Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/90A7FF96596E11EFB7B89980762E951A.roa
File: 90A7FF96596E11EFB7B89980762E951A.roa (raw, json)
Hash identifier: Jct/DE7jbdzag1sJ78KOFrSil6rAnNvZrf+Ryhzlfqk=
Subject key identifier: DC:04:81:51:21:45:96:69:38:CE:E2:3B:84:02:0A:D8:58:6D:C0:A4
Certificate issuer: /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial: 0102
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/90A7FF96596E11EFB7B89980762E951A.roa
Signing time: Tue 13 Aug 2024 12:21:28 +0000
ROA not before: Tue 13 Aug 2024 12:21:23 +0000
ROA not after: Sat 01 Aug 2026 12:21:23 +0000
asID: 327921
IP address blocks: 102.220.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Validity
Not Before: Aug 13 12:21:23 2024 GMT
Not After : Aug 1 12:21:23 2026 GMT
Subject: CN=66bb4fc8-0158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:83:14:a1:c9:22:0b:f9:da:f0:ff:46:0a:72:
51:c8:00:97:67:c9:e5:a6:ba:9c:e8:3e:5a:34:47:
08:89:7c:35:a7:ae:ca:69:3d:31:b2:53:d8:2a:3a:
47:0f:c6:65:9a:27:7d:76:91:67:df:3e:12:00:ec:
1c:4d:63:78:8f:3c:d2:04:bd:19:98:cf:a5:ef:3c:
95:98:a5:66:1f:bb:ef:4b:ce:99:cb:d1:16:6c:2d:
26:6e:d2:84:98:66:2b:55:8f:ec:85:05:2d:83:0b:
90:31:aa:fd:31:2b:71:77:ef:cd:ef:c3:7c:ca:ec:
ef:2a:fd:a9:5d:fb:9c:cd:2f:5c:5c:7c:ef:05:97:
2e:8e:dd:df:53:1f:1e:51:cf:e9:49:d9:af:74:c3:
9d:ab:c7:d9:c8:0b:3f:d4:d9:2d:38:cc:bc:bd:14:
a0:62:19:63:9f:9c:43:a8:d8:c0:05:a9:a9:8a:38:
9f:66:d4:bf:23:80:0f:e9:5e:c7:f8:4f:84:f8:09:
6f:fa:22:52:3b:78:75:8b:59:9d:c1:d8:1a:f6:4a:
b9:ae:78:dd:d8:47:12:0d:b9:3d:8d:71:a2:e5:25:
38:3f:f6:8d:58:23:e3:10:db:10:be:c7:a1:d9:48:
92:06:3a:65:ee:97:8b:f3:81:a7:8a:31:a6:09:a4:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:81:51:21:45:96:69:38:CE:E2:3B:84:02:0A:D8:58:6D:C0:A4
X509v3 Authority Key Identifier:
keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/90A7FF96596E11EFB7B89980762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e3:a8:9c:6f:ed:22:52:93:9c:d9:2f:3a:bd:4e:d4:aa:07:
b6:4b:65:0d:73:26:f9:92:c9:8a:c5:3c:a7:62:e1:7e:1b:37:
64:88:4b:a3:89:75:a3:76:24:9f:8e:fe:84:1c:29:22:c0:5c:
fe:12:1c:e1:41:d5:75:64:11:bf:f4:ad:58:e4:e6:c8:98:bf:
03:ee:95:7f:cb:b2:3f:f4:83:fd:97:26:6c:68:f8:cd:53:64:
1d:04:ea:1c:da:90:06:8c:96:37:60:ad:24:99:97:5e:00:26:
3a:f9:6a:27:e5:3e:36:56:30:53:61:06:3f:60:8a:28:33:ea:
84:55:91:7e:f3:4a:8b:cd:23:98:e0:9f:61:4a:e7:f4:f1:df:
c1:b0:16:73:32:2d:42:e1:54:84:cb:0f:6f:ab:d4:46:4a:da:
93:06:59:74:84:45:24:28:e3:2e:99:5a:73:ff:60:00:9b:0f:
65:1a:9b:27:b6:8c:91:6c:55:ce:35:3a:22:f8:24:dd:e8:43:
a8:93:8c:76:00:bd:84:ac:7d:29:c6:1b:c0:08:23:13:c7:94:
2f:50:a5:4a:b8:f5:9b:be:71:58:a6:38:82:4b:80:c7:fc:6f:
2c:7d:75:b7:79:3e:f4:9b:71:02:27:5f:f5:6c:7a:66:24:e1:
df:67:5a:a5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzNBNThBRjExMC8GA1UEBRMoRTE1RjUwREREMjhFMDJGRDZFNjk2NkQ1OTE4RDFC
MEJCRjQ2ODRFODAeFw0yNDA4MTMxMjIxMjNaFw0yNjA4MDExMjIxMjNaMBgxFjAU
BgNVBAMTDTY2YmI0ZmM4LTAxNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDngxShySIL+drw/0YKclHIAJdnyeWmupzoPlo0RwiJfDWnrsppPTGyU9gq
OkcPxmWaJ312kWffPhIA7BxNY3iPPNIEvRmYz6XvPJWYpWYfu+9LzpnL0RZsLSZu
0oSYZitVj+yFBS2DC5Axqv0xK3F3783vw3zK7O8q/ald+5zNL1xcfO8Fly6O3d9T
Hx5Rz+lJ2a90w52rx9nICz/U2S04zLy9FKBiGWOfnEOo2MAFqamKOJ9m1L8jgA/p
Xsf4T4T4CW/6IlI7eHWLWZ3B2Br2SrmueN3YRxINuT2NcaLlJTg/9o1YI+MQ2xC+
x6HZSJIGOmXul4vzgaeKMaYJpK5BAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3ASB
USFFlmk4zuI7hAIK2FhtwKQwHwYDVR0jBBgwFoAU4V9Q3dKOAv1uaWbVkY0bC79G
hOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMzQTU4LzFCNzhDNjBDQThCRjExRUVCQjNDQTg1NTc3NTQxMkU2LzRWOVEz
ZEtPQXYxdWFXYlZrWTBiQzc5R2hPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRWOVEzZEtPQXYxdWFXYlZrWTBiQzc5R2hPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkMzQTU4LzFCNzhDNjBDQThCRjExRUVCQjNDQTg1NTc3
NTQxMkU2LzkwQTdGRjk2NTk2RTExRUZCN0I4OTk4MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3I0wDQYJKoZIhvcNAQEL
BQADggEBABzjqJxv7SJSk5zZLzq9TtSqB7ZLZQ1zJvmSyYrFPKdi4X4bN2SIS6OJ
daN2JJ+O/oQcKSLAXP4SHOFB1XVkEb/0rVjk5siYvwPulX/Lsj/0g/2XJmxo+M1T
ZB0E6hzakAaMljdgrSSZl14AJjr5aiflPjZWMFNhBj9giigz6oRVkX7zSovNI5jg
n2FK5/Tx38GwFnMyLULhVITLD2+r1EZK2pMGWXSERSQo4y6ZWnP/YACbD2Uamye2
jJFsVc41OiL4JN3oQ6iTjHYAvYSsfSnGG8AIIxPHlC9QpUq49Zu+cVimOIJLgMf8
byx9dbd5PvSbcQInX/VsemYk4d9nWqU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org