Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/455DB88A63C011EF901665A8762E951A.roa
File: 455DB88A63C011EF901665A8762E951A.roa (raw, json)
Hash identifier: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=
Subject key identifier: FB:D6:09:2F:FF:0A:A0:00:13:B3:F0:2B:AB:08:B8:5D:61:7B:3E:AB
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 04B6
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/455DB88A63C011EF901665A8762E951A.roa
Signing time: Mon 26 Aug 2024 15:31:32 +0000
ROA not before: Mon 26 Aug 2024 15:31:29 +0000
ROA not after: Thu 31 Aug 2028 15:31:29 +0000
asID: 328840
IP address blocks: 102.208.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206 (0x4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 26 15:31:29 2024 GMT
Not After : Aug 31 15:31:29 2028 GMT
Subject: CN=66cc9fd4-e252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:f1:56:ef:22:da:2a:30:f3:17:fa:8f:d0:
85:30:b2:e1:5b:bb:65:f6:fb:af:c3:19:15:69:d4:
6c:c4:c0:2c:e1:19:38:12:49:d4:d4:dd:70:26:a6:
8a:44:24:57:bd:28:72:61:38:45:dd:6f:7a:c8:93:
20:98:a0:cd:37:ee:4e:ca:94:b4:a0:fb:99:7d:bf:
a5:04:82:89:90:eb:75:32:c3:a1:83:99:cc:f3:10:
eb:97:fb:1d:37:ad:37:f5:8f:a7:73:4c:f9:39:df:
ce:05:ac:dc:dd:a8:22:59:91:13:e5:43:bc:c0:98:
19:34:0a:4e:21:33:be:2c:04:9d:48:51:2a:b4:43:
61:9f:cf:a9:c3:72:5f:45:5b:35:00:b3:6e:d4:5e:
8d:dd:36:74:b2:d4:9e:20:81:12:41:fe:3c:63:1a:
8d:d6:03:65:72:22:bc:19:f6:5b:fd:0b:85:54:26:
fb:7f:2b:a5:e7:c0:75:ea:5d:40:46:4b:b9:1f:55:
cf:57:ea:4f:21:e6:8e:58:93:a8:1a:c2:74:e0:7d:
89:16:67:3c:61:90:4b:cb:42:f8:72:0c:3d:f6:76:
7e:31:b2:75:68:48:13:dc:90:69:30:1d:37:e7:36:
55:62:03:08:36:3a:6c:8d:7b:6e:1d:ac:df:fe:17:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D6:09:2F:FF:0A:A0:00:13:B3:F0:2B:AB:08:B8:5D:61:7B:3E:AB
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/455DB88A63C011EF901665A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
22:59:70:1f:d9:7d:df:18:8b:3f:6d:7a:63:39:ee:30:bd:1a:
b0:05:cb:23:d2:86:bf:00:fb:08:55:ce:f9:a9:66:65:14:87:
c7:13:5c:a2:5c:14:71:f8:e3:2f:01:8c:f4:89:08:ad:e8:c6:
bb:b8:65:46:48:65:1d:30:d8:09:96:55:29:2c:0c:ad:ad:fc:
6a:8b:58:49:8c:71:e1:df:f2:6c:69:da:19:88:91:a6:9f:a7:
30:d9:43:2b:2e:8c:62:cb:16:a3:1f:e6:0d:fe:71:26:88:3a:
67:bd:2e:56:89:8a:6e:8f:50:93:a0:bd:72:ac:e3:99:6d:41:
3f:bd:2f:46:e7:91:09:c7:76:5c:59:75:f7:75:d0:d3:8c:04:
9f:db:20:ac:92:4b:54:ba:6c:df:a4:cb:50:6b:fb:12:ef:77:
12:9f:d6:8b:48:4c:ed:10:1f:eb:14:49:e1:b2:dc:56:37:24:
4b:60:07:bd:00:62:a5:a2:8e:67:b4:e1:39:dd:96:43:21:2b:
f2:57:e8:c7:9e:b9:19:e7:39:bd:a4:fa:f4:38:ee:f9:41:76:
f8:7e:9e:64:e9:32:c2:e2:55:e6:65:86:e9:a8:af:e9:b9:21:
9f:a9:08:97:0d:29:77:c0:59:97:30:b9:ff:f4:91:cb:ab:fc:
96:b3:57:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0
OTg0MkM4RDZBMDAeFw0yNDA4MjYxNTMxMjlaFw0yODA4MzExNTMxMjlaMBgxFjAU
BgNVBAMTDTY2Y2M5ZmQ0LWUyNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClRPFW7yLaKjDzF/qP0IUwsuFbu2X2+6/DGRVp1GzEwCzhGTgSSdTU3XAm
popEJFe9KHJhOEXdb3rIkyCYoM037k7KlLSg+5l9v6UEgomQ63Uyw6GDmczzEOuX
+x03rTf1j6dzTPk5384FrNzdqCJZkRPlQ7zAmBk0Ck4hM74sBJ1IUSq0Q2Gfz6nD
cl9FWzUAs27UXo3dNnSy1J4ggRJB/jxjGo3WA2VyIrwZ9lv9C4VUJvt/K6XnwHXq
XUBGS7kfVc9X6k8h5o5Yk6gawnTgfYkWZzxhkEvLQvhyDD32dn4xsnVoSBPckGkw
HTfnNlViAwg2OmyNe24drN/+FwIbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+9YJ
L/8KoAATs/Arqwi4XWF7PqswHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI
1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy
R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4
QTAxNENFLzQ1NURCODhBNjNDMDExRUY5MDE2NjVBODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm0GkwDQYJKoZIhvcNAQEL
BQADggEBACJZcB/Zfd8Yiz9temM57jC9GrAFyyPShr8A+whVzvmpZmUUh8cTXKJc
FHH44y8BjPSJCK3oxru4ZUZIZR0w2AmWVSksDK2t/GqLWEmMceHf8mxp2hmIkaaf
pzDZQysujGLLFqMf5g3+cSaIOme9LlaJim6PUJOgvXKs45ltQT+9L0bnkQnHdlxZ
dfd10NOMBJ/bIKySS1S6bN+ky1Br+xLvdxKf1otITO0QH+sUSeGy3FY3JEtgB70A
YqWijme04TndlkMhK/JX6MeeuRnnOb2k+vQ47vlBdvh+nmTpMsLiVeZlhumor+m5
IZ+pCJcNKXfAWZcwuf/0kcur/JazV78=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:08 2024 by rpki-client on console-fra.rpki-client.org