Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/4A88B5706B5211EDA0EA3F88F1222468.roa
File: 4A88B5706B5211EDA0EA3F88F1222468.roa (raw, json)
Hash identifier: FO1Dj1s2/gzgT9jLou3n+Fly82D5SCTFYMrpFqZDnjk=
Subject key identifier: 87:52:FD:A1:3D:27:DC:58:A0:52:72:AB:2F:25:90:F0:75:34:5B:3F
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 021F
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/4A88B5706B5211EDA0EA3F88F1222468.roa
Signing time: Wed 23 Nov 2022 17:14:30 +0000
ROA not before: Wed 23 Nov 2022 17:14:24 +0000
ROA not after: Tue 23 Nov 2032 17:14:24 +0000
asID: 37645
IP address blocks: 102.216.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Nov 23 17:14:24 2022 GMT
Not After : Nov 23 17:14:24 2032 GMT
Subject: CN=637e54f6-b6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:c5:a6:b6:53:04:2e:61:9a:83:b6:3c:9f:
6e:79:32:2b:bf:42:d2:0f:97:65:79:8f:71:aa:a4:
f7:3b:3d:3c:e4:2c:1a:ae:2d:3a:bd:a2:e6:42:7d:
e3:04:4d:28:52:ee:c6:59:7e:90:34:95:28:97:b0:
4a:52:b1:18:94:c6:df:11:0b:89:e5:56:3f:19:1e:
6b:22:72:f7:8c:88:d4:99:9f:6f:44:5a:ce:f8:21:
aa:8a:a0:a7:78:0c:10:a0:28:96:d7:83:cd:ca:63:
f6:b1:99:40:35:f3:d4:45:0e:61:6b:3e:a5:d1:6b:
53:de:42:ff:dd:f9:90:dd:f2:de:06:56:c5:b2:61:
af:b8:7e:34:d0:7f:88:2c:52:23:2d:cc:ca:fe:c5:
d1:bd:82:53:c7:ca:fd:dd:d2:8e:02:74:b9:02:b5:
6e:59:9e:a7:35:78:47:b9:4a:3b:19:bb:70:48:b7:
cd:99:78:1b:1d:39:ab:b1:59:d7:14:48:a6:cc:6f:
43:15:27:98:7b:3f:47:ba:ea:72:57:b3:93:ac:b4:
0e:ba:e0:5b:c9:a8:a1:63:e4:10:2c:7a:48:de:bf:
be:b5:35:5f:60:7f:60:e0:64:63:d2:86:19:5b:71:
64:45:e1:af:dd:3f:7a:78:4a:dc:af:35:01:44:d9:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:FD:A1:3D:27:DC:58:A0:52:72:AB:2F:25:90:F0:75:34:5B:3F
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/4A88B5706B5211EDA0EA3F88F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.56.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:a2:72:52:09:61:cf:64:84:c9:b5:d7:58:d8:cd:22:44:d1:
9a:5a:87:4e:0d:cb:e8:c7:b9:5c:01:32:38:0e:36:3f:21:f8:
14:0a:1c:45:2d:29:93:00:02:fa:ee:05:1c:6e:42:41:04:d3:
60:10:86:5c:3c:4f:d7:ed:bd:bd:f7:75:9d:04:cd:7f:89:76:
38:44:1a:72:44:c9:0f:80:91:b6:e9:d5:7c:c2:82:36:b4:19:
23:0e:9e:b4:9e:15:f1:6b:b9:43:5a:b1:a1:1f:91:79:e4:95:
96:79:b7:dc:bb:02:17:e8:6b:3e:e8:67:04:b2:b2:ab:78:d8:
39:2e:f0:64:0c:2d:54:dc:4f:67:18:96:f3:4b:4b:27:8a:d1:
66:ea:ef:ff:89:42:4c:01:e5:18:5b:ae:01:c8:b4:0a:ad:c1:
22:92:46:f5:d3:79:91:ae:75:53:6e:8e:53:48:96:37:19:91:
83:9e:12:70:a9:28:09:87:7d:78:0f:73:9f:85:cf:60:a4:14:
8a:86:f5:c3:dc:26:fa:28:ee:8a:e5:3a:4f:aa:cb:6a:e4:41:
ee:5a:73:67:d0:56:c6:d8:01:f4:48:54:1d:ed:c0:a0:60:6b:
2e:b1:37:43:f0:66:40:e3:d6:6a:48:76:3d:56:f0:ad:ec:df:
28:b7:1a:13
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yMjExMjMxNzE0MjRaFw0zMjExMjMxNzE0MjRaMBgxFjAU
BgNVBAMMDTYzN2U1NGY2LWI2YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqIcWmtlMELmGag7Y8n255Miu/QtIPl2V5j3GqpPc7PTzkLBquLTq9ouZC
feMETShS7sZZfpA0lSiXsEpSsRiUxt8RC4nlVj8ZHmsicveMiNSZn29EWs74IaqK
oKd4DBCgKJbXg83KY/axmUA189RFDmFrPqXRa1PeQv/d+ZDd8t4GVsWyYa+4fjTQ
f4gsUiMtzMr+xdG9glPHyv3d0o4CdLkCtW5Znqc1eEe5SjsZu3BIt82ZeBsdOaux
WdcUSKbMb0MVJ5h7P0e66nJXs5OstA664FvJqKFj5BAsekjev761NV9gf2DgZGPS
hhlbcWRF4a/dP3p4StyvNQFE2eRFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUh1L9
oT0n3FigUnKrLyWQ8HU0Wz8wHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFLzRBODhCNTcwNkI1MjExRURBMEVBM0Y4OEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2DgwDQYJKoZIhvcNAQEL
BQADggEBAKyiclIJYc9khMm111jYzSJE0Zpah04Ny+jHuVwBMjgONj8h+BQKHEUt
KZMAAvruBRxuQkEE02AQhlw8T9ftvb33dZ0EzX+JdjhEGnJEyQ+Akbbp1XzCgja0
GSMOnrSeFfFruUNasaEfkXnklZZ5t9y7Ahfoaz7oZwSysqt42Dku8GQMLVTcT2cY
lvNLSyeK0Wbq7/+JQkwB5RhbrgHItAqtwSKSRvXTeZGudVNujlNIljcZkYOeEnCp
KAmHfXgPc5+Fz2CkFIqG9cPcJvoo7orlOk+qy2rkQe5ac2fQVsbYAfRIVB3twKBg
ay6xN0PwZkDj1mpIdj1W8K3s3yi3GhM=
-----END CERTIFICATE-----
Generated at Tue May 28 02:04:16 2024 by rpki-client on console-fra.rpki-client.org