Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/6902F9DC69DB11EFB4D7CE8D762E951A.roa
File: 6902F9DC69DB11EFB4D7CE8D762E951A.roa (raw, json)
Hash identifier: bWiMdJKsCZRqY9/D/tP0KK4vV03plvkNcR9SdfYbiCw=
Subject key identifier: 38:A5:78:09:93:90:A5:3A:20:5D:FB:66:F3:E3:9E:F5:98:30:0D:5A
Certificate issuer: /CN=F369F5CBAF/serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
Certificate serial: 04
Authority key identifier: C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/6902F9DC69DB11EFB4D7CE8D762E951A.roa
Signing time: Tue 03 Sep 2024 10:00:55 +0000
ROA not before: Tue 03 Sep 2024 10:00:52 +0000
ROA not after: Sat 30 Sep 2034 10:00:52 +0000
asID: 37491
IP address blocks: 102.221.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369F5CBAF/serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
Validity
Not Before: Sep 3 10:00:52 2024 GMT
Not After : Sep 30 10:00:52 2034 GMT
Subject: CN=66d6de57-e3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:c2:8c:3f:94:59:3d:e2:c1:95:06:98:6e:
8f:33:1b:40:8a:95:66:b7:9b:01:a3:c6:a8:f7:b0:
39:80:5c:b1:97:b8:2e:b2:3a:f3:42:c7:f8:62:d2:
8e:f6:31:79:e6:11:9e:d5:67:28:ea:a6:dd:ee:5d:
d6:b3:46:a0:ce:0a:fa:24:85:83:73:5e:32:81:63:
2b:66:07:74:67:e8:1b:f6:03:59:34:c4:32:1f:4d:
63:2f:cc:8c:12:6f:42:fb:76:35:f6:14:5f:49:d0:
90:7b:49:cd:c1:f4:ac:f8:e3:13:84:39:d2:d0:49:
e6:29:ae:9e:e5:fd:c6:d2:31:1e:be:13:f5:30:b3:
47:32:41:f7:4a:7c:25:fb:4d:04:4b:82:fa:26:6c:
f7:9b:0e:8c:3b:9b:99:41:7d:e2:fc:e8:b6:95:21:
10:bb:5c:bb:a1:c7:ed:c7:e1:f9:37:77:d1:dd:01:
a6:e6:17:3e:9f:8c:64:97:a1:6e:03:2d:d7:23:53:
bf:f9:fc:00:81:64:19:e5:1e:bf:44:14:f4:21:37:
29:1e:9d:67:38:79:41:52:9c:5a:70:0b:9c:58:20:
52:1b:8b:b9:dd:fa:5c:49:e1:54:92:49:df:43:c2:
64:bf:4b:0b:b8:c1:2d:93:d5:f7:11:ee:62:84:5d:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:78:09:93:90:A5:3A:20:5D:FB:66:F3:E3:9E:F5:98:30:0D:5A
X509v3 Authority Key Identifier:
keyid:C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/6902F9DC69DB11EFB4D7CE8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.155.0/24
Signature Algorithm: sha256WithRSAEncryption
66:29:30:26:34:c1:02:07:2c:39:e7:0c:02:a5:79:50:f0:47:
5c:d8:4b:db:61:f1:63:64:cb:cf:69:2a:84:63:fe:7e:e7:51:
24:f9:f0:d4:1f:59:c7:d6:e2:a4:84:5f:e7:ca:d4:54:4e:02:
c3:f4:df:f9:dd:93:c2:a2:ac:cd:00:9b:79:7e:07:64:07:10:
a2:47:16:75:a0:ab:c8:ac:65:20:6f:96:c8:7e:47:66:13:06:
b8:2b:2f:a7:b9:37:f2:29:23:e6:7e:c7:c1:d1:a2:81:34:f8:
da:6e:fa:a4:3d:98:03:83:94:fb:bc:5c:32:df:09:40:95:93:
96:03:b3:77:96:d8:42:d4:c2:1b:c6:27:6a:17:01:fc:1c:18:
bb:1f:5f:38:11:7f:5d:9f:bf:21:da:ce:3a:2e:71:f0:e0:da:
14:5f:f0:27:7b:17:3a:e9:c1:af:da:f9:4a:cc:c9:3c:44:26:
40:5f:4b:ee:8a:f6:dd:9a:a6:75:73:8d:93:76:b2:4c:8a:a5:
81:7b:f8:9e:6f:30:b0:e2:a4:43:12:c8:68:7e:34:9c:bb:dc:
41:fb:7b:89:d2:d7:a6:b3:10:4f:bb:30:da:08:18:83:98:2a:
b4:5b:01:a8:77:a0:bc:14:62:c5:d7:5c:b1:69:f9:a8:8e:42:
70:f6:b4:b7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
RjVDQkFGMTEwLwYDVQQFEyhDOTEzNkYxMjVCMENCRjAxQ0I1MkVGMEU5REFENjkz
QjlERTE3OUIxMB4XDTI0MDkwMzEwMDA1MloXDTM0MDkzMDEwMDA1MlowGDEWMBQG
A1UEAxMNNjZkNmRlNTctZTNkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALyAwow/lFk94sGVBphujzMbQIqVZrebAaPGqPewOYBcsZe4LrI680LH+GLS
jvYxeeYRntVnKOqm3e5d1rNGoM4K+iSFg3NeMoFjK2YHdGfoG/YDWTTEMh9NYy/M
jBJvQvt2NfYUX0nQkHtJzcH0rPjjE4Q50tBJ5imunuX9xtIxHr4T9TCzRzJB90p8
JftNBEuC+iZs95sOjDubmUF94vzotpUhELtcu6HH7cfh+Td30d0BpuYXPp+MZJeh
bgMt1yNTv/n8AIFkGeUev0QU9CE3KR6dZzh5QVKcWnALnFggUhuLud36XEnhVJJJ
30PCZL9LC7jBLZPV9xHuYoRdw78CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQ4pXgJ
k5ClOiBd+2bz4571mDANWjAfBgNVHSMEGDAWgBTJE28SWwy/ActS7w6drWk7neF5
sTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUY1Q0IvMzA2MzM1OTI2OUMyMTFFRjk5MzgwRDc0NzYyRTk1MUEveVJOdkVs
c012d0hMVXU4T25hMXBPNTNoZWJFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveVJOdkVsc012d0hMVXU4T25hMXBPNTNoZWJFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUY1Q0IvMzA2MzM1OTI2OUMyMTFFRjk5MzgwRDc0NzYy
RTk1MUEvNjkwMkY5REM2OURCMTFFRkI0RDdDRThENzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbdmzANBgkqhkiG9w0BAQsF
AAOCAQEAZikwJjTBAgcsOecMAqV5UPBHXNhL22HxY2TLz2kqhGP+fudRJPnw1B9Z
x9bipIRf58rUVE4Cw/Tf+d2TwqKszQCbeX4HZAcQokcWdaCryKxlIG+WyH5HZhMG
uCsvp7k38ikj5n7HwdGigTT42m76pD2YA4OU+7xcMt8JQJWTlgOzd5bYQtTCG8Yn
ahcB/BwYux9fOBF/XZ+/IdrOOi5x8ODaFF/wJ3sXOunBr9r5SszJPEQmQF9L7or2
3ZqmdXONk3ayTIqlgXv4nm8wsOKkQxLIaH40nLvcQft7idLXprMQT7sw2ggYg5gq
tFsBqHegvBRixddcsWn5qI5CcPa0tw==
-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:49 2024 by rpki-client on console-fra.rpki-client.org