Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/23040FFA339B11EFAA1E5754762E951A.roa
File: 23040FFA339B11EFAA1E5754762E951A.roa (raw, json)
Hash identifier: X4ZAQ6gAg0uApdYdcGPSN7HGXQ1rd2UvdvLUe5VreL8=
Subject key identifier: 9F:7A:7D:07:AE:E9:FB:25:D0:50:BC:7C:E4:FD:72:70:B1:6F:00:F3
Certificate issuer: /CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Certificate serial: 0512
Authority key identifier: 0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/23040FFA339B11EFAA1E5754762E951A.roa
Signing time: Wed 26 Jun 2024 09:04:47 +0000
ROA not before: Wed 26 Jun 2024 09:04:44 +0000
ROA not after: Mon 26 Jun 2034 09:04:44 +0000
asID: 328346
IP address blocks: 102.134.24.0/22 maxlen: 24
2c0f:ef60::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Validity
Not Before: Jun 26 09:04:44 2024 GMT
Not After : Jun 26 09:04:44 2034 GMT
Subject: CN=667bd9af-ecab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:4f:00:56:8d:cb:82:78:20:9b:7d:1a:3f:
b8:19:27:69:66:e1:a5:a4:8f:c1:6a:d4:48:b3:cc:
a9:cd:0d:d7:cd:55:af:45:ba:27:40:04:a9:37:ce:
81:f8:82:c5:ed:83:d1:5c:8b:45:32:6e:3f:9b:7a:
b0:44:70:5f:f2:5f:c2:33:d3:03:07:cc:34:c0:7c:
9d:14:9d:10:e0:02:70:24:b5:b1:a8:2a:f4:2d:22:
6e:b6:04:77:7b:89:d2:5c:86:6f:f5:d0:c8:c8:38:
72:42:ba:c2:8b:18:f4:fc:88:3e:d1:ae:10:4f:8e:
62:33:d9:b7:af:00:3a:60:39:8d:a7:77:31:03:8c:
c3:20:4a:7b:45:48:7c:08:9f:cb:32:07:ae:7e:ad:
dc:b4:bb:39:61:c8:c7:a8:c5:e1:d9:ed:f9:30:88:
36:1d:a8:9e:0d:0a:53:27:1a:73:21:d1:05:5d:f6:
32:d4:b3:73:22:b2:11:57:af:ed:e4:61:5d:e8:bd:
7b:4e:ba:be:5e:b7:3e:ac:71:bf:68:0e:89:08:69:
ab:7a:da:16:78:1c:36:37:93:8b:f8:e0:b2:53:6c:
69:19:58:d0:1a:6a:69:8b:70:ef:77:8f:ff:4d:3c:
43:83:8e:83:1c:00:ca:7e:78:c3:db:a2:87:c9:e5:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:7D:07:AE:E9:FB:25:D0:50:BC:7C:E4:FD:72:70:B1:6F:00:F3
X509v3 Authority Key Identifier:
keyid:0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/23040FFA339B11EFAA1E5754762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.24.0/22
IPv6:
2c0f:ef60::/32
Signature Algorithm: sha256WithRSAEncryption
93:cb:d1:07:95:96:88:85:58:36:89:11:32:69:e0:ce:2f:6b:
87:f6:89:1d:ec:fd:69:13:51:18:cb:40:47:0c:2a:7e:80:33:
1a:47:42:c8:af:16:24:49:51:2d:98:26:4a:30:a7:ff:8e:7b:
