Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/23D6AEEE13D911EDB46DE9BDF1222468.roa
File: 23D6AEEE13D911EDB46DE9BDF1222468.roa (raw, json)
Hash identifier: l28mywAfwN/N3mAJ5uusY3xTHQqgOweo5f2TzG8SlCU=
Subject key identifier: E0:E9:E8:9C:6B:C0:44:52:56:25:83:CF:CE:B6:E9:55:C3:E4:B9:9C
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 01A5
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/23D6AEEE13D911EDB46DE9BDF1222468.roa
Signing time: Thu 04 Aug 2022 09:38:05 +0000
ROA not before: Thu 04 Aug 2022 09:37:59 +0000
ROA not after: Wed 04 Aug 2032 09:37:59 +0000
asID: 37645
IP address blocks: 102.216.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Aug 4 09:37:59 2022 GMT
Not After : Aug 4 09:37:59 2032 GMT
Subject: CN=62eb937d-3c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:61:99:ac:3e:6f:10:b3:30:33:cc:3f:ed:
83:19:18:11:13:c5:ce:6f:9f:63:42:41:cb:0b:63:
0d:56:3b:93:ec:60:63:a9:b9:ad:44:ba:0d:8d:d2:
87:91:6c:c2:6d:a5:2e:e2:2e:b8:88:59:8d:9f:e2:
09:b3:64:8a:da:91:08:a4:49:91:6b:8b:81:bb:de:
06:b6:d3:d7:5b:15:a2:da:e0:1d:ba:3f:f4:49:01:
53:da:1a:ff:bd:6e:b1:3f:58:44:b3:ad:f4:dd:46:
42:98:43:57:7a:be:17:c8:b8:7b:a7:34:16:8b:33:
59:f8:a1:cb:a1:20:2d:a6:40:64:39:cf:d0:d0:d5:
eb:10:2d:03:d0:29:31:e4:32:17:c5:12:f1:d4:52:
36:60:bf:92:10:36:1a:a6:9d:40:62:62:f4:38:b1:
2b:14:e4:b6:1d:b3:ad:48:35:7f:0f:66:b9:84:14:
ad:b3:6f:48:7b:99:7e:6c:e7:6a:d0:64:8e:89:12:
1e:89:35:0b:ec:64:32:5d:1b:ba:23:cc:af:d1:1a:
45:d4:54:a2:2f:33:76:96:89:b6:88:39:45:d2:24:
16:7a:79:5b:14:32:e4:87:4e:ea:34:2a:2f:08:91:
cc:42:6b:b9:4a:de:3a:7d:f5:d2:f2:7e:de:e6:5b:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E9:E8:9C:6B:C0:44:52:56:25:83:CF:CE:B6:E9:55:C3:E4:B9:9C
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/23D6AEEE13D911EDB46DE9BDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:e1:4d:74:cb:b1:ee:20:af:37:db:7f:32:67:29:e3:00:84:
da:c7:11:43:e2:28:c2:b9:82:d1:c5:11:e7:4c:94:c3:da:65:
63:ed:ea:7b:df:47:c9:bd:2d:7c:75:70:9e:32:12:e8:45:de:
ef:5e:ec:42:77:7d:b8:79:cd:6e:0e:d2:b9:65:6b:15:6f:d3:
fb:68:bd:56:67:56:d7:71:b8:b5:57:fe:56:99:e2:aa:98:3b:
12:ee:60:26:e4:20:47:82:a0:e2:f1:18:38:76:86:d3:b6:ea:
34:96:0d:f2:c1:7d:0b:8f:1d:34:12:29:5e:2f:2d:d1:c5:15:
ba:ac:98:86:c5:10:34:5c:b5:56:ac:73:12:57:0d:80:b6:67:
d6:da:9b:73:43:e6:ce:b6:d3:4c:a1:cf:87:9b:05:13:1d:a6:
f7:79:5d:f3:ed:fd:b9:f3:e0:a3:0d:29:fc:24:01:fd:a7:57:
d2:d4:d8:11:53:50:ca:94:cc:ac:f1:fd:c6:a8:92:7b:ed:7a:
13:cf:b7:15:58:49:e9:08:2e:a3:29:12:ec:d5:6d:93:57:aa:
ba:37:11:77:8f:3b:d9:ce:ac:23:9a:2e:26:c3:80:af:4c:d0:
9e:8c:ea:b7:a6:27:7b:b4:03:8c:67:42:02:c7:c5:97:dc:a4:
dc:4d:57:44
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yMjA4MDQwOTM3NTlaFw0zMjA4MDQwOTM3NTlaMBgxFjAU
BgNVBAMMDTYyZWI5MzdkLTNjMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpO2GZrD5vELMwM8w/7YMZGBETxc5vn2NCQcsLYw1WO5PsYGOpua1Eug2N
0oeRbMJtpS7iLriIWY2f4gmzZIrakQikSZFri4G73ga209dbFaLa4B26P/RJAVPa
Gv+9brE/WESzrfTdRkKYQ1d6vhfIuHunNBaLM1n4ocuhIC2mQGQ5z9DQ1esQLQPQ
KTHkMhfFEvHUUjZgv5IQNhqmnUBiYvQ4sSsU5LYds61INX8PZrmEFK2zb0h7mX5s
52rQZI6JEh6JNQvsZDJdG7ojzK/RGkXUVKIvM3aWibaIOUXSJBZ6eVsUMuSHTuo0
Ki8IkcxCa7lK3jp99dLyft7mW+ThAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4Ono
nGvARFJWJYPPzrbpVcPkuZwwHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFLzIzRDZBRUVFMTNEOTExRURCNDZERTlCREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2DAwDQYJKoZIhvcNAQEL
BQADggEBAMbhTXTLse4grzfbfzJnKeMAhNrHEUPiKMK5gtHFEedMlMPaZWPt6nvf
R8m9LXx1cJ4yEuhF3u9e7EJ3fbh5zW4O0rllaxVv0/tovVZnVtdxuLVX/laZ4qqY
OxLuYCbkIEeCoOLxGDh2htO26jSWDfLBfQuPHTQSKV4vLdHFFbqsmIbFEDRctVas
cxJXDYC2Z9bam3ND5s6200yhz4ebBRMdpvd5XfPt/bnz4KMNKfwkAf2nV9LU2BFT
UMqUzKzx/caoknvtehPPtxVYSekILqMpEuzVbZNXqro3EXePO9nOrCOaLibDgK9M
0J6M6remJ3u0A4xnQgLHxZfcpNxNV0Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org