Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/CAB95F3A413111EBAEFE3009F8AEA228.roa
File: CAB95F3A413111EBAEFE3009F8AEA228.roa (raw, json)
Hash identifier: 3J8csPHyGJk8M/namF0fmG+U4+q5VVyeZJygS1yfavI=
Subject key identifier: 1C:FA:44:38:40:E2:D9:21:9F:A3:91:A3:8E:D0:23:23:42:05:24:4E
Certificate issuer: /CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Certificate serial: 02
Authority key identifier: A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/CAB95F3A413111EBAEFE3009F8AEA228.roa
Signing time: Fri 18 Dec 2020 13:06:08 +0000
ROA not before: Fri 18 Dec 2020 13:06:02 +0000
ROA not after: Thu 18 Dec 2025 13:06:02 +0000
asID: 37384
IP address blocks: 2001:43f8:a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Validity
Not Before: Dec 18 13:06:02 2020 GMT
Not After : Dec 18 13:06:02 2025 GMT
Subject: CN=5fdca940-d1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6d:45:af:12:3c:b4:74:03:8b:29:76:95:b4:
5a:da:37:06:50:75:49:3e:89:2e:f6:45:84:aa:f4:
32:75:87:1c:d1:6f:62:9c:bb:81:5f:73:aa:15:84:
1b:b7:d2:23:5d:40:ae:ae:75:8e:40:ec:81:a2:b1:
42:45:4e:59:63:cb:6e:f9:69:ac:db:ef:a8:78:fb:
c0:5d:54:ae:ab:0e:37:32:29:27:49:27:61:a0:db:
2e:62:d3:f8:e4:70:14:f7:ff:34:a3:72:ad:87:1e:
53:3f:ef:c8:94:e9:a5:f9:42:b6:11:d1:90:5c:9d:
93:78:93:1e:ef:8c:c3:45:7f:72:2c:cf:e5:14:d4:
7a:bb:70:4c:fe:7e:f7:f9:64:48:89:44:7b:c6:7f:
bd:63:b1:07:fd:ab:a7:d7:9a:64:08:8c:ff:b4:6a:
0e:64:a7:74:d3:ed:d2:4a:42:52:f2:6e:2b:ff:e0:
a9:9e:57:d3:67:b5:77:94:7c:fc:26:b0:9a:49:1c:
4a:5e:40:04:d8:94:ca:d4:8a:56:cb:8d:80:3e:67:
d5:ad:da:cc:67:db:88:14:80:27:c5:b6:ea:41:32:
62:6c:a7:8a:80:9a:41:71:12:21:a9:17:61:fd:5f:
46:66:d9:f9:55:65:e3:eb:cb:59:76:52:0a:e3:86:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:44:38:40:E2:D9:21:9F:A3:91:A3:8E:D0:23:23:42:05:24:4E
X509v3 Authority Key Identifier:
keyid:A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/CAB95F3A413111EBAEFE3009F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:a80::/48
Signature Algorithm: sha256WithRSAEncryption
56:6f:8e:62:6a:40:3d:93:ae:77:78:73:43:ab:26:0b:8f:99:
94:cd:c4:94:a6:1c:f9:75:3d:0e:4d:9f:8e:4f:56:ca:59:35:
2d:32:02:9a:d8:d5:b5:82:01:7e:3e:46:54:d6:69:b0:d6:5e:
6c:0d:96:40:69:a1:fa:b6:7e:0d:39:64:61:ec:f4:b4:17:49:
13:1d:c5:cf:e9:e5:7a:d9:d0:a1:82:3f:1b:fa:24:42:54:1c:
1e:99:05:4c:31:ff:9c:b9:ea:b8:37:17:02:19:e9:1d:04:4c:
1f:06:2d:04:36:e9:2b:f9:77:d1:7f:7f:e9:1b:8a:e8:64:17:
e0:15:dc:5c:95:01:18:04:02:c4:61:68:b6:ad:34:62:5d:1f:
4b:45:68:fa:9b:94:e0:f1:4f:3a:7e:f8:6a:85:a1:10:47:80:
ef:9b:76:98:f3:20:cb:f6:33:03:76:c0:60:2b:eb:2d:55:8c:
9c:d2:03:01:05:32:17:2a:3b:f8:8c:f4:b4:94:99:88:f7:ab:
ca:e0:69:62:84:f7:e7:0f:2a:f7:3e:4a:93:e1:ca:b7:d9:92:
ed:f8:d4:ed:fa:e1:ea:b0:4f:17:d2:8d:bb:a6:ec:b8:d5:75:
d0:33:50:ce:d1:ea:a5:02:d9:a1:ba:7f:dd:a7:fb:5b:fc:ff:
95:e7:c5:43
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
ODdCMkFGMTEwLwYDVQQFEyhBNENFMjRGRTBFRTI5NzZBREU1MEIzOURGRkZEMkQ3
RTQyQzBGMjhBMB4XDTIwMTIxODEzMDYwMloXDTI1MTIxODEzMDYwMlowGDEWMBQG
A1UEAxMNNWZkY2E5NDAtZDFkNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPptRa8SPLR0A4spdpW0Wto3BlB1ST6JLvZFhKr0MnWHHNFvYpy7gV9zqhWE
G7fSI11Arq51jkDsgaKxQkVOWWPLbvlprNvvqHj7wF1UrqsONzIpJ0knYaDbLmLT
+ORwFPf/NKNyrYceUz/vyJTppflCthHRkFydk3iTHu+Mw0V/cizP5RTUertwTP5+
9/lkSIlEe8Z/vWOxB/2rp9eaZAiM/7RqDmSndNPt0kpCUvJuK//gqZ5X02e1d5R8
/CawmkkcSl5ABNiUytSKVsuNgD5n1a3azGfbiBSAJ8W26kEyYmynioCaQXESIakX
Yf1fRmbZ+VVl4+vLWXZSCuOG78MCAwEAAaOCAqgwggKkMB0GA1UdDgQWBBQc+kQ4
QOLZIZ+jkaOO0CMjQgUkTjAfBgNVHSMEGDAWgBSkziT+DuKXat5Qs53//S1+QsDy
ijAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTg3QjIvMTI5Mjk0OTQ0MTMxMTFFQjgxRDA1RjA4RjhBRUEyMjgvcE00a19n
N2lsMnJlVUxPZF9fMHRma0xBOG9vLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcE00a19nN2lsMnJlVUxPZF9fMHRma0xBOG9vLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTg3QjIvMTI5Mjk0OTQ0MTMxMTFFQjgxRDA1RjA4RjhB
RUEyMjgvQ0FCOTVGM0E0MTMxMTFFQkFFRkUzMDA5RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABQ/gKgDANBgkqhkiG9w0B
AQsFAAOCAQEAVm+OYmpAPZOud3hzQ6smC4+ZlM3ElKYc+XU9Dk2fjk9Wylk1LTIC
mtjVtYIBfj5GVNZpsNZebA2WQGmh+rZ+DTlkYez0tBdJEx3Fz+nletnQoYI/G/ok
QlQcHpkFTDH/nLnquDcXAhnpHQRMHwYtBDbpK/l30X9/6RuK6GQX4BXcXJUBGAQC
xGFotq00Yl0fS0Vo+puU4PFPOn74aoWhEEeA75t2mPMgy/YzA3bAYCvrLVWMnNID
AQUyFyo7+Iz0tJSZiPeryuBpYoT35w8q9z5Kk+HKt9mS7fjU7frh6rBPF9KNu6bs
uNV10DNQztHqpQLZobp/3af7W/z/lefFQw==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:45:28 2024 by rpki-client on console-fra.rpki-client.org