb3FK9Ykris/0=
Subject key identifier: 09:3E:4F:0F:CF:AC:5D:05:6C:39:1F:3A:93:29:4B:7E:F7:1D:2D:BB
Certificate issuer: /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial: 02
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa
Signing time: Mon 20 Sep 2021 14:26:48 +0000
ROA not before: Mon 20 Sep 2021 14:26:45 +0000
ROA not after: Wed 31 Dec 2031 14:26:45 +0000
asID: 60171
IP address blocks: 102.223.64.0/22 maxlen: 24
2c0f:e870::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Validity
Not Before: Sep 20 14:26:45 2021 GMT
Not After : Dec 31 14:26:45 2031 GMT
Subject: CN=61489a28-50d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:df:9b:6e:6b:18:0e:84:16:05:bd:f0:d6:
65:95:5b:3f:de:3d:c1:8b:6c:3b:d5:47:da:b8:97:
6a:e4:22:19:96:8a:e2:8e:d4:2e:ff:96:fe:07:74:
ea:02:bb:5f:02:14:80:75:4d:dd:84:fe:f2:e4:45:
21:83:ad:1f:c3:e9:74:c4:98:3d:75:f0:9b:3d:52:
6b:ff:43:6c:b9:cc:3b:04:85:8c:dd:45:ca:db:15:
7b:0e:71:ea:40:8b:6a:ef:be:99:8d:b9:f9:43:f9:
da:4a:e6:a7:20:82:22:5e:fe:42:ef:fc:30:4f:8e:
3c:87:a2:6a:7b:17:e8:6d:f7:e2:7c:a4:70:3e:2f:
9e:c2:ac:c0:90:d8:75:0e:d1:42:32:31:93:67:bc:
47:5a:7c:52:06:d5:f9:f9:8e:08:64:9e:85:66:10:
05:71:94:92:07:42:9b:0f:4a:ca:5d:1f:c0:74:50:
84:86:38:42:5f:a7:6a:51:bf:23:db:14:7c:2c:aa:
a7:66:3e:78:0c:ad:0e:c6:75:92:e5:ee:a4:85:bf:
c4:5a:7f:13:65:a9:9d:38:95:cd:80:cf:40:1c:ef:
72:de:e5:20:b4:dc:19:14:ce:bb:c1:ca:f1:7f:3d:
72:bb:a7:18:b1:a2:bd:cf:f4:ad:c7:9e:46:2d:ed:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3E:4F:0F:CF:AC:5D:05:6C:39:1F:3A:93:29:4B:7E:F7:1D:2D:BB
X509v3 Authority Key Identifier:
keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.64.0/22
IPv6:
2c0f:e870::/32
Signature Algorithm: sha256WithRSAEncryption
1c:56:d7:3e:7f:34:6c:26:94:22:17:cb:c8:6c:22:f0:f8:d0:
c5:fb:7b:dd:dc:9e:8a:83:46:f3:c2:7c:c6:44:02:5c:81:d8:
3c:ae:39:67:4d:39:0c:b7:88:3a:f6:53:43:37:93:4c:c5:ab:
3a:85:55:77:d3:04:e4:3c:30:fc:28:26:5e:b5:00:24:82:52:
53:6f:1d:a0:4d:4b:3d:76:6d:06:8c:f9:e4:72:a3:62:bb:c6:
5e:32:01:83:49:d0:59:ff:de:58:1a:f1:df:91:33:5c:ba:fd:
89:b9:ed:a0:a3:62:72:7c:24:98:23:74:c5:0d:fd:49:ab:d3:
c4:3d:76:71:92:1a:51:d0:a4:7a:fc:00:a4:8e:18:fd:9b:89:
4a:d0:a0:1e:e3:02:3b:2b:7e:72:bf:45:f1:c0:d7:53:bd:24:
0b:ee:86:80:fd:20:ee:c4:0a:78:c1:0c:d0:1a:cf:5d:8d:5f:
72:cc:b1:18:d0:c1:c5:36:d3:94:10:6c:61:0e:a5:e6:4c:02:
59:6f:8b:fc:ba:37:b2:15:5d:a7:98:13:c0:96:03:9c:65:40:
fc:4a:9d:46:5e:4d:6e:2c:46:a7:bd:3d:42:c9:e2:25:92:5b:
5f:4e:ed:62:c2:85:85:e2:90:b7:69:ca:f0:2d:d1:fd:d8:1e:
fc:75:99:f7
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
MURDMkFGMTEwLwYDVQQFEyg3QzdBRjg2MDlCNkZCRDU2QkNDMDI0NENEMzJENjBG
RkU4NUY5RUU0MB4XDTIxMDkyMDE0MjY0NVoXDTMxMTIzMTE0MjY0NVowGDEWMBQG
A1UEAwwNNjE0ODlhMjgtNTBkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMk535tuaxgOhBYFvfDWZZVbP949wYtsO9VH2riXauQiGZaK4o7ULv+W/gd0
6gK7XwIUgHVN3YT+8uRFIYOtH8PpdMSYPXXwmz1Sa/9DbLnMOwSFjN1FytsVew5x
6kCLau++mY25+UP52krmpyCCIl7+Qu/8ME+OPIeiansX6G334nykcD4vnsKswJDY
dQ7RQjIxk2e8R1p8UgbV+fmOCGSehWYQBXGUkgdCmw9Kyl0fwHRQhIY4Ql+nalG/
I9sUfCyqp2Y+eAytDsZ1kuXupIW/xFp/E2WpnTiVzYDPQBzvct7lILTcGRTOu8HK
8X89crunGLGivc/0rceeRi3tDUsCAwEAAaOCArQwggKwMB0GA1UdDgQWBBQJPk8P
z6xdBWw5HzqTKUt+9x0tuzAfBgNVHSMEGDAWgBR8evhgm2+9VrzAJEzTLWD/6F+e
5DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTFEQzIvQTEyMTcxODIxQTFFMTFFQzhEMzQ1RDM0RDhBMDE0Q0UvZkhyNFlK
dHZ2VmE4d0NSTTB5MWdfLWhmbnVRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZkhyNFlKdHZ2VmE4d0NSTTB5MWdfLWhmbnVRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTFEQzIvQTEyMTcxODIxQTFFMTFFQzhEMzQ1RDM0RDhB
MDE0Q0UvQ0ExRkM4Q0MxQTFFMTFFQ0JGN0NBMTM0RDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbfQDANBAIAAjAHAwUALA/o
cDANBgkqhkiG9w0BAQsFAAOCAQEAHFbXPn80bCaUIhfLyGwi8PjQxft73dyeioNG
88J8xkQCXIHYPK45Z005DLeIOvZTQzeTTMWrOoVVd9ME5Dww/CgmXrUAJIJSU28d
oE1LPXZtBoz55HKjYrvGXjIBg0nQWf/eWBrx35EzXLr9ibntoKNicnwkmCN0xQ39
SavTxD12cZIaUdCkevwApI4Y/ZuJStCgHuMCOyt+cr9F8cDXU70kC+6GgP0g7sQK
eMEM0BrPXY1fcsyxGNDBxTbTlBBsYQ6l5kwCWW+L/Lo3shVdp5gTwJYDnGVA/Eqd
Rl5NbixGp709QsniJZJbX07tYsKFheKQt2nK8C3R/dge/HWZ9w==
-----END CERTIFICATE-----
Generated at Sun May 19 02:39:32 2024 by rpki-client on console-fra.rpki-client.org