Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/A5363C324DF411EFB122684E762E951A.roa
File: A5363C324DF411EFB122684E762E951A.roa (raw, json)
Hash identifier: ivvBl4JvviLSTjgv3ZDij0GhU0YfxugCBNbi1Fs5qs4=
Subject key identifier: 28:22:13:C7:30:B6:FB:30:DB:99:B3:77:35:BC:90:90:8A:6F:57:3F
Certificate issuer: /CN=F36AA6EDAF/serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
Certificate serial: 04B4
Authority key identifier: 27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/A5363C324DF411EFB122684E762E951A.roa
Signing time: Mon 29 Jul 2024 21:51:01 +0000
ROA not before: Mon 29 Jul 2024 21:50:58 +0000
ROA not after: Wed 30 Apr 2031 21:50:58 +0000
asID: 327750
IP address blocks: 102.208.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 01:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA6EDAF
Validity
Not Before: Jul 29 21:50:58 2024 GMT
Not After : Apr 30 21:50:58 2031 GMT
Subject: CN=66a80ec5-e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:b4:ee:5f:8b:4b:6b:61:a6:b1:b2:af:4d:
ae:e8:a3:5d:a7:63:97:10:80:1b:ab:21:94:de:c9:
ec:b3:46:a3:71:53:72:ea:71:8e:d9:c0:b8:d3:96:
47:df:52:0f:9a:16:df:8e:c1:10:4c:a4:69:68:72:
92:5d:06:43:54:7b:71:dc:88:82:10:37:d2:7a:5b:
b6:61:6c:1a:c5:22:a1:e1:c0:96:24:79:4f:ae:61:
09:09:8d:8c:0e:63:88:dc:b6:bb:66:43:a2:7a:77:
84:79:67:61:be:ed:58:d4:f3:07:9f:58:aa:7a:f2:
28:7e:3b:a2:53:b5:77:b8:ba:75:36:f7:a8:05:43:
89:64:c4:63:fd:e2:45:00:18:21:35:fe:4c:e5:9f:
ab:17:14:92:ad:04:a3:64:c8:96:85:91:04:f1:df:
3e:58:33:83:95:fe:ee:d7:af:df:68:41:2a:7f:b6:
9e:ec:e7:19:84:1b:7f:5b:cd:c4:48:20:bc:22:e0:
a7:0f:06:64:0a:35:82:4d:0a:7b:3c:21:ef:1c:37:
a8:84:48:c7:f3:f5:f3:b8:2f:6a:3e:b8:00:95:31:
64:f8:31:b0:ae:0d:28:fe:3f:48:1f:dd:62:71:ff:
c6:83:18:bb:63:bc:14:13:46:dd:44:b9:e9:b3:64:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:13:C7:30:B6:FB:30:DB:99:B3:77:35:BC:90:90:8A:6F:57:3F
X509v3 Authority Key Identifier:
keyid:27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/A5363C324DF411EFB122684E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:bc:16:1d:db:c1:b8:c9:60:ae:f3:90:6b:0d:27:61:19:51:
06:56:78:18:13:a9:85:79:08:47:ce:97:77:d9:bd:a6:9d:6b:
60:af:11:d6:69:9b:92:40:16:be:4c:44:3c:d6:04:a6:17:db:
0f:5e:10:be:78:14:a6:79:1b:36:ff:f9:8f:e1:34:0f:07:b6:
fa:26:81:d1:9d:ee:9f:f2:57:09:c2:c6:35:bf:2e:71:33:f3:
72:da:4f:fe:e6:cd:49:5f:8d:21:25:9d:a7:2b:ab:a9:7a:5e:
e6:92:9b:de:ed:fb:2d:de:40:51:2d:01:8b:d5:81:1b:3c:b7:
ec:28:2d:ba:4a:d6:a1:65:5d:4b:8d:33:e7:cf:ff:44:c7:83:
8f:7b:50:8a:c1:e1:c0:57:dc:a1:f3:e4:f3:c1:d3:57:f2:f0:
cc:3d:a2:5c:69:43:4b:5e:fe:c0:df:7f:ed:e0:4a:29:de:11:
33:85:5c:76:24:67:4a:c6:de:81:27:4b:54:89:45:3d:2a:a6:
c3:10:85:db:2b:71:9a:f1:80:88:1e:bd:31:6b:42:3a:31:0b:
8a:7b:f5:ed:f3:36:68:53:79:70:5a:fb:cb:6d:86:c8:1d:5e:
f2:61:0b:04:6c:a4:e8:13:e4:5d:10:8f:01:e7:6e:0f:8a:92:
96:12:ed:48
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUE2RURBRjExMC8GA1UEBRMoMjcwMzE2NzVBMjk1QUZFMzkzNUQ5RjYyMjYxQkQ0
ODY4RDE0NEM0RTAeFw0yNDA3MjkyMTUwNThaFw0zMTA0MzAyMTUwNThaMBgxFjAU
BgNVBAMTDTY2YTgwZWM1LWUzOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/arTuX4tLa2GmsbKvTa7oo12nY5cQgBurIZTeyeyzRqNxU3LqcY7ZwLjT
lkffUg+aFt+OwRBMpGlocpJdBkNUe3HciIIQN9J6W7ZhbBrFIqHhwJYkeU+uYQkJ
jYwOY4jctrtmQ6J6d4R5Z2G+7VjU8wefWKp68ih+O6JTtXe4unU296gFQ4lkxGP9
4kUAGCE1/kzln6sXFJKtBKNkyJaFkQTx3z5YM4OV/u7Xr99oQSp/tp7s5xmEG39b
zcRIILwi4KcPBmQKNYJNCns8Ie8cN6iESMfz9fO4L2o+uACVMWT4MbCuDSj+P0gf
3WJx/8aDGLtjvBQTRt1EuemzZCu7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKCIT
xzC2+zDbmbN3NbyQkIpvVz8wHwYDVR0jBBgwFoAUJwMWdaKVr+OTXZ9iJhvUho0U
TE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFBNkVELzU2MTg5NkQyQzIxOTExRUI5ODZBMUI3M0Y4QUVBMjI4L0p3TVdk
YUtWci1PVFhaOWlKaHZVaG8wVVRFNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0p3TVdkYUtWci1PVFhaOWlKaHZVaG8wVVRFNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkFBNkVELzU2MTg5NkQyQzIxOTExRUI5ODZBMUI3M0Y4
QUVBMjI4L0E1MzYzQzMyNERGNDExRUZCMTIyNjg0RTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0MAwDQYJKoZIhvcNAQEL
BQADggEBAGq8Fh3bwbjJYK7zkGsNJ2EZUQZWeBgTqYV5CEfOl3fZvaada2CvEdZp
m5JAFr5MRDzWBKYX2w9eEL54FKZ5Gzb/+Y/hNA8HtvomgdGd7p/yVwnCxjW/LnEz
83LaT/7mzUlfjSElnacrq6l6XuaSm97t+y3eQFEtAYvVgRs8t+woLbpK1qFlXUuN
M+fP/0THg497UIrB4cBX3KHz5PPB01fy8Mw9olxpQ0te/sDff+3gSineETOFXHYk
Z0rG3oEnS1SJRT0qpsMQhdsrcZrxgIgevTFrQjoxC4p79e3zNmhTeXBa+8tthsgd
XvJhCwRspOgT5F0QjwHnbg+KkpYS7Ug=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:47 2025 by rpki-client