Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/7319A346865311EFBF9C838D762E951A.roa
File: 7319A346865311EFBF9C838D762E951A.roa (raw, json)
Hash identifier: lo3g6X3ubdXC9HjeAdNZwt2kyeKYY3nM3ILNgfq1PjI=
Subject key identifier: C4:89:1F:1A:70:68:4A:4E:BA:94:AE:AD:2C:BD:19:81:7F:09:39:68
Certificate issuer: /CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Certificate serial: 07
Authority key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/7319A346865311EFBF9C838D762E951A.roa
Signing time: Wed 09 Oct 2024 15:30:44 +0000
ROA not before: Wed 09 Oct 2024 15:30:41 +0000
ROA not after: Thu 09 Oct 2025 15:30:41 +0000
asID: 329303
IP address blocks: 102.211.132.0/22 maxlen: 24
2c0f:1440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Validity
Not Before: Oct 9 15:30:41 2024 GMT
Not After : Oct 9 15:30:41 2025 GMT
Subject: CN=6706a1a4-e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:b7:94:bd:79:5a:71:e3:c9:54:ac:66:38:
96:01:34:84:51:51:9e:af:db:51:cc:90:77:28:f3:
9d:49:ff:91:4f:d9:5a:e7:0e:f3:c3:c7:d9:aa:fa:
26:4c:e4:37:bc:a1:3c:6e:a8:cb:f0:84:81:60:0f:
e6:63:c6:49:fc:4e:44:c3:3b:2e:08:52:c9:5b:f1:
96:1a:1d:00:0a:31:74:19:2d:e3:05:a5:93:d6:bf:
f4:b8:da:47:15:92:d5:35:58:7a:9d:95:37:69:2e:
41:e0:99:55:c8:69:ea:de:34:13:77:dd:bf:8d:96:
87:6e:1d:97:32:d4:be:ee:8b:82:6c:3c:39:fb:11:
f3:15:ff:ea:b1:54:19:a2:90:7e:59:8b:9e:58:87:
cf:6a:4f:78:7b:88:11:75:fb:27:72:dd:9f:ed:c8:
4b:a2:65:f4:be:a7:bf:20:eb:2e:c2:96:4d:bd:d7:
b5:e0:87:94:da:bc:02:4c:20:77:1a:65:62:f5:17:
df:f5:29:1f:e2:4a:b4:8c:db:5c:21:27:d2:c2:0d:
f3:f4:b0:c5:cc:97:af:7f:35:ad:c2:0e:32:18:fb:
f8:c9:66:ad:0f:ce:28:7b:b9:ef:8e:0e:62:01:55:
cd:d5:5b:d1:d2:ca:b3:b8:21:d3:17:85:57:55:9f:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:1F:1A:70:68:4A:4E:BA:94:AE:AD:2C:BD:19:81:7F:09:39:68
X509v3 Authority Key Identifier:
keyid:E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/7319A346865311EFBF9C838D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.132.0/22
IPv6:
2c0f:1440::/32
Signature Algorithm: sha256WithRSAEncryption
05:01:cc:71:df:0a:46:f0:f0:33:0b:e2:58:e8:11:ba:45:09:
e4:60:b5:e5:20:0e:67:c8:c0:3b:93:1c:c6:95:94:bc:d6:4f:
f7:02:73:cf:34:02:39:f8:83:13:3f:f0:05:28:70:f1:ba:73:
d9:67:7b:78:93:92:3c:a9:47:b0:ea:23:03:73:30:a4:6f:94:
