Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/73A4A16E23C011EDABD4C1C6F1222468.roa
File: 73A4A16E23C011EDABD4C1C6F1222468.roa (raw, json)
Hash identifier: Puzr/sJbdQB4MzskXStH2KcslcnVGHGWC7j0vSxPGck=
Subject key identifier: 69:50:14:F3:39:10:6C:57:BE:03:54:1C:50:C6:F5:4B:E8:94:66:78
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 01D0
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/73A4A16E23C011EDABD4C1C6F1222468.roa
Signing time: Wed 24 Aug 2022 15:21:40 +0000
ROA not before: Wed 24 Aug 2022 15:21:36 +0000
ROA not after: Tue 31 Aug 2032 15:21:36 +0000
asID: 327901
IP address blocks: 102.220.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 00:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Aug 24 15:21:36 2022 GMT
Not After : Aug 31 15:21:36 2032 GMT
Subject: CN=63064204-ed96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:8a:aa:c0:d1:52:7d:57:ea:e5:b4:f9:d5:
98:2d:d9:1f:ef:d9:c3:c0:90:ee:39:c4:c0:ec:17:
84:34:c9:24:d4:57:8e:19:9a:97:10:2b:57:6f:90:
19:98:f5:27:c7:8f:15:83:cb:90:d1:54:1d:82:01:
5c:ef:29:44:b7:dc:d6:d1:a4:3c:65:97:fb:d8:aa:
17:fa:11:61:16:7d:7a:00:f8:bd:22:50:73:ea:df:
d5:32:94:11:70:6e:b1:61:f9:bb:19:7f:d9:ba:9f:
f5:55:b3:65:87:c5:08:48:21:3b:9e:e4:c5:99:47:
8e:12:d1:70:d7:49:37:bf:22:ce:4c:96:18:ac:76:
53:b1:90:11:d3:ed:b5:60:34:d9:2f:94:23:71:a8:
23:ba:85:27:15:92:f6:7e:07:b9:de:89:c4:e4:af:
ec:1f:cf:2f:3a:4d:0a:c2:08:70:a6:ee:8b:2b:e8:
c3:72:41:24:e1:a3:f8:b0:37:55:ab:c3:37:1e:94:
09:c9:9e:d7:e7:54:1d:0a:f6:ae:e1:bd:a6:eb:d6:
28:1f:87:20:48:2a:c5:91:6f:b8:8f:62:d9:0d:a6:
8d:ec:10:1c:10:91:69:61:bc:45:ad:e1:71:85:3e:
a0:0c:d1:e2:bd:c0:89:db:fb:4e:ad:33:ac:99:63:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:14:F3:39:10:6C:57:BE:03:54:1C:50:C6:F5:4B:E8:94:66:78
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/73A4A16E23C011EDABD4C1C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.148.0/22
Signature Algorithm: sha256WithRSAEncryption
31:42:25:9a:93:cf:09:5f:43:47:81:78:4c:3b:2f:6c:a7:84:
b5:21:fe:d7:92:21:0a:5a:3e:75:3e:9f:be:e4:c6:b4:81:05:
56:80:3c:e2:8f:63:41:a5:05:5b:21:43:81:6f:ac:93:7e:5a:
7f:e7:c7:d1:a9:f6:6d:e5:35:69:be:0a:1c:df:55:67:86:e9:
3d:f4:8a:ce:59:71:d7:7e:6a:fb:61:aa:29:1d:5b:da:26:8e:
4b:f0:1c:e4:63:87:98:0e:fe:a8:5d:7f:63:87:a5:3c:a4:56:
86:d4:90:6b:b9:ec:79:84:7e:23:fd:bd:e2:4b:10:50:93:07:
0c:91:06:ce:7f:9c:02:62:eb:38:f6:0d:59:fd:03:5a:b8:a6:
97:db:37:b5:1b:89:0f:37:b2:6b:a9:2a:91:8f:38:0e:56:96:
f2:1e:f8:ac:66:0a:d3:e4:32:e3:85:90:f7:3b:17:e2:fc:22:
f6:55:84:06:34:5f:21:0f:1d:8d:24:21:5a:03:5d:a2:15:5d:
32:dc:c2:15:f2:d4:9a:4d:1e:08:8d:56:7e:4a:91:1a:21:46:
b7:d0:51:02:d2:cc:4d:a7:86:52:ad:b6:59:62:4e:c3:47:22:
87:fa:4c:05:8c:96:59:bc:b1:92:b7:ac:5d:d4:a9:34:0a:a1:
bc:7d:eb:92
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzY1QzZBRjExMC8GA1UEBRMoQzA4RjNFREM1OTE1ODk0MkMyREYzOUYxNDI1RTZF
QjgyMTY4QkUzRTAeFw0yMjA4MjQxNTIxMzZaFw0zMjA4MzExNTIxMzZaMBgxFjAU
BgNVBAMMDTYzMDY0MjA0LWVkOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD/YqqwNFSfVfq5bT51Zgt2R/v2cPAkO45xMDsF4Q0ySTUV44ZmpcQK1dv
kBmY9SfHjxWDy5DRVB2CAVzvKUS33NbRpDxll/vYqhf6EWEWfXoA+L0iUHPq39Uy
lBFwbrFh+bsZf9m6n/VVs2WHxQhIITue5MWZR44S0XDXSTe/Is5MlhisdlOxkBHT
7bVgNNkvlCNxqCO6hScVkvZ+B7neicTkr+wfzy86TQrCCHCm7osr6MNyQSTho/iw
N1WrwzcelAnJntfnVB0K9q7hvabr1igfhyBIKsWRb7iPYtkNpo3sEBwQkWlhvEWt
4XGFPqAM0eK9wInb+06tM6yZYzD1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUaVAU
8zkQbFe+A1QcUMb1S+iUZngwHwYDVR0jBBgwFoAUwI8+3FkViULC3znxQl5uuCFo
vj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2NUM2LzAzMzhEOUI0Q0Y1QjExRUJCMkU3QTUxNkY4QUVBMjI4L3dJOC0z
RmtWaVVMQzN6bnhRbDV1dUNGb3ZqNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dJOC0zRmtWaVVMQzN6bnhRbDV1dUNGb3ZqNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM2NUM2LzAzMzhEOUI0Q0Y1QjExRUJCMkU3QTUxNkY4
QUVBMjI4LzczQTRBMTZFMjNDMDExRURBQkQ0QzFDNkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3JQwDQYJKoZIhvcNAQEL
BQADggEBADFCJZqTzwlfQ0eBeEw7L2ynhLUh/teSIQpaPnU+n77kxrSBBVaAPOKP
Y0GlBVshQ4FvrJN+Wn/nx9Gp9m3lNWm+ChzfVWeG6T30is5Zcdd+avthqikdW9om
jkvwHORjh5gO/qhdf2OHpTykVobUkGu57HmEfiP9veJLEFCTBwyRBs5/nAJi6zj2
DVn9A1q4ppfbN7UbiQ83smupKpGPOA5WlvIe+KxmCtPkMuOFkPc7F+L8IvZVhAY0
XyEPHY0kIVoDXaIVXTLcwhXy1JpNHgiNVn5KkRohRrfQUQLSzE2nhlKttlliTsNH
Iof6TAWMllm8sZK3rF3UqTQKobx965I=
-----END CERTIFICATE-----
Generated at Wed Apr 24 03:22:03 2024 by rpki-client on console-ams.rpki-client.org