Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/2BFA32F04F4911EF85B98B88762E951A.roa
File: 2BFA32F04F4911EF85B98B88762E951A.roa (raw, json)
Hash identifier: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=
Subject key identifier: 93:39:61:C3:26:27:5B:2C:46:3C:57:75:BE:19:58:DB:94:83:E8:61
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 4D
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/2BFA32F04F4911EF85B98B88762E951A.roa
Signing time: Wed 31 Jul 2024 14:28:36 +0000
ROA not before: Wed 31 Jul 2024 14:28:33 +0000
ROA not after: Mon 31 Jul 2034 14:28:33 +0000
asID: 36086
IP address blocks: 102.212.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: Jul 31 14:28:33 2024 GMT
Not After : Jul 31 14:28:33 2034 GMT
Subject: CN=66aa4a14-64d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:5b:6e:7f:dd:42:7e:fd:45:4c:d0:d6:f4:
a1:e4:e7:85:ed:b0:f4:e7:e4:6b:9e:28:e2:59:4d:
1d:4a:0f:9a:a8:3c:03:3c:33:ae:92:00:9d:b1:78:
5a:5d:01:3d:af:26:56:95:f4:28:22:66:51:88:77:
7b:18:79:5d:35:8c:b3:ec:b7:02:5e:20:77:2d:82:
7e:40:5f:ec:09:5d:8c:c3:28:77:31:91:7c:6c:22:
41:9a:10:a7:5a:c8:91:0d:a2:cc:c8:42:72:66:29:
4a:4f:83:de:f4:03:ed:63:bb:f6:b3:52:5d:81:7a:
7e:0e:02:82:08:54:87:34:21:c6:75:60:6d:04:fb:
2d:d0:19:64:28:97:3e:ca:a9:82:2d:55:95:67:e1:
fc:08:e4:6d:4e:bc:66:0b:bd:5c:b4:fa:ba:e5:d9:
8a:c1:dc:bd:c3:a7:db:13:be:c0:68:4f:79:37:cd:
26:29:7d:cf:b1:ad:4f:d5:7f:57:ba:d6:a5:5d:20:
b8:3e:e8:7e:44:69:dd:80:34:b1:f0:8c:19:78:80:
10:cc:e9:3e:49:d9:11:21:e7:df:a5:c7:d1:0c:a9:
ad:0e:fe:91:6a:11:66:1d:f8:1e:37:9c:0b:1f:2f:
77:8e:bd:fb:08:1a:31:48:a1:c6:6b:85:e5:96:74:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:39:61:C3:26:27:5B:2C:46:3C:57:75:BE:19:58:DB:94:83:E8:61
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/2BFA32F04F4911EF85B98B88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.247.0/24
Signature Algorithm: sha256WithRSAEncryption
21:70:63:c2:4b:ca:0e:86:3c:4a:14:d3:67:05:1b:5d:64:1c:
c8:f0:47:11:fa:8c:ed:2f:12:38:cb:30:23:0f:4b:7a:3f:d0:
35:c6:df:ad:df:49:aa:8f:2b:9f:7c:e2:78:28:14:88:a5:5f:
89:7e:b5:93:e0:1a:97:4f:8f:12:72:26:dc:0b:c9:40:35:b8:
2b:88:a7:c6:ef:61:f4:43:36:c2:43:1c:38:3d:6d:62:6d:0a:
2e:98:69:bc:26:54:42:20:12:83:b7:dc:6c:09:5a:d7:16:6c:
72:56:92:06:5d:96:fc:d3:eb:5c:6e:12:96:f0:7b:61:14:f2:
14:ac:53:bb:aa:be:77:02:39:32:b5:61:39:0c:d3:a0:4f:d7:
b9:8b:6c:c5:ab:15:6e:1a:0d:17:fa:1f:45:75:32:d2:0e:dd:
9b:1f:40:a8:e6:c3:e7:16:3a:36:5e:8d:df:40:a3:c3:07:4c:
18:de:b2:5e:db:0a:3f:f7:65:92:5a:75:f3:71:66:eb:14:30:
ab:77:ef:e7:de:4d:33:9d:94:64:38:58:e1:05:74:fb:d1:8c:
fd:68:32:14:28:a8:c8:0b:8b:da:23:97:5a:20:1b:c7:40:89:
51:da:80:45:36:43:5d:cc:32:7d:5e:ed:55:03:8c:2a:e8:bc:
51:a6:56:41
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBTTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
RTIxOUFGMTEwLwYDVQQFEyg5MUM5OUU0NTc5NjdCOTkyOUIyRURFNzk3OTcyOEIw
RkUyNjM5QUQ5MB4XDTI0MDczMTE0MjgzM1oXDTM0MDczMTE0MjgzM1owGDEWMBQG
A1UEAxMNNjZhYTRhMTQtNjRkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ8+W25/3UJ+/UVM0Nb0oeTnhe2w9Ofka54o4llNHUoPmqg8AzwzrpIAnbF4
Wl0BPa8mVpX0KCJmUYh3exh5XTWMs+y3Al4gdy2CfkBf7AldjMModzGRfGwiQZoQ
p1rIkQ2izMhCcmYpSk+D3vQD7WO79rNSXYF6fg4CgghUhzQhxnVgbQT7LdAZZCiX
Psqpgi1VlWfh/AjkbU68Zgu9XLT6uuXZisHcvcOn2xO+wGhPeTfNJil9z7GtT9V/
V7rWpV0guD7ofkRp3YA0sfCMGXiAEMzpPknZESHn36XH0QyprQ7+kWoRZh34Hjec
Cx8vd469+wgaMUihxmuF5ZZ0JdsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSTOWHD
JidbLEY8V3W+GVjblIPoYTAfBgNVHSMEGDAWgBSRyZ5FeWe5kpsu3nl5cosP4mOa
2TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QUUyMTkvNTJCQUMzRDgyMzEwMTFFRjkyODcxRjNBN0REQzI0QzIva2NtZVJY
bG51WktiTHQ1NWVYS0xELUpqbXRrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva2NtZVJYbG51WktiTHQ1NWVYS0xELUpqbXRrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUUyMTkvNTJCQUMzRDgyMzEwMTFFRjkyODcxRjNBN0RE
QzI0QzIvMkJGQTMyRjA0RjQ5MTFFRjg1Qjk4Qjg4NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbU9zANBgkqhkiG9w0BAQsF
AAOCAQEAIXBjwkvKDoY8ShTTZwUbXWQcyPBHEfqM7S8SOMswIw9Lej/QNcbfrd9J
qo8rn3zieCgUiKVfiX61k+Aal0+PEnIm3AvJQDW4K4inxu9h9EM2wkMcOD1tYm0K
LphpvCZUQiASg7fcbAla1xZsclaSBl2W/NPrXG4SlvB7YRTyFKxTu6q+dwI5MrVh
OQzToE/XuYtsxasVbhoNF/ofRXUy0g7dmx9AqObD5xY6Nl6N30CjwwdMGN6yXtsK
P/dlklp183Fm6xQwq3fv595NM52UZDhY4QV0+9GM/WgyFCioyAuL2iOXWiAbx0CJ
UdqARTZDXcwyfV7tVQOMKui8UaZWQQ==
-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:50 2024 by rpki-client on console-fra.rpki-client.org