Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/20E37D84181E11EF884D5670017001B1.roa
File: 20E37D84181E11EF884D5670017001B1.roa (raw, json)
Hash identifier: r4JXcPcpV3yHS4MSrJyqmzyEIPekoajFMK2etOSwSmw=
Subject key identifier: A1:E4:85:C6:43:DA:F5:75:21:E2:D0:59:DA:C9:C4:2D:39:86:2C:73
Certificate issuer: /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial: 074A
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/20E37D84181E11EF884D5670017001B1.roa
Signing time: Wed 22 May 2024 09:31:55 +0000
ROA not before: Wed 22 May 2024 09:31:52 +0000
ROA not after: Thu 31 Dec 2043 09:31:52 +0000
asID: 2018
IP address blocks: 196.24.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 22 Jun 2024 00:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866 (0x74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Validity
Not Before: May 22 09:31:52 2024 GMT
Not After : Dec 31 09:31:52 2043 GMT
Subject: CN=664dbb8b-540f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:6b:ce:cf:eb:35:ac:b1:0b:07:34:bf:de:
f4:28:1f:49:78:7b:05:69:d4:be:c8:8f:05:46:ba:
ee:9a:50:72:08:48:53:75:fb:a3:35:d5:3f:f9:6b:
d7:6e:79:91:bc:8c:68:ca:a8:7c:37:a0:1e:da:2d:
cd:14:f3:1a:30:99:d1:bd:fc:86:45:e5:a8:53:f1:
35:58:cd:62:3d:27:83:79:70:a6:6f:e9:ac:33:83:
57:60:b6:5f:80:24:36:54:dd:ae:b9:4e:0e:8c:ba:
ef:c0:5f:be:44:62:47:1e:48:68:7f:32:a9:7d:33:
01:60:a2:9a:29:36:aa:3e:eb:fc:38:62:8c:39:79:
4b:18:f1:16:df:e5:42:f4:de:63:7f:df:05:32:d4:
b8:2e:51:43:6c:68:33:fa:4f:62:b2:66:7b:1e:d7:
4b:27:a1:05:93:b9:96:50:7b:24:fd:02:61:51:d6:
88:7a:33:4b:05:a5:82:24:77:a1:12:84:65:66:8a:
81:5c:3f:38:cc:22:e4:9e:5c:3e:ad:25:26:54:af:
75:ad:67:41:64:ed:2a:11:a0:f0:c4:cb:d7:4b:cd:
2c:3a:35:e3:f2:f8:12:d7:b9:f0:0c:82:d3:36:11:
c2:f1:5f:54:30:95:d8:25:bd:2a:d1:92:64:ac:e9:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:85:C6:43:DA:F5:75:21:E2:D0:59:DA:C9:C4:2D:39:86:2C:73
X509v3 Authority Key Identifier:
keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/20E37D84181E11EF884D5670017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:d6:52:7f:b2:1b:21:cc:3e:5c:19:8a:fb:16:a6:d3:57:70:
37:e7:61:75:0e:5c:4e:4b:c2:37:2a:96:5b:9f:ae:83:43:59:
86:5a:aa:ef:55:fe:c4:91:12:29:56:5d:e0:28:bc:9d:77:49:
fa:d9:20:81:93:61:87:c1:2f:84:ea:b9:1c:ce:7e:cd:61:97:
f8:81:b1:e3:5c:6f:7b:b5:28:fa:e2:5c:98:cc:d4:c9:e4:3d:
40:29:b5:16:d7:85:1e:9a:64:8d:32:18:5d:10:12:18:c2:65:
8c:3d:43:23:98:78:1d:dc:e0:32:b6:ae:a1:b0:7c:91:75:8f:
53:cd:6d:73:8b:08:da:ff:ef:0d:d4:29:bd:71:6c:6d:48:14:
06:24:13:c8:e1:cd:38:f5:8e:6e:2a:ce:b7:7c:a3:19:2f:93:
f7:13:73:b0:d5:4c:91:23:48:fe:63:67:1a:ad:81:9c:e3:10:
40:fc:a2:a0:5f:ab:23:ec:af:3d:2a:89:1b:67:b7:23:af:11:
5e:9d:4f:b1:f5:b9:41:0e:e3:b5:88:bc:ac:ff:f0:ea:b1:52:
4c:71:07:44:50:7c:53:c7:07:e7:90:ff:22:e0:12:d4:6d:f7:
86:4e:5a:1a:d5:76:78:33:19:bf:fb:c9:1c:94:18:d9:c9:0c:
18:e7:33:72
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICB0owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlGNEJBRjExMC8GA1UEBRMoOTgyMUM4NzIyMUQyNzBCNDJGRjlERDgyNjA0OEI5
OTJDMEUwRTNGODAeFw0yNDA1MjIwOTMxNTJaFw00MzEyMzEwOTMxNTJaMBgxFjAU
BgNVBAMTDTY2NGRiYjhiLTU0MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgXWvOz+s1rLELBzS/3vQoH0l4ewVp1L7IjwVGuu6aUHIISFN1+6M11T/5
a9dueZG8jGjKqHw3oB7aLc0U8xowmdG9/IZF5ahT8TVYzWI9J4N5cKZv6awzg1dg
tl+AJDZU3a65Tg6Muu/AX75EYkceSGh/Mql9MwFgopopNqo+6/w4Yow5eUsY8Rbf
5UL03mN/3wUy1LguUUNsaDP6T2KyZnse10snoQWTuZZQeyT9AmFR1oh6M0sFpYIk
d6EShGVmioFcPzjMIuSeXD6tJSZUr3WtZ0Fk7SoRoPDEy9dLzSw6NePy+BLXufAM
gtM2EcLxX1QwldglvSrRkmSs6ZiNAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUoeSF
xkPa9XUh4tBZ2snELTmGLHMwHwYDVR0jBBgwFoAUmCHIciHScLQv+d2CYEi5ksDg
4/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4QUVBMjI4L21DSElj
aUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21DSEljaUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4
QUVBMjI4LzIwRTM3RDg0MTgxRTExRUY4ODRENTY3MDAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDEGDANBgkqhkiG9w0BAQsF
AAOCAQEAPtZSf7IbIcw+XBmK+xam01dwN+dhdQ5cTkvCNyqWW5+ug0NZhlqq71X+
xJESKVZd4Ci8nXdJ+tkggZNhh8EvhOq5HM5+zWGX+IGx41xve7Uo+uJcmMzUyeQ9
QCm1FteFHppkjTIYXRASGMJljD1DI5h4HdzgMrauobB8kXWPU81tc4sI2v/vDdQp
vXFsbUgUBiQTyOHNOPWObirOt3yjGS+T9xNzsNVMkSNI/mNnGq2BnOMQQPyioF+r
I+yvPSqJG2e3I68RXp1PsfW5QQ7jtYi8rP/w6rFSTHEHRFB8U8cH55D/IuAS1G33
hk5aGtV2eDMZv/vJHJQY2ckMGOczcg==
-----END CERTIFICATE-----
Generated at Thu Jun 20 03:05:54 2024 by rpki-client on console-ams.rpki-client.org