fa:6b:6a:58:06:e6:e0:cf:cf:c4:47:7a:ff:46:fc:9a:d6:c6:
3c:ad:d7:1c:4e:31:34:c8:90:05:46:e7:61:1f:b8:2d:c6:34:
0f:ad:f0:8f:fc:70:66:69:6e:65:41:02:39:5c:71:7e:9d:e7:
92:cf:80:48:27:de:c2:83:0f:fa:f2:b3:a3:ce:df:a8:eb:7a:
d4:64:73:d7:6c:3a:08:29:83:ee:62:c3:f4:4a:9f:d8:f2:2e:
a6:bc:63:a4:9b:0b:5d:be:58:c4:43:3b:94:35:45:f5:8b:1b:
45:8f:8d:2e:3e:09:92:b8:2b:89:8c:2f:f2:f0:a4:36:c2:f2:
07:41:7e:16:fc:7f:95:19:89:99:be:65:d9:c2:e9:16:91:06:
5b:35:58:03:68:18:38:af:63:61:3d:b5:e1:bd:57:ec:72:91:
49:db:c6:5f:ca:9b:de:b2:37:36:f4:eb:f3:c4:ca:52:0c:0f:
8e:8e:bc:c6
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
NTA4M0FGMTEwLwYDVQQFEyhFNTEwM0VEMTE5RTY0NzlCQjAzNkI3QzNGNDhEQ0M5
RTYyQzE3NDI0MB4XDTI0MTAwOTE1MzA0MVoXDTI1MTAwOTE1MzA0MVowGDEWMBQG
A1UEAxMNNjcwNmExYTQtZTliNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALFgt5S9eVpx48lUrGY4lgE0hFFRnq/bUcyQdyjznUn/kU/ZWucO88PH2ar6
JkzkN7yhPG6oy/CEgWAP5mPGSfxORMM7LghSyVvxlhodAAoxdBkt4wWlk9a/9Lja
RxWS1TVYep2VN2kuQeCZVchp6t40E3fdv42Wh24dlzLUvu6Lgmw8OfsR8xX/6rFU
GaKQflmLnliHz2pPeHuIEXX7J3Ldn+3IS6Jl9L6nvyDrLsKWTb3XteCHlNq8Akwg
dxplYvUX3/UpH+JKtIzbXCEn0sIN8/SwxcyXr381rcIOMhj7+MlmrQ/OKHu5744O
YgFVzdVb0dLKs7gh0xeFV1Wf1g0CAwEAAaOCArQwggKwMB0GA1UdDgQWBBTEiR8a
cGhKTrqUrq0svRmBfwk5aDAfBgNVHSMEGDAWgBTlED7RGeZHm7A2t8P0jcyeYsF0
JDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTUwODMvMEZBNDFDNkU4NjIyMTFFRjhGQ0JENzU4NzYyRTk1MUEvNVJBLTBS
bm1SNXV3TnJmRDlJM01ubUxCZENRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNVJBLTBSbm1SNXV3TnJmRDlJM01ubUxCZENRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTUwODMvMEZBNDFDNkU4NjIyMTFFRjhGQ0JENzU4NzYy
RTk1MUEvNzMxOUEzNDY4NjUzMTFFRkJGOUM4MzhENzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbThDANBAIAAjAHAwUALA8U
QDANBgkqhkiG9w0BAQsFAAOCAQEABQHMcd8KRvDwMwviWOgRukUJ5GC15SAOZ8jA
O5McxpWUvNZP9wJzzzQCOfiDEz/wBShw8bpz2Wd7eJOSPKlHsOojA3MwpG+U+mtq
WAbm4M/PxEd6/0b8mtbGPK3XHE4xNMiQBUbnYR+4LcY0D63wj/xwZmluZUECOVxx
fp3nks+ASCfewoMP+vKzo87fqOt61GRz12w6CCmD7mLD9Eqf2PIuprxjpJsLXb5Y
xEM7lDVF9YsbRY+NLj4JkrgriYwv8vCkNsLyB0F+Fvx/lRmJmb5l2cLpFpEGWzVY
A2gYOK9jYT214b1X7HKRSdvGX8qb3rI3NvTr88TKUgwPjo68xg==
-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:49 2024 by rpki-client on console-fra.rpki-client.org