Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/16B06660CA3111ED940108AFF1222468.roa
File: 16B06660CA3111ED940108AFF1222468.roa (raw, json)
Hash identifier: jr9WoWdm4T7mWL+JKRzWsuT9eHBQ8UqgT0cWGf8Lei4=
Subject key identifier: 34:3E:B3:78:59:05:5C:4F:7B:3A:5D:BD:38:DF:DC:71:C9:88:24:03
Certificate issuer: /CN=F36B506BAF/serialNumber=DEAA5EE1D70D618ECD901DAEDBA8C8623BAFCAFE
Certificate serial: 02
Authority key identifier: DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/16B06660CA3111ED940108AFF1222468.roa
Signing time: Fri 24 Mar 2023 10:46:11 +0000
ROA not before: Fri 24 Mar 2023 10:46:06 +0000
ROA not after: Thu 24 Mar 2033 10:46:06 +0000
asID: 328957
IP address blocks: 102.212.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B506BAF/serialNumber=DEAA5EE1D70D618ECD901DAEDBA8C8623BAFCAFE
Validity
Not Before: Mar 24 10:46:06 2023 GMT
Not After : Mar 24 10:46:06 2033 GMT
Subject: CN=641d7f72-3776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:31:21:56:2d:11:7e:10:30:11:3c:8e:5b:
6a:0b:2c:3e:74:ae:15:ea:ca:ba:40:65:67:e8:b9:
ec:d1:99:e4:26:bf:69:78:d7:26:bd:73:ff:b1:3f:
72:3e:11:56:e6:8d:a4:b7:3d:67:9d:3d:bf:ad:71:
e9:4a:33:7a:66:ff:d0:dd:c2:1b:b5:2a:52:ce:5f:
05:b5:ac:62:ac:c9:43:7b:74:0b:38:83:db:96:71:
89:f4:5e:28:1a:c1:c6:0d:19:1e:71:48:db:eb:a3:
d3:cf:e4:75:ea:85:ed:dd:7e:b0:aa:50:53:30:7d:
ed:ba:0e:fa:66:3e:d4:50:2f:0f:bd:b2:7b:25:3c:
74:7d:43:45:2f:81:15:44:0d:b4:65:3a:50:ba:9d:
e5:03:30:61:20:63:b4:0b:a7:8a:7f:ab:78:85:53:
21:4e:06:9f:9e:b2:ff:ed:2c:ef:f9:75:28:c8:7e:
c3:41:fd:ae:02:b8:62:d3:d1:42:0c:92:63:9b:89:
a4:af:89:eb:22:b4:b0:8c:db:93:44:97:25:8a:fc:
27:f0:51:2c:4a:b2:78:32:c0:47:79:bf:0a:e1:86:
96:4c:79:70:33:73:b4:4c:cb:c7:3a:9f:8f:50:ab:
52:2c:f8:35:10:f9:e4:fb:70:46:6c:34:88:9f:6d:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:B3:78:59:05:5C:4F:7B:3A:5D:BD:38:DF:DC:71:C9:88:24:03
X509v3 Authority Key Identifier:
keyid:DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/16B06660CA3111ED940108AFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:12:ed:3b:6e:67:a5:85:66:66:46:68:69:bd:7c:c8:79:a2:
bc:f5:d1:01:db:82:93:f8:a3:a0:89:c6:0e:6d:f0:ac:65:58:
f2:fc:0f:8b:5b:09:44:fa:ed:a7:97:ce:44:12:b2:3b:a5:cb:
d6:e8:cb:66:74:7b:47:bd:06:36:93:57:35:f4:27:06:5e:95:
