Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/234C0456853311EFBF75427C762E951A.roa
File: 234C0456853311EFBF75427C762E951A.roa (raw, json)
Hash identifier: uuNRG2eR48PpA2s/qJek6gIiTSySHcCAlVVVdllLteQ=
Subject key identifier: 3C:07:32:8A:63:B1:1B:5D:98:B2:16:A4:C2:68:F6:AF:41:53:F3:1D
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 0822
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/234C0456853311EFBF75427C762E951A.roa
Signing time: Tue 08 Oct 2024 05:06:55 +0000
ROA not before: Tue 08 Oct 2024 05:06:51 +0000
ROA not after: Mon 08 Oct 2029 05:06:51 +0000
asID: 327804
IP address blocks: 154.68.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082 (0x822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Oct 8 05:06:51 2024 GMT
Not After : Oct 8 05:06:51 2029 GMT
Subject: CN=6704bdef-7d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:4f:29:84:97:fd:81:a0:83:52:87:be:fd:
cf:5a:73:a6:16:39:cb:78:fc:0f:a2:25:d4:de:bd:
9f:6e:fc:a2:f6:1d:0b:b7:45:3b:ff:7c:62:e1:45:
57:5b:07:5f:28:43:c0:f9:92:15:66:c0:5a:45:44:
a1:2b:00:89:3d:ae:11:5d:a7:97:57:6c:e1:23:78:
1b:d7:f7:7d:2b:6e:47:b2:6f:78:c0:9f:22:8a:d8:
d9:1e:a1:27:6a:29:27:b5:31:b5:81:a6:6c:cf:2b:
e6:4a:3d:7a:38:9e:38:77:51:2f:b7:aa:36:fc:5e:
df:b6:75:08:96:ba:88:be:ca:19:fb:8f:3d:19:a5:
b2:fd:70:ab:58:70:5a:4a:6f:65:43:00:ba:90:af:
17:31:3e:78:5f:4f:c4:61:29:ae:77:dc:be:c2:68:
7f:67:f2:9a:4c:13:a5:c4:52:de:96:b4:17:31:ea:
51:0a:1b:15:47:5f:05:b2:c1:34:ad:0a:8d:b6:d4:
17:3e:24:bf:67:51:03:c1:94:7f:6c:3a:34:c4:5b:
3a:1f:0c:84:62:ac:ec:ac:e5:8d:21:44:09:c1:85:
19:73:10:de:1f:65:e5:a6:e8:d8:bb:87:ea:a7:a7:
20:d4:be:c8:78:c8:de:74:d8:eb:a8:1d:4b:76:e8:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:32:8A:63:B1:1B:5D:98:B2:16:A4:C2:68:F6:AF:41:53:F3:1D
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/234C0456853311EFBF75427C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.68.172.0/22
Signature Algorithm: sha256WithRSAEncryption
38:a5:cf:b3:f0:18:82:ec:13:eb:bf:5b:3f:d1:b8:92:9a:f2:
68:14:0c:8a:64:74:8a:3a:f9:76:ec:80:eb:54:29:0e:d1:42:
55:67:59:44:5d:6a:2f:3b:18:21:ae:86:7e:2c:ec:75:80:57:
e2:cb:d1:94:65:9f:c3:f0:34:94:65:64:ca:53:76:b9:2c:9c:
cf:0f:6f:94:ac:7d:92:e2:8b:e0:0c:17:57:af:cc:c7:3a:0b:
66:b6:b8:7b:1f:f3:0c:78:64:33:6c:37:c3:59:87:7f:c6:64:
98:d4:7d:41:9f:3a:61:3c:ad:0f:d3:88:96:95:d7:af:8c:89:
52:1f:10:27:d7:ae:04:1e:d3:71:f5:05:67:3b:3b:bf:4c:ca:
1f:d7:52:3d:6f:76:84:8a:e0:06:bc:55:52:09:c4:0b:60:77:
95:a6:ca:e6:19:17:f8:56:f2:e7:a6:77:13:18:2b:24:0c:8f:
8e:e6:53:d2:a5:f3:d3:5d:7d:d4:3c:2e:3e:30:04:b2:3c:69:
4f:1c:55:4e:4d:86:90:49:82:41:8e:eb:49:1c:cd:f4:b4:4f:
47:35:0b:c6:96:8c:b3:d7:2e:9e:68:76:9b:d0:6f:6c:cf:70:
c6:3e:5f:bd:06:24:21:09:40:0d:63:0f:cb:d1:41:c8:11:61:
a3:f8:6d:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzgzNzFBRjExMC8GA1UEBRMoN0I5NjVCNjRDM0U3MjRCOTNGQzAwQjE4NkUxNUUz
NUNFRDUzNURDNzAeFw0yNDEwMDgwNTA2NTFaFw0yOTEwMDgwNTA2NTFaMBgxFjAU
BgNVBAMTDTY3MDRiZGVmLTdkMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHm08phJf9gaCDUoe+/c9ac6YWOct4/A+iJdTevZ9u/KL2HQu3RTv/fGLh
RVdbB18oQ8D5khVmwFpFRKErAIk9rhFdp5dXbOEjeBvX930rbkeyb3jAnyKK2Nke
oSdqKSe1MbWBpmzPK+ZKPXo4njh3US+3qjb8Xt+2dQiWuoi+yhn7jz0ZpbL9cKtY
cFpKb2VDALqQrxcxPnhfT8RhKa533L7CaH9n8ppME6XEUt6WtBcx6lEKGxVHXwWy
wTStCo221Bc+JL9nUQPBlH9sOjTEWzofDIRirOys5Y0hRAnBhRlzEN4fZeWm6Ni7
h+qnpyDUvsh4yN502OuoHUt26ItjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPAcy
imOxG12Yshakwmj2r0FT8x0wHwYDVR0jBBgwFoAUe5ZbZMPnJLk/wAsYbhXjXO1T
XccwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4QUVBMjI4L2U1WmJa
TVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WmJaTVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4
QUVBMjI4LzIzNEMwNDU2ODUzMzExRUZCRjc1NDI3Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaRKwwDQYJKoZIhvcNAQEL
BQADggEBADilz7PwGILsE+u/Wz/RuJKa8mgUDIpkdIo6+XbsgOtUKQ7RQlVnWURd
ai87GCGuhn4s7HWAV+LL0ZRln8PwNJRlZMpTdrksnM8Pb5SsfZLii+AMF1evzMc6
C2a2uHsf8wx4ZDNsN8NZh3/GZJjUfUGfOmE8rQ/TiJaV16+MiVIfECfXrgQe03H1
BWc7O79Myh/XUj1vdoSK4Aa8VVIJxAtgd5WmyuYZF/hW8uemdxMYKyQMj47mU9Kl
89NdfdQ8Lj4wBLI8aU8cVU5NhpBJgkGO60kczfS0T0c1C8aWjLPXLp5odpvQb2zP
cMY+X70GJCEJQA1jD8vRQcgRYaP4bTQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org