Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/6C4F3A8289C711EEBB1136854AD9E6FC.roa
File: 6C4F3A8289C711EEBB1136854AD9E6FC.roa (raw, json)
Hash identifier: zGkozWQm4jFzQPS/tvB2v8qvuWaHBmsMZztA6yBA/qw=
Subject key identifier: AC:EE:92:8F:3A:F2:68:9A:F1:0D:C5:0A:36:B2:ED:9F:70:38:8D:C7
Certificate issuer: /CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Certificate serial: 0C
Authority key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/6C4F3A8289C711EEBB1136854AD9E6FC.roa
Signing time: Thu 23 Nov 2023 06:13:31 +0000
ROA not before: Thu 23 Nov 2023 06:13:25 +0000
ROA not after: Mon 03 Nov 2025 06:13:25 +0000
asID: 328169
IP address blocks: 102.214.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Validity
Not Before: Nov 23 06:13:25 2023 GMT
Not After : Nov 3 06:13:25 2025 GMT
Subject: CN=655eed8a-a5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:f8:a5:c3:97:a6:5e:ef:57:e0:f4:d0:82:
97:72:34:93:52:f8:14:6c:83:09:ff:67:b6:f2:03:
cd:0c:4c:2a:db:b4:00:bd:07:04:9b:52:e3:8a:a5:
37:8f:13:c8:7e:7f:f5:ef:5f:81:f4:00:58:94:fe:
65:5b:b0:c0:66:92:a9:66:d9:e5:f2:67:75:48:99:
77:a9:9a:24:6b:1b:57:f2:10:a9:28:23:9f:09:6b:
e7:ba:a4:76:73:b1:bc:87:6e:68:af:ed:27:e2:44:
03:bb:84:a1:0f:fa:a0:e1:c9:49:22:cc:98:2e:a6:
d5:92:c9:61:6c:0f:aa:5c:20:3f:87:8a:e2:63:66:
8c:66:f6:3a:ee:d3:71:82:f3:e0:55:3d:b6:9f:67:
cb:bb:c1:47:2f:26:78:3b:00:8c:50:af:1d:df:f5:
85:a3:bf:b6:1f:c4:b6:61:b9:06:c4:e5:92:40:ec:
8c:dd:03:26:06:96:2f:85:1c:40:13:06:4c:c3:87:
d4:68:56:95:73:6b:f2:66:33:4b:47:e8:c4:2b:c7:
b8:77:b0:5b:ab:69:7f:31:b9:9c:af:b5:e8:3b:67:
62:c4:5c:52:e0:e7:a7:e0:a1:c9:80:23:a1:54:99:
bc:95:b7:fa:0a:31:cf:41:9a:cc:10:d2:da:ee:11:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EE:92:8F:3A:F2:68:9A:F1:0D:C5:0A:36:B2:ED:9F:70:38:8D:C7
X509v3 Authority Key Identifier:
keyid:F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/6C4F3A8289C711EEBB1136854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.160.0/22
Signature Algorithm: sha256WithRSAEncryption
16:7e:92:37:2d:54:9f:ad:8c:12:8a:2e:36:f9:b1:34:44:5d:
42:0f:51:55:90:5a:28:e1:f8:ce:73:1c:3e:05:2d:22:da:e0:
20:9c:e4:e8:91:e8:ba:4d:d8:42:a9:eb:bb:44:25:2a:0c:37:
f2:2c:78:0d:c8:10:83:f4:eb:68:d1:8e:d6:69:62:07:7d:b5:
27:bf:95:74:ff:6f:18:6f:d8:0f:d0:11:f1:f0:10:48:5a:fb:
51:2e:0f:53:7a:62:6c:f6:c6:0b:a0:90:f6:2e:4b:60:3c:60:
10:4c:8f:8f:35:7c:da:6c:5d:ec:a6:d3:1d:77:c2:09:2f:48:
ae:ad:56:96:b3:e1:b2:30:6d:b7:e7:86:39:28:d0:27:be:9a:
be:c0:2d:7f:33:2b:f3:a5:35:74:e8:ac:df:5d:00:52:c2:ae:
2c:b8:06:f4:e2:c1:08:63:5f:b9:22:48:82:2d:e3:72:75:18:
a3:23:dd:51:8c:bd:2c:86:f3:eb:8b:8b:1e:08:aa:75:75:3d:
a9:de:9d:0f:e7:d6:7e:d4:83:38:a7:61:5a:cb:51:e9:11:19:
dc:6a:ee:86:47:71:8e:ed:b9:e7:b4:a7:7d:8b:4b:8c:c3:9b:
7c:22:06:ec:19:dd:7b:e0:8f:61:33:db:e4:97:9d:cc:3c:9b:
25:86:2e:ee
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MTFFNEFGMTEwLwYDVQQFEyhGMDIzQjk3NzA4MTk2RkY5RjIwQkM5Mjg3RDU2QzQy
Q0FBRTUxNDBGMB4XDTIzMTEyMzA2MTMyNVoXDTI1MTEwMzA2MTMyNVowGDEWMBQG
A1UEAxMNNjU1ZWVkOGEtYTVkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMC6+KXDl6Ze71fg9NCCl3I0k1L4FGyDCf9ntvIDzQxMKtu0AL0HBJtS44ql
N48TyH5/9e9fgfQAWJT+ZVuwwGaSqWbZ5fJndUiZd6maJGsbV/IQqSgjnwlr57qk
dnOxvIduaK/tJ+JEA7uEoQ/6oOHJSSLMmC6m1ZLJYWwPqlwgP4eK4mNmjGb2Ou7T
cYLz4FU9tp9ny7vBRy8meDsAjFCvHd/1haO/th/EtmG5BsTlkkDsjN0DJgaWL4Uc
QBMGTMOH1GhWlXNr8mYzS0foxCvHuHewW6tpfzG5nK+16DtnYsRcUuDnp+ChyYAj
oVSZvJW3+goxz0GazBDS2u4RXCECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSs7pKP
OvJomvENxQo2su2fcDiNxzAfBgNVHSMEGDAWgBTwI7l3CBlv+fILySh9VsQsquUU
DzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzExRTQvMTNEREQzODg4M0FEMTFFRUEwQTgxQjMyNEFEOUU2RkMvOENPNWR3
Z1piX255Qzhrb2ZWYkVMS3JsRkE4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvOENPNWR3Z1piX255Qzhrb2ZWYkVMS3JsRkE4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzExRTQvMTNEREQzODg4M0FEMTFFRUEwQTgxQjMyNEFE
OUU2RkMvNkM0RjNBODI4OUM3MTFFRUJCMTEzNjg1NEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbWoDANBgkqhkiG9w0BAQsF
AAOCAQEAFn6SNy1Un62MEoouNvmxNERdQg9RVZBaKOH4znMcPgUtItrgIJzk6JHo
uk3YQqnru0QlKgw38ix4DcgQg/TraNGO1mliB321J7+VdP9vGG/YD9AR8fAQSFr7
US4PU3pibPbGC6CQ9i5LYDxgEEyPjzV82mxd7KbTHXfCCS9Irq1WlrPhsjBtt+eG
OSjQJ76avsAtfzMr86U1dOis310AUsKuLLgG9OLBCGNfuSJIgi3jcnUYoyPdUYy9
LIbz64uLHgiqdXU9qd6dD+fWftSDOKdhWstR6REZ3Gruhkdxju2557SnfYtLjMOb
fCIG7Bnde+CPYTPb5JedzDybJYYu7g==
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:59 2024 by rpki-client on console-fra.rpki-client.org