af:30:ef:fb:db:f1:be:03:2a:c4:47:b8:d2:9d:5c:c9:bf:a3:
b4:62:3b:1d:be:27:14:86:96:9a:05:50:f3:b2:f5:e3:48:2b:
39:44:21:ed:6a:e5:c3:54:8b:08:db:d6:12:7e:9a:48:e4:c4:
ec:c5:cf:ec:f7:1d:15:04:ca:2e:44:87:0c:60:69:a6:58:3b:
82:9c:e3:be:24:02:5d:dc:43:f6:67:4b:5b:1a:41:d1:cf:ed:
62:58:87:24:05:83:26:c0:85:22:8e:29:fd:2b:92:6d:01:fe:
bc:61:50:15:b6:48:fd:c1:84:42:ac:d2:19:57:33:5e:d0:0c:
58:f1:14:b0:f1:28:71:e3:d2:fe:8e:ff:7c:d7:dd:2a:33:c8:
3b:99:28:cf:e0:98:9b:6b:05:dd:6d:7d:84:f6:bd:67:db:8e:
79:19:95:38:7a:f2:cb:24:aa:ef:18:12:98:da:10:8a:5f:38:
19:48:84:57
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZC
NTA2QkFGMTEwLwYDVQQFEyhERUFBNUVFMUQ3MEQ2MThFQ0Q5MDFEQUVEQkE4Qzg2
MjNCQUZDQUZFMB4XDTIzMDMyNDEwNDYwNloXDTMzMDMyNDEwNDYwNlowGDEWMBQG
A1UEAwwNNjQxZDdmNzItMzc3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMlFMSFWLRF+EDARPI5bagssPnSuFerKukBlZ+i57NGZ5Ca/aXjXJr1z/7E/
cj4RVuaNpLc9Z509v61x6Uozemb/0N3CG7UqUs5fBbWsYqzJQ3t0CziD25ZxifRe
KBrBxg0ZHnFI2+uj08/kdeqF7d1+sKpQUzB97boO+mY+1FAvD72yeyU8dH1DRS+B
FUQNtGU6ULqd5QMwYSBjtAunin+reIVTIU4Gn56y/+0s7/l1KMh+w0H9rgK4YtPR
QgySY5uJpK+J6yK0sIzbk0SXJYr8J/BRLEqyeDLAR3m/CuGGlkx5cDNztEzLxzqf
j1CrUiz4NRD55PtwRmw0iJ9t838CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQ0PrN4
WQVcT3s6Xb0439xxyYgkAzAfBgNVHSMEGDAWgBTeql7h1w1hjs2QHa7bqMhiO6/K
/jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjUwNkIvRkZFRjRGODJDQTJGMTFFRDg0MDJCNEFCRjEyMjI0NjgvM3FwZTRk
Y05ZWTdOa0IydTI2aklZanV2eXY0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvM3FwZTRkY05ZWTdOa0IydTI2aklZanV2eXY0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjUwNkIvRkZFRjRGODJDQTJGMTFFRDg0MDJCNEFCRjEy
MjI0NjgvMTZCMDY2NjBDQTMxMTFFRDk0MDEwOEFGRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbUsDANBgkqhkiG9w0BAQsF
AAOCAQEAehLtO25npYVmZkZoab18yHmivPXRAduCk/ijoInGDm3wrGVY8vwPi1sJ
RPrtp5fORBKyO6XL1ujLZnR7R70GNpNXNfQnBl6VrzDv+9vxvgMqxEe40p1cyb+j
tGI7Hb4nFIaWmgVQ87L140grOUQh7Wrlw1SLCNvWEn6aSOTE7MXP7PcdFQTKLkSH
DGBpplg7gpzjviQCXdxD9mdLWxpB0c/tYliHJAWDJsCFIo4p/SuSbQH+vGFQFbZI
/cGEQqzSGVczXtAMWPEUsPEocePS/o7/fNfdKjPIO5koz+CYm2sF3W19hPa9Z9uO
eRmVOHryyySq7xgSmNoQil84GUiEVw==
-----END CERTIFICATE-----
Generated at Thu May 2 04:04:25 2024 by rpki-client on console-fra.rpki-client.org