Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/2D888128971311EFB14662AA762E951A.roa
File: 2D888128971311EFB14662AA762E951A.roa (raw, json)
Hash identifier: m6Vgw13O/Z9CVMDFoYn3/x7Scp+tZSUuvP1qWkzu25Q=
Subject key identifier: 0D:F5:66:86:44:9E:ED:0B:12:77:F9:0C:00:E3:C2:64:C4:9C:FC:59
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 026C
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/2D888128971311EFB14662AA762E951A.roa
Signing time: Wed 30 Oct 2024 23:03:30 +0000
ROA not before: Thu 31 Oct 2024 23:03:26 +0000
ROA not after: Tue 31 Oct 2034 23:03:26 +0000
asID: 37105
IP address blocks: 197.184.0.0/18 maxlen: 18
197.184.64.0/18 maxlen: 18
197.184.128.0/18 maxlen: 18
197.184.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Oct 31 23:03:26 2024 GMT
Not After : Oct 31 23:03:26 2034 GMT
Subject: CN=6722bb41-8d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5c:ca:72:bf:13:a0:0f:2d:d7:52:b8:fe:87:
5c:2d:22:fd:41:bb:c8:ad:7a:36:36:54:4f:00:f8:
f8:fa:21:52:2c:95:b6:53:c0:85:14:64:96:6d:4b:
ca:76:db:1e:e1:c0:dd:b3:6f:69:4f:b5:30:64:4d:
ee:b1:fd:7c:04:95:57:0b:0d:09:a7:a2:c5:22:ee:
68:1a:06:9b:60:11:a5:04:fa:fe:88:25:b1:b9:80:
f4:a2:37:69:eb:fe:e2:21:96:aa:31:3e:d3:69:bf:
32:1a:33:37:2a:94:7c:c4:d2:da:d0:64:9e:d4:db:
95:34:4f:b6:7f:31:d7:80:4c:b0:61:f9:fb:4d:23:
a6:a6:45:5e:b6:d5:d9:18:b0:c5:1d:97:7e:3c:2f:
77:b6:47:91:97:5d:34:ec:49:cf:62:3b:59:46:50:
0e:7c:68:fd:5e:10:e2:e0:71:93:d1:e9:72:47:71:
b4:d2:14:fd:ad:46:c1:bf:94:8c:b4:19:85:bf:f3:
e1:d3:43:2e:1a:d7:e1:90:07:5c:d9:09:66:1b:9f:
42:54:96:50:d0:6a:bc:a7:86:bc:02:d6:03:ad:e6:
dc:cd:4c:46:0e:9c:1c:d2:a1:4f:d8:49:76:50:dd:
2d:06:ae:c3:52:df:6f:28:88:75:2e:b0:1b:ab:5a:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F5:66:86:44:9E:ED:0B:12:77:F9:0C:00:E3:C2:64:C4:9C:FC:59
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/2D888128971311EFB14662AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:b8:8a:83:07:28:cd:01:bf:78:6f:0e:43:6c:98:b7:2b:24:
73:c3:26:b9:97:f0:ab:16:a3:b5:f3:85:c2:97:b9:2c:ec:eb:
4f:3d:d6:8e:0a:8b:9a:fa:c5:74:3f:fc:ec:36:ef:08:1e:b6:
d4:c5:be:0f:a9:3b:9d:57:1b:40:78:a8:29:5f:97:57:fe:fa:
1f:44:c5:4e:9b:aa:be:76:1b:d3:b5:d4:71:f1:31:b0:9a:09:
15:f9:0e:0a:91:76:c2:72:24:d0:53:0f:b2:8e:98:24:92:0e:
b2:0d:f4:47:76:bb:f0:f3:9d:96:ae:d9:1a:f1:3a:f3:ed:e0:
f0:00:11:3a:61:1b:93:20:79:a2:ce:f5:59:97:02:e9:96:a5:
00:3e:7c:52:f7:41:38:ff:fb:74:84:2d:ba:85:ac:cf:78:98:
81:89:70:f0:c2:67:1f:bf:b8:5b:af:7c:ca:48:ac:99:2f:ad:
28:fb:cc:f2:d5:76:0c:8c:84:f9:25:92:60:5a:d7:4c:3c:b0:
3c:80:20:dd:56:c7:78:23:f6:eb:1f:82:79:52:80:e9:66:04:
8e:5a:4a:d5:31:2b:a7:e3:7e:30:cb:a5:72:23:8a:26:1f:9a:
c3:a0:fa:48:a0:7c:15:c3:9b:1e:82:dc:9d:8a:dc:28:91:b6:
d7:9a:42:fd
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkJGNDFBRjExMC8GA1UEBRMoM0Y2NzdGM0ExOEFDQUFFNkM5N0Y4MUY5OUFFODc5
NDY1NEUwNDEwQjAeFw0yNDEwMzEyMzAzMjZaFw0zNDEwMzEyMzAzMjZaMBgxFjAU
BgNVBAMTDTY3MjJiYjQxLThkOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD3XMpyvxOgDy3XUrj+h1wtIv1Bu8itejY2VE8A+Pj6IVIslbZTwIUUZJZt
S8p22x7hwN2zb2lPtTBkTe6x/XwElVcLDQmnosUi7mgaBptgEaUE+v6IJbG5gPSi
N2nr/uIhlqoxPtNpvzIaMzcqlHzE0trQZJ7U25U0T7Z/MdeATLBh+ftNI6amRV62
1dkYsMUdl348L3e2R5GXXTTsSc9iO1lGUA58aP1eEOLgcZPR6XJHcbTSFP2tRsG/
lIy0GYW/8+HTQy4a1+GQB1zZCWYbn0JUllDQarynhrwC1gOt5tzNTEYOnBzSoU/Y
SXZQ3S0GrsNS328oiHUusBurWnc/AgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUDfVm
hkSe7QsSd/kMAOPCZMSc/FkwHwYDVR0jBBgwFoAUP2d/OhisqubJf4H5muh5RlTg
QQswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJCRjQxLzE0Q0RGOEIyMTBENjExRUU5NThDMEYxNTRBRDlFNkZDL1AyZF9P
aGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1AyZF9PaGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJCRjQxLzE0Q0RGOEIyMTBENjExRUU5NThDMEYxNTRB
RDlFNkZDLzJEODg4MTI4OTcxMzExRUZCMTQ2NjJBQTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDFuDANBgkqhkiG9w0BAQsF
AAOCAQEAwbiKgwcozQG/eG8OQ2yYtyskc8MmuZfwqxajtfOFwpe5LOzrTz3WjgqL
mvrFdD/87DbvCB621MW+D6k7nVcbQHioKV+XV/76H0TFTpuqvnYb07XUcfExsJoJ
FfkOCpF2wnIk0FMPso6YJJIOsg30R3a78POdlq7ZGvE68+3g8AAROmEbkyB5os71
WZcC6ZalAD58UvdBOP/7dIQtuoWsz3iYgYlw8MJnH7+4W698ykismS+tKPvM8tV2
DIyE+SWSYFrXTDywPIAg3VbHeCP26x+CeVKA6WYEjlpK1TErp+N+MMulciOKJh+a
w6D6SKB8FcObHoLcnYrcKJG215pC/Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org