Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/39793F082E5111EE9268FA424AD9E6FC.roa
File: 39793F082E5111EE9268FA424AD9E6FC.roa (raw, json)
Hash identifier: 5YIuSztknB7bBNK+WaJMibqKw5oYdnG4rQyqBecCmSc=
Subject key identifier: 14:FA:55:DC:81:25:47:E9:2D:03:46:96:9B:7E:09:02:AC:30:A4:CA
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 04C5
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/39793F082E5111EE9268FA424AD9E6FC.roa
Signing time: Sat 29 Jul 2023 20:48:09 +0000
ROA not before: Sat 29 Jul 2023 20:48:05 +0000
ROA not after: Sat 30 Jul 2033 20:48:05 +0000
asID: 37119
IP address blocks: 105.172.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Jul 29 20:48:05 2023 GMT
Not After : Jul 30 20:48:05 2033 GMT
Subject: CN=64c57b09-b98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:37:52:be:de:69:a4:91:1e:bd:a4:a2:58:
91:2b:1a:27:7b:bc:fb:1e:70:4d:23:54:9b:0e:a4:
49:44:df:43:5d:7e:73:80:5e:5d:01:37:65:90:ed:
c3:4c:af:95:59:54:df:da:00:84:15:c0:bb:57:82:
81:b0:2c:32:22:ac:ea:fa:c8:4b:ec:07:9e:a0:e7:
2f:c1:e4:fe:6d:81:8c:94:7e:bd:f7:2a:db:89:c2:
f4:1e:74:14:c3:90:88:56:09:48:f4:36:45:fa:05:
35:63:a9:66:ad:c1:4c:60:38:f1:4b:9d:52:17:b1:
01:92:4a:f3:43:e9:27:09:26:28:8b:f1:65:e8:fb:
0a:4a:e5:15:88:e1:62:29:98:06:1e:20:1e:49:46:
de:75:d4:ac:4e:4b:2a:d8:f5:67:aa:26:d9:40:3e:
7e:af:cf:e6:31:65:7a:cd:9d:b7:6c:f4:f4:82:53:
17:70:93:5d:59:cf:0b:b3:3c:97:08:4d:c9:88:ef:
16:76:80:dc:ae:b2:35:8d:44:69:5e:6c:9e:cd:39:
24:7f:69:b5:31:fd:d7:03:dd:44:04:b9:2d:ae:3d:
4f:2a:3c:7c:e0:57:6f:da:7d:e3:16:6a:66:2f:3f:
aa:9c:69:4c:6f:09:90:5e:55:58:05:09:4e:37:62:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:55:DC:81:25:47:E9:2D:03:46:96:9B:7E:09:02:AC:30:A4:CA
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/39793F082E5111EE9268FA424AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:64:8a:dc:6a:88:6c:aa:98:31:10:b3:36:89:46:eb:3e:14:
71:c8:8c:3b:e1:66:2c:41:42:2f:95:cf:c2:bf:42:16:85:4c:
79:e8:ed:e6:5a:58:f0:1d:