Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/F7B6336C994411EBA68CD72BF8AEA228.roa
File: F7B6336C994411EBA68CD72BF8AEA228.roa (raw, json)
Hash identifier: tviT3PsrUHAG/3p3zGi9oQp3+ts3yl4rcv4DkfQceXI=
Subject key identifier: B1:38:57:99:53:77:BF:E4:2E:DA:FB:A4:82:DA:23:E1:25:B2:5A:E2
Certificate issuer: /CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
Certificate serial: 01AC
Authority key identifier: D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/F7B6336C994411EBA68CD72BF8AEA228.roa
Signing time: Fri 09 Apr 2021 15:05:06 +0000
ROA not before: Fri 09 Apr 2021 15:05:01 +0000
ROA not after: Mon 01 Apr 2030 15:05:01 +0000
asID: 328337
IP address blocks: 102.134.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
Validity
Not Before: Apr 9 15:05:01 2021 GMT
Not After : Apr 1 15:05:01 2030 GMT
Subject: CN=60706d22-729d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:1b:8e:72:2f:b8:9b:f0:36:b9:1a:dc:4f:
68:ef:a6:10:6f:74:e3:1d:f6:8c:89:ce:20:4b:90:
1d:22:76:3d:92:83:1e:a6:05:d7:bd:a5:2b:b9:e6:
21:13:7b:ed:14:b4:7e:e9:a5:4a:ee:1a:c3:13:b5:
66:61:33:4d:7f:9a:2a:fe:98:a8:7a:56:49:bd:44:
06:18:5e:74:41:73:2a:f8:40:92:ad:7f:d6:cd:0b:
a9:2d:a1:78:2d:1c:98:86:da:89:b0:e1:98:92:73:
5d:c7:cb:9a:8e:fd:fb:ec:70:c6:58:fa:15:22:d8:
68:bf:74:18:28:48:b6:d1:4b:55:7e:d2:85:95:98:
e1:90:c5:d9:b1:54:65:f4:65:8d:dc:ad:3d:5c:14:
6c:17:cf:86:9e:d3:a5:41:30:2a:e6:1b:37:94:7b:
a0:61:b1:85:fc:f8:c8:5d:f2:5f:e6:9c:fd:00:0d:
0d:90:19:6b:74:b7:2c:87:37:01:01:9d:04:1a:96:
7b:0b:45:07:d2:44:1d:69:88:83:73:b3:4d:52:4a:
d6:6f:1d:c2:a0:1c:9e:ec:64:f6:b3:e4:67:03:0c:
4d:80:0c:cd:c4:0c:89:94:6b:f5:fa:64:f9:28:91:
63:2e:50:6f:11:0f:4e:86:f4:38:d3:40:a6:4f:e8:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:38:57:99:53:77:BF:E4:2E:DA:FB:A4:82:DA:23:E1:25:B2:5A:E2
X509v3 Authority Key Identifier:
keyid:D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/F7B6336C994411EBA68CD72BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:91:e1:48:5e:b5:69:da:42:24:14:20:2d:d7:41:3e:e6:7c:
f4:34:40:d8:bf:11:59:ea:9c:fc:f5:d4:32:c3:5e:28:4c:40:
53:d1:78:9a:3f:7a:c0:ba:02:03:85:50:35:d6:16:b6:72:71:
bf:27:57:11:ab:25:15:27:a9:9d:67:8d:dd:13:96:64:b6:43:
48:5c:5c:8f:4b:08:b0:96:0d:0e:02:c8:8b:6a:0a:60:ef:92:
86:4a:44:17:7d:11:d8:5b:b7:25:75:08:61:81:cd:79:ce:ef:
e3:98:e4:70:78:79:d4:62:03:59:f1:82:e9:7a:d4:02:58:d7:
52:35:9c:b3:cd:bf:95:b9:bc:24:48:19:e3:11:ce:59:9c:e7:
e1:5e:84:00:3f:2a:0a:ee:00:cc:17:70:c4:92:ab:d8:c1:a1:
10:f1:14:82:5f:db:6a:9f:17:7c:46:bc:65:a2:ad:c4:38:a5:
da:b2:10:46:dd:c7:92:aa:9f:65:29:a0:23:a2:af:64:9b:f1:
8f:f8:d5:d9:76:24:18:3b:9d:a5:c2:70:e3:f5:db:4c:f9:81:
cd:f8:48:9f:0e:e2:0a:b6:05:41:1d:44:33:71:15:11:30:5e:
05:b9:8d:ec:4e:5f:1d:69:b4:28:88:df:bf:48:df:e6:e2:f4:
f1:c3:29:0e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAawwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjcwRUZBRjExMC8GA1UEBRMoRDBCRTY3RDA0NUIzM0YwNUE1ODcxNTEwMzk5RTcw
OUM5OEY2RDc3RDAeFw0yMTA0MDkxNTA1MDFaFw0zMDA0MDExNTA1MDFaMBgxFjAU
BgNVBAMTDTYwNzA2ZDIyLTcyOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPwxuOci+4m/A2uRrcT2jvphBvdOMd9oyJziBLkB0idj2Sgx6mBde9pSu5
5iETe+0UtH7ppUruGsMTtWZhM01/mir+mKh6Vkm9RAYYXnRBcyr4QJKtf9bNC6kt
oXgtHJiG2omw4ZiSc13Hy5qO/fvscMZY+hUi2Gi/dBgoSLbRS1V+0oWVmOGQxdmx
VGX0ZY3crT1cFGwXz4ae06VBMCrmGzeUe6BhsYX8+Mhd8l/mnP0ADQ2QGWt0tyyH
NwEBnQQalnsLRQfSRB1piINzs01SStZvHcKgHJ7sZPaz5GcDDE2ADM3EDImUa/X6
ZPkokWMuUG8RD06G9DjTQKZP6MuvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsThX
mVN3v+Qu2vukgtoj4SWyWuIwHwYDVR0jBBgwFoAU0L5n0EWzPwWlhxUQOZ5wnJj2
130wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI3MEVGLzhGNzk4QjMyNUE2NjExRUFCQjIxNkY0QkY4QUVBMjI4LzBMNW4w
RVd6UHdXbGh4VVFPWjV3bkpqMjEzMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBMNW4wRVd6UHdXbGh4VVFPWjV3bkpqMjEzMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI3MEVGLzhGNzk4QjMyNUE2NjExRUFCQjIxNkY0QkY4
QUVBMjI4L0Y3QjYzMzZDOTk0NDExRUJBNjhDRDcyQkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhkMwDQYJKoZIhvcNAQEL
BQADggEBAH+R4UhetWnaQiQUIC3XQT7mfPQ0QNi/EVnqnPz11DLDXihMQFPReJo/
esC6AgOFUDXWFrZycb8nVxGrJRUnqZ1njd0TlmS2Q0hcXI9LCLCWDQ4CyItqCmDv
koZKRBd9EdhbtyV1CGGBzXnO7+OY5HB4edRiA1nxgul61AJY11I1nLPNv5W5vCRI
GeMRzlmc5+FehAA/KgruAMwXcMSSq9jBoRDxFIJf22qfF3xGvGWircQ4pdqyEEbd
x5Kqn2UpoCOir2Sb8Y/41dl2JBg7naXCcOP120z5gc34SJ8O4gq2BUEdRDNxFREw
XgW5jexOXx1ptCiI379I3+bi9PHDKQ4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org