Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/CAE2B0CE166211EA91D0A63FF8AEA228.roa
File: CAE2B0CE166211EA91D0A63FF8AEA228.roa (raw, json)
Hash identifier: 4uRc72cdg/s8r9hidk66Wt0h4klL9GdvidHhfjvfBlk=
Subject key identifier: B4:EE:8E:CA:B4:BE:87:44:40:F1:3F:A8:89:04:97:F8:23:B3:59:3A
Certificate issuer: /CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Certificate serial: 12
Authority key identifier: 7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/CAE2B0CE166211EA91D0A63FF8AEA228.roa
Signing time: Wed 04 Dec 2019 06:53:36 +0000
ROA not before: Wed 04 Dec 2019 06:53:30 +0000
ROA not after: Sat 01 Dec 2029 06:53:30 +0000
asID: 328568
IP address blocks: 102.23.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Validity
Not Before: Dec 4 06:53:30 2019 GMT
Not After : Dec 1 06:53:30 2029 GMT
Subject: CN=5de757ef-6293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:2e:df:1f:8a:8d:1b:a7:12:c7:a7:56:b8:
44:85:e3:fe:f7:bf:00:6c:0a:d3:34:60:78:ac:ad:
6a:e4:b6:0f:65:74:bb:09:64:67:c2:e2:fc:2f:05:
18:95:f2:7a:c0:ef:a4:79:81:22:2f:1d:e7:37:db:
e1:4f:1e:51:85:c7:ca:42:ae:26:a8:ea:ec:65:5a:
31:69:b2:7c:4f:e7:fd:66:0d:9d:9b:82:3d:0e:8b:
7a:64:4f:52:2c:c9:5f:c2:bf:70:04:22:13:53:ed:
48:9e:63:25:a5:85:9f:71:f1:b8:72:0d:d6:f2:3f:
fe:33:f1:f8:35:52:e3:e6:99:95:92:c7:1a:0d:aa:
d1:fa:fb:68:09:50:5e:86:1e:1a:78:a1:41:40:d1:
2b:dd:3d:e5:46:d1:ef:1d:a1:2e:c0:0c:e8:aa:73:
9e:5b:d9:8f:fb:e2:77:1c:49:9e:93:e8:35:59:54:
89:30:b2:93:d4:b1:d5:e9:65:71:84:75:5e:0a:0d:
8a:f7:6e:33:64:3e:fb:12:01:dc:8b:dd:5a:01:10:
20:78:a7:6c:d4:6f:8a:13:c6:7d:33:64:a7:98:1f:
84:15:d2:13:51:ee:46:d4:f0:0b:03:04:9c:77:6d:
04:b6:de:ec:dc:9e:bb:61:a9:e8:48:db:11:fc:c4:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EE:8E:CA:B4:BE:87:44:40:F1:3F:A8:89:04:97:F8:23:B3:59:3A
X509v3 Authority Key Identifier:
keyid:7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/CAE2B0CE166211EA91D0A63FF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:88:0c:7d:5b:17:70:a5:06:8d:eb:d4:c5:fb:c4:30:70:9d:
1d:be:73:2b:ee:2e:c3:6d:ee:93:57:a5:a9:2f:6e:98:3f:74:
65:3c:a9:47:fe:e8:85:8f:06:79:32:e5:d5:08:a0:01:27:c5:
7c:1d:9e:47:08:16:56:28:aa:a4:bc:2e:c7:cc:99:03:8e:e2:
ab:b9:71:90:72:17:f1:46:2c:14:39:ee:a0:54:95:db:63:d4:
21:ed:cf:08:ef:d0:e9:42:7c:f7:3f:68:e7:0d:38:f3:f5:a8:
00:f0:f3:12:93:17:f6:84:11:03:26:c0:59:0a:08:3f:be:c6:
14:e7:34:f5:96:98:d9:8b:fb:5e:a2:08:52:76:2b:8f:47:83:
1f:ef:3d:32:ed:81:3b:ba:c2:19:8c:98:81:a5:a3:29:9c:cb:
c3:59:1a:be:ec:64:b6:ac:90:45:67:06:be:e0:7b:ec:69:e0:
ef:4a:d6:26:11:ca:94:ea:27:5e:37:b1:01:58:9f:5e:fd:1f:
e0:ce:e3:84:fd:bf:c0:29:dc:7f:cf:5d:14:57:95:6d:a7:b6:
ff:b2:54:0c:fe:bc:99:71:3f:53:5a:70:14:9a:b5:e1:55:c5:
c6:3f:75:3f:36:ae:9e:1b:cc:6e:1c:84:b2:dd:8f:8a:8e:a5:
8c:2c:e0:de
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
Nzk1NUFGMTEwLwYDVQQFEyg3QkU4NTlCNDI4NkJFMUVBMTRCODhDN0EzMEI1Q0U0
RkQ4NTk4MEVDMB4XDTE5MTIwNDA2NTMzMFoXDTI5MTIwMTA2NTMzMFowGDEWMBQG
A1UEAxMNNWRlNzU3ZWYtNjI5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL4rLt8fio0bpxLHp1a4RIXj/ve/AGwK0zRgeKytauS2D2V0uwlkZ8Li/C8F
GJXyesDvpHmBIi8d5zfb4U8eUYXHykKuJqjq7GVaMWmyfE/n/WYNnZuCPQ6LemRP
UizJX8K/cAQiE1PtSJ5jJaWFn3HxuHIN1vI//jPx+DVS4+aZlZLHGg2q0fr7aAlQ
XoYeGnihQUDRK9095UbR7x2hLsAM6KpznlvZj/vidxxJnpPoNVlUiTCyk9Sx1ell
cYR1XgoNivduM2Q++xIB3IvdWgEQIHinbNRvihPGfTNkp5gfhBXSE1HuRtTwCwME
nHdtBLbe7Nyeu2Gp6EjbEfzEqM0CAwEAAaOCAm4wggJqMB0GA1UdDgQWBBS07o7K
tL6HREDxP6iJBJf4I7NZOjAfBgNVHSMEGDAWgBR76Fm0KGvh6hS4jHowtc5P2FmA
7DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Qjc5NTUvRjUwRURGMkMwRDEwMTFFQThCNzk4RTQzRjhBRUEyMjgvZS1oWnRD
aHI0ZW9VdUl4Nk1MWE9UOWhaZ093LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZS1oWnRDaHI0ZW9VdUl4Nk1MWE9UOWhaZ093LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Qjc5NTUvRjUwRURGMkMwRDEwMTFFQThCNzk4RTQzRjhB
RUEyMjgvQ0FFMkIwQ0UxNjYyMTFFQTkxRDBBNjNGRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZhdbMA0GCSqGSIb3DQEBCwUAA4IBAQC4
iAx9WxdwpQaN69TF+8QwcJ0dvnMr7i7Dbe6TV6WpL26YP3RlPKlH/uiFjwZ5MuXV
CKABJ8V8HZ5HCBZWKKqkvC7HzJkDjuKruXGQchfxRiwUOe6gVJXbY9Qh7c8I79Dp
Qnz3P2jnDTjz9agA8PMSkxf2hBEDJsBZCgg/vsYU5zT1lpjZi/teoghSdiuPR4Mf
7z0y7YE7usIZjJiBpaMpnMvDWRq+7GS2rJBFZwa+4HvsaeDvStYmEcqU6ideN7EB
WJ9e/R/gzuOE/b/AKdx/z10UV5Vtp7b/slQM/ryZcT9TWnAUmrXhVcXGP3U/Nq6e
G8xuHISy3Y+KjqWMLODe
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org