Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/18B4BBA0F47F11EDA5C6BB1F4AD9E6FC.roa
File: 18B4BBA0F47F11EDA5C6BB1F4AD9E6FC.roa (raw, json)
Hash identifier: iDaSXL8GvSL3wsz+WOCDWrs8l092ib+Jl/G3Copfih4=
Subject key identifier: 00:42:13:5B:65:DC:03:ED:B5:4F:22:9A:AC:E4:8D:85:48:ED:48:27
Certificate issuer: /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial: 05EE
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/18B4BBA0F47F11EDA5C6BB1F4AD9E6FC.roa
Signing time: Wed 17 May 2023 06:50:23 +0000
ROA not before: Wed 17 May 2023 06:50:20 +0000
ROA not after: Tue 31 May 2033 06:50:20 +0000
asID: 37172
IP address blocks: 102.213.72.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1518 (0x5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Validity
Not Before: May 17 06:50:20 2023 GMT
Not After : May 31 06:50:20 2033 GMT
Subject: CN=6464792f-130f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:c6:4a:1a:26:67:87:43:b7:d7:70:0a:2c:
c7:0a:d7:dc:57:a1:0c:d3:6e:c8:eb:2c:0f:db:f8:
40:b0:da:4e:3c:27:12:e8:a2:c2:2a:c5:a4:8b:37:
68:a2:af:80:ed:f5:5a:0a:1e:99:3b:03:74:b9:41:
d9:ee:62:0d:ca:6d:5c:8a:e8:d2:00:31:21:ac:0d:
f9:52:3e:21:7f:8e:a0:e7:ee:5c:97:da:76:40:1c:
a0:a8:6d:6b:a1:c8:40:8b:68:0b:db:d7:d5:1f:15:
43:79:e6:46:cc:dc:46:1d:82:59:e3:f6:6e:8f:a0:
28:9e:ba:4e:6f:7f:dc:e1:78:2c:cb:91:e9:3c:fa:
e1:b3:c3:31:e0:f0:b1:d7:0d:7b:9d:aa:b5:0d:16:
38:2a:b4:2d:a9:62:41:66:8e:14:5b:f6:fb:1d:51:
48:1d:50:ef:2e:c2:bf:f6:dc:ea:31:21:55:7d:66:
16:13:24:13:9a:2f:a9:1b:27:1c:92:fe:47:f3:f6:
a2:b5:73:f6:cf:f6:6d:f4:a1:2f:6a:76:67:9b:32:
43:b2:86:d7:34:43:98:25:d4:e2:aa:69:04:70:6a:
1d:aa:02:10:75:8f:c3:f8:c7:a2:e3:91:2b:4b:e0:
54:29:66:d9:6b:e3:58:53:d5:ba:b0:d6:a5:02:85:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:13:5B:65:DC:03:ED:B5:4F:22:9A:AC:E4:8D:85:48:ED:48:27
X509v3 Authority Key Identifier:
keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/18B4BBA0F47F11EDA5C6BB1F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:a5:e3:71:e4:4a:37:e4:a4:b1:ee:9e:5e:0a:ad:1a:18:cc:
ec:c5:d2:e3:31:f7:1d:ab:d4:16:d7:a3:2e:25:8b:f8:aa:a4:
df:aa:81:4a:8b:af:00:2e:58:90:66:fc:86:96:3a:2b:35:9b:
30:59:c3:85:0a:3c:d2:46:2e:e3:45:1c:a5:b2:7f:e2:e4:1f:
13:fb:8e:c6:28:32:bb:b8:bf:cb:90:b5:cf:22:09:a2:f9:89:
36:5a:d3:83:3b:93:80:99:06:30:c7:21:62:79:1c:8c:83:72:
f1:b7:42:79:8f:38:15:74:d8:76:56:33:9a:ce:f3:90:31:4c:
fb:1a:57:e8:c6:de:8c:3e:b6:14:2b:13:5f:a1:db:06:11:38:
ac:a5:a2:d8:58:38:70:42:49:6f:89:57:b9:ee:ec:49:f6:66:
bc:69:0e:09:b8:3b:c2:61:4d:0b:28:20:f0:29:4b:c9:76:b1:
af:92:13:76:fa:95:95:18:cd:1b:5a:bb:74:55:80:21:52:1d:
12:7a:a3:ad:7f:64:58:19:c1:8f:ac:bf:e5:a3:d2:bb:68:d1:
81:b2:9e:4d:d4:84:77:a1:2e:7e:59:f6:41:3c:a1:f0:4d:0b:
33:06:3c:aa:ff:6f:11:05:01:68:6d:89:99:f2:b1:2a:df:08:
dc:b8:76:5a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTY3MUVBRjExMC8GA1UEBRMoMjNCRjA0NUY4QjhFOUJFODM4RTc5REQzMTJDQzk1
RUNCOENDNjEwQjAeFw0yMzA1MTcwNjUwMjBaFw0zMzA1MzEwNjUwMjBaMBgxFjAU
BgNVBAMTDTY0NjQ3OTJmLTEzMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3FsZKGiZnh0O313AKLMcK19xXoQzTbsjrLA/b+ECw2k48JxLoosIqxaSL
N2iir4Dt9VoKHpk7A3S5QdnuYg3KbVyK6NIAMSGsDflSPiF/jqDn7lyX2nZAHKCo
bWuhyECLaAvb19UfFUN55kbM3EYdglnj9m6PoCieuk5vf9zheCzLkek8+uGzwzHg
8LHXDXudqrUNFjgqtC2pYkFmjhRb9vsdUUgdUO8uwr/23OoxIVV9ZhYTJBOaL6kb
JxyS/kfz9qK1c/bP9m30oS9qdmebMkOyhtc0Q5gl1OKqaQRwah2qAhB1j8P4x6Lj
kStL4FQpZtlr41hT1bqw1qUChdKhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAEIT
W2XcA+21TyKarOSNhUjtSCcwHwYDVR0jBBgwFoAUI78EX4uOm+g4553TEsyV7LjM
YQswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2NzFFL0IwNjlCMTU4N0JCMTExRTk5REJFRDI0M0Y4QUVBMjI4L0k3OEVY
NHVPbS1nNDU1M1RFc3lWN0xqTVlRcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0k3OEVYNHVPbS1nNDU1M1RFc3lWN0xqTVlRcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk2NzFFL0IwNjlCMTU4N0JCMTExRTk5REJFRDI0M0Y4
QUVBMjI4LzE4QjRCQkEwRjQ3RjExRURBNUM2QkIxRjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1UgwDQYJKoZIhvcNAQEL
BQADggEBAFyl43HkSjfkpLHunl4KrRoYzOzF0uMx9x2r1BbXoy4li/iqpN+qgUqL
rwAuWJBm/IaWOis1mzBZw4UKPNJGLuNFHKWyf+LkHxP7jsYoMru4v8uQtc8iCaL5
iTZa04M7k4CZBjDHIWJ5HIyDcvG3QnmPOBV02HZWM5rO85AxTPsaV+jG3ow+thQr
E1+h2wYROKylothYOHBCSW+JV7nu7En2ZrxpDgm4O8JhTQsoIPApS8l2sa+SE3b6
lZUYzRtau3RVgCFSHRJ6o61/ZFgZwY+sv+Wj0rto0YGynk3UhHehLn5Z9kE8ofBN
CzMGPKr/bxEFAWhtiZnysSrfCNy4dlo=
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:14 2024 by rpki-client on console-fra.rpki-client.org