bf:4d:a1:9f:44:fd:fd:51:a8:43:81:15:97:51:da:37:1d:73:
d1:cc:fd:af:cb:a4:c4:c1:78:95:f5:8d:70:2a:cf:10:e4:dc:
a5:03:db:4f:b4:1b:83:1a:c2:7c:76:bd:93:b2:80:e1:53:6e:
2c:a1:b7:8e:44:44:a7:38:5c:63:b7:93:4b:68:70:53:0b:9c:
9e:54:22:31:83:b6:4c:6b:9f:28:f2:2c:cf:56:10:b4:c9:a8:
ed:a1:ea:ff:80:d1:84:53:b7:c3:f0:e1:f8:b2:d2:f7:05:8a:
f1:6c:7e:60:e5:ad:22:e7:65:f4:84:02:08:12:00:d2:bd:47:
1b:e1:89:a1:91:77:5f:f8:06:b2:87:73:31:80:4c:21:5c:2d:
cd:5a:88:83:a1:6c:4b:c1:56:aa:ac:c9:8a:fc:3d:a9:1c:32:
c2:c0:ec:da:f3:a0:67:6e:38:a9:a8:82:19:f6:ae:5a:ff:fb:
23:02:4a:7a:5d:0e:a8:24:6a:e3:c8:83:d8:cf:b2:b1:d5:c7:
f3:b1:f7:9f
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzRBRDdBRjExMC8GA1UEBRMoMERGNDhGRTcwNURDRDAxRTM5N0I4RjlDODRFRjE3
OTFDOTZDRkJEODAeFw0yNDA2MjYwOTA0NDRaFw0zNDA2MjYwOTA0NDRaMBgxFjAU
BgNVBAMTDTY2N2JkOWFmLWVjYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUiE8AVo3Lgnggm30aP7gZJ2lm4aWkj8Fq1EizzKnNDdfNVa9FuidABKk3
zoH4gsXtg9Fci0Uybj+berBEcF/yX8Iz0wMHzDTAfJ0UnRDgAnAktbGoKvQtIm62
BHd7idJchm/10MjIOHJCusKLGPT8iD7RrhBPjmIz2bevADpgOY2ndzEDjMMgSntF
SHwIn8syB65+rdy0uzlhyMeoxeHZ7fkwiDYdqJ4NClMnGnMh0QVd9jLUs3MishFX
r+3kYV3ovXtOur5etz6scb9oDokIaat62hZ4HDY3k4v44LJTbGkZWNAaammLcO93
j/9NPEODjoMcAMp+eMPboofJ5T/fAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUn3p9
B67p+yXQULx85P1ycLFvAPMwHwYDVR0jBBgwFoAUDfSP5wXc0B45e4+chO8Xkcls
+9gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM0QUQ3LzYzRjdFOUJDNTY2MDExRUJBQjc4QzcwOUY4QUVBMjI4L0RmU1A1
d1hjMEI0NWU0LWNoTzhYa2Nscy05Zy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RmU1A1d1hjMEI0NWU0LWNoTzhYa2Nscy05Zy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM0QUQ3LzYzRjdFOUJDNTY2MDExRUJBQjc4QzcwOUY4
QUVBMjI4LzIzMDQwRkZBMzM5QjExRUZBQTFFNTc1NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmhhgwDQQCAAIwBwMFACwP
72AwDQYJKoZIhvcNAQELBQADggEBAJPL0QeVloiFWDaJETJp4M4va4f2iR3s/WkT
URjLQEcMKn6AMxpHQsivFiRJUS2YJkowp/+Oe79NoZ9E/f1RqEOBFZdR2jcdc9HM
/a/LpMTBeJX1jXAqzxDk3KUD20+0G4Mawnx2vZOygOFTbiyht45ERKc4XGO3k0to
cFMLnJ5UIjGDtkxrnyjyLM9WELTJqO2h6v+A0YRTt8Pw4fiy0vcFivFsfmDlrSLn
ZfSEAggSANK9RxvhiaGRd1/4BrKHczGATCFcLc1aiIOhbEvBVqqsyYr8PakcMsLA
7NrzoGduOKmoghn2rlr/+yMCSnpdDqgkauPIg9jPsrHVx/Ox958=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:12 2024 by rpki-client on console-fra.rpki-client.org