Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/3450E8747BC511EF861CA6A9762E951A.roa
File: 3450E8747BC511EF861CA6A9762E951A.roa (raw, json)
Hash identifier: S8B80PbkOpew+sJ621u11GoErvJntZrGDtgsuOUu6FA=
Subject key identifier: A7:B3:D0:FE:14:72:2E:A7:23:F3:6B:18:A6:2F:4A:C0:18:C8:BF:96
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 037A
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/3450E8747BC511EF861CA6A9762E951A.roa
Signing time: Thu 26 Sep 2024 05:07:19 +0000
ROA not before: Thu 26 Sep 2024 05:07:15 +0000
ROA not after: Thu 31 Jan 2030 05:07:15 +0000
asID: 25818
IP address blocks: 102.64.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Sep 26 05:07:15 2024 GMT
Not After : Jan 31 05:07:15 2030 GMT
Subject: CN=66f4ec07-15e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:ca:11:e0:12:bc:13:53:c3:8b:a1:4b:c1:
90:50:b7:2d:9f:6b:23:1a:03:61:55:92:65:ea:51:
4c:15:c5:04:a8:61:0e:86:0d:3f:cd:75:6d:71:ee:
c3:39:08:52:94:c2:27:8f:9d:54:17:2e:d6:a1:c7:
91:fc:d8:12:88:c3:38:5d:fd:7b:ae:13:00:d0:34:
ad:37:5b:db:93:bf:f1:35:c8:c8:e7:34:dd:87:6c:
26:c8:5c:01:e9:e6:90:01:eb:6e:80:a5:bb:e1:e8:
17:19:a1:51:1e:67:9e:86:10:7e:b4:16:16:3b:d2:
6b:ea:7d:19:b6:d9:70:ff:b4:73:1b:c3:15:66:ff:
9a:ce:59:ec:f8:15:25:26:93:70:38:a7:dd:db:e2:
7e:87:7a:ce:e9:a0:7b:4b:dd:c0:cc:d0:d3:81:4f:
68:5c:c5:a5:2e:27:38:13:fb:95:fb:9e:97:0c:ff:
04:26:6c:76:ba:95:2f:74:92:e1:87:6d:e5:91:c1:
08:a1:aa:c9:8f:4b:22:9a:a2:7b:db:76:b0:1e:60:
ed:9f:7d:89:90:b5:dc:53:1d:a4:61:a8:93:5f:f3:
17:20:a2:ba:ec:66:37:82:b2:be:f8:29:02:25:41:
fb:59:5c:92:c8:b9:b2:f4:5b:6b:56:7d:f1:46:bf:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B3:D0:FE:14:72:2E:A7:23:F3:6B:18:A6:2F:4A:C0:18:C8:BF:96
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/3450E8747BC511EF861CA6A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.64.99.0/24
Signature Algorithm: sha256WithRSAEncryption
28:df:87:02:a7:c4:19:68:fb:8d:9d:ab:6d:dd:01:75:37:97:
76:71:54:88:4e:42:82:8c:8a:f6:44:1b:76:f1:3f:2e:b4:9b:
39:81:47:fa:03:de:93:21:b9:3f:b7:e2:fc:ed:3f:82:50:c6:
9e:6b:d8:12:15:41:33:82:ea:2a:cd:8a:ce:b0:89:ef:ee:9b:
aa:40:f3:85:8f:ed:3d:9b:a1:61:71:7c:6d:83:1e:b8:82:37:
68:d0:02:03:74:68:96:a9:2e:e5:cd:cc:cd:81:53:15:22:90:
27:1f:0c:dc:b3:28:af:96:99:c2:01:f2:f0:87:1e:dd:1a:97:
77:05:45:41:41:ec:ce:ae:2c:3a:56:4c:1d:7f:d7:7c:6f:02:
79:b7:e9:08:a3:da:7c:84:9d:cd:cc:48:9d:52:a5:ca:7c:c8:
e1:e1:e0:f8:dc:91:0c:51:f9:a2:96:a7:a9:cd:4b:b9:2f:2f:
db:6a:c4:84:d9:fe:df:a1:b0:87:47:0d:0c:b4:ff:e9:e3:a0:
d4:fe:28:30:95:a9:e0:3d:9e:98:31:db:2e:08:43:e3:6d:fe:
47:e9:ab:5f:1f:a2:40:5d:fc:d6:de:d5:14:9e:05:21:78:f0:
42:27:ef:fd:e1:52:98:a1:be:87:ff:61:31:08:5e:92:d5:07:
36:86:74:18
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA3owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTZFNUZBRjExMC8GA1UEBRMoNTM3NUNGNENBMTY0M0IwOEMzNDFCREE3OUQ4QkUx
MDVCREMzQzQ4QjAeFw0yNDA5MjYwNTA3MTVaFw0zMDAxMzEwNTA3MTVaMBgxFjAU
BgNVBAMTDTY2ZjRlYzA3LTE1ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC81coR4BK8E1PDi6FLwZBQty2fayMaA2FVkmXqUUwVxQSoYQ6GDT/NdW1x
7sM5CFKUwiePnVQXLtahx5H82BKIwzhd/XuuEwDQNK03W9uTv/E1yMjnNN2HbCbI
XAHp5pAB626Apbvh6BcZoVEeZ56GEH60FhY70mvqfRm22XD/tHMbwxVm/5rOWez4
FSUmk3A4p93b4n6Hes7poHtL3cDM0NOBT2hcxaUuJzgT+5X7npcM/wQmbHa6lS90
kuGHbeWRwQihqsmPSyKaonvbdrAeYO2ffYmQtdxTHaRhqJNf8xcgorrsZjeCsr74
KQIlQftZXJLIubL0W2tWffFGv6PLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUp7PQ
/hRyLqcj82sYpi9KwBjIv5YwHwYDVR0jBBgwFoAUU3XPTKFkOwjDQb2nnYvhBb3D
xIswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYxMjIyNDY4L1UzWFBU
S0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UzWFBUS0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYx
MjIyNDY4LzM0NTBFODc0N0JDNTExRUY4NjFDQTZBOTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmQGMwDQYJKoZIhvcNAQEL
BQADggEBACjfhwKnxBlo+42dq23dAXU3l3ZxVIhOQoKMivZEG3bxPy60mzmBR/oD
3pMhuT+34vztP4JQxp5r2BIVQTOC6irNis6wie/um6pA84WP7T2boWFxfG2DHriC
N2jQAgN0aJapLuXNzM2BUxUikCcfDNyzKK+WmcIB8vCHHt0al3cFRUFB7M6uLDpW
TB1/13xvAnm36Qij2nyEnc3MSJ1Spcp8yOHh4PjckQxR+aKWp6nNS7kvL9tqxITZ
/t+hsIdHDQy0/+njoNT+KDCVqeA9npgx2y4IQ+Nt/kfpq18fokBd/Nbe1RSeBSF4
8EIn7/3hUpihvof/YTEIXpLVBzaGdBg=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:08 2024 by rpki-client on console-fra.rpki-client.org