Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/F17735F8193B11EFBB9B5707017001B1.roa
File: F17735F8193B11EFBB9B5707017001B1.roa (raw, json)
Hash identifier: rP8+XOS2i6Wv+uX+uRO8DnePWvJsxmp6m/QIOOMttEU=
Subject key identifier: 01:2D:31:FC:0C:3C:12:13:32:0D:7E:84:33:AA:E2:F9:7D:45:3F:7C
Certificate issuer: /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial: 076E
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/F17735F8193B11EFBB9B5707017001B1.roa
Signing time: Thu 23 May 2024 19:37:52 +0000
ROA not before: Thu 23 May 2024 19:37:48 +0000
ROA not after: Sun 31 Dec 2034 19:37:48 +0000
asID: 36982
IP address blocks: 196.24.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Validity
Not Before: May 23 19:37:48 2024 GMT
Not After : Dec 31 19:37:48 2034 GMT
Subject: CN=664f9b10-49f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:3b:1d:56:a1:e3:29:49:d0:4a:28:80:04:
a9:c4:9e:18:b8:45:c3:c9:dc:96:cf:69:bf:88:a4:
56:1a:54:7b:63:44:16:9a:91:8d:5c:1f:72:72:83:
21:06:68:f6:72:48:25:af:8c:39:d4:c9:01:66:f4:
3b:c8:56:23:7f:24:73:78:cd:64:f1:79:0d:2b:8b:
c6:f7:e6:c4:db:ca:ab:67:66:7e:f7:80:2b:88:67:
27:08:11:09:07:53:4a:3f:b1:e9:96:ee:8b:5a:fa:
5f:f5:f9:05:f5:e8:f7:a2:d8:4c:da:fd:c1:08:1e:
17:c1:ff:10:b7:97:f8:70:c7:28:3f:44:90:d1:c4:
ba:21:b4:29:02:7d:5b:f5:5d:38:b9:c5:48:9c:67:
fc:ae:4e:9a:6e:7e:84:d2:fa:7b:51:53:d6:92:48:
8a:40:84:10:3f:f1:c3:d5:26:6d:ba:e6:60:a5:4e:
8c:dc:30:10:2f:13:0a:ee:5c:96:5d:21:dc:5c:ab:
32:10:fd:37:3d:8b:35:53:eb:2f:5d:5d:3e:c9:8e:
9e:54:2b:b7:80:09:03:b8:99:bc:2f:58:73:79:48:
41:c0:34:47:a8:2a:b9:62:19:2c:e7:2f:e2:0a:d9:
bb:2f:d4:66:60:6e:b6:fd:01:f4:9b:8a:7b:52:f1:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2D:31:FC:0C:3C:12:13:32:0D:7E:84:33:AA:E2:F9:7D:45:3F:7C
X509v3 Authority Key Identifier:
keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/F17735F8193B11EFBB9B5707017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.24.128.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:8e:fd:6b:11:1d:61:10:ae:53:78:ce:ae:0b:08:d0:40:5e:
f0:ed:53:7e:9b:dd:a1:47:f1:ec:d7:61:06:79:b3:cc:30:5b:
d2:a7:11:11:2f:27:03:79:89:40:6a:fc:4d:22:af:ef:9c:81:
80:47:8a:3a:91:08:3d:68:30:12:8d:06:37:5b:fe:21:25:7b:
ae:b3:a8:80:33:9b:44:71:0e:9c:3e:e0:21:b7:64:1b:33:00:
fe:cb:61:c8:d0:7c:c1:4d:2d:12:2a:99:f6:4e:c6:b9:67:77:
33:5b:12:c3:36:5e:5e:29:d4:18:46:8d:39:d3:45:8c:71:52:
0b:28:56:83:e5:ae:f8:7e:30:99:20:8d:ae:8f:bc:17:9c:b8:
c8:ea:22:40:41:4b:d3:58:7a:f8:1e:29:80:a9:27:5e:e3:70:
68:86:79:45:ba:57:e1:fa:c6:ab:2a:be:55:7e:b1:b5:a9:1f:
aa:02:47:d3:5c:29:6c:0c:3f:14:4b:0d:89:ef:c9:d6:e8:de:
dc:d6:3d:29:8a:98:6b:03:73:4c:01:9f:4a:29:97:3c:28:24:
8d:86:b5:4f:35:c8:92:7e:c4:83:ed:64:2c:72:ae:d3:0f:e3:
c6:4f:9f:a5:dd:95:30:48:5c:5c:02:3c:b2:c6:21:44:4f:2a:
da:88:27:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB24wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlGNEJBRjExMC8GA1UEBRMoOTgyMUM4NzIyMUQyNzBCNDJGRjlERDgyNjA0OEI5
OTJDMEUwRTNGODAeFw0yNDA1MjMxOTM3NDhaFw0zNDEyMzExOTM3NDhaMBgxFjAU
BgNVBAMTDTY2NGY5YjEwLTQ5ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWGTsdVqHjKUnQSiiABKnEnhi4RcPJ3JbPab+IpFYaVHtjRBaakY1cH3Jy
gyEGaPZySCWvjDnUyQFm9DvIViN/JHN4zWTxeQ0ri8b35sTbyqtnZn73gCuIZycI
EQkHU0o/semW7ota+l/1+QX16Pei2Eza/cEIHhfB/xC3l/hwxyg/RJDRxLohtCkC
fVv1XTi5xUicZ/yuTppufoTS+ntRU9aSSIpAhBA/8cPVJm265mClTozcMBAvEwru
XJZdIdxcqzIQ/Tc9izVT6y9dXT7Jjp5UK7eACQO4mbwvWHN5SEHANEeoKrliGSzn
L+IK2bsv1GZgbrb9AfSbintS8fJpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAS0x
/Aw8EhMyDX6EM6ri+X1FP3wwHwYDVR0jBBgwFoAUmCHIciHScLQv+d2CYEi5ksDg
4/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4QUVBMjI4L21DSElj
aUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21DSEljaUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4
QUVBMjI4L0YxNzczNUY4MTkzQjExRUZCQjlCNTcwNzAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbEGIAwDQYJKoZIhvcNAQEL
BQADggEBAA2O/WsRHWEQrlN4zq4LCNBAXvDtU36b3aFH8ezXYQZ5s8wwW9KnEREv
JwN5iUBq/E0ir++cgYBHijqRCD1oMBKNBjdb/iEle66zqIAzm0RxDpw+4CG3ZBsz
AP7LYcjQfMFNLRIqmfZOxrlndzNbEsM2Xl4p1BhGjTnTRYxxUgsoVoPlrvh+MJkg
ja6PvBecuMjqIkBBS9NYevgeKYCpJ17jcGiGeUW6V+H6xqsqvlV+sbWpH6oCR9Nc
KWwMPxRLDYnvydbo3tzWPSmKmGsDc0wBn0oplzwoJI2GtU81yJJ+xIPtZCxyrtMP
48ZPn6XdlTBIXFwCPLLGIURPKtqIJ74=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:21 2024 by rpki-client on console-ams.rpki-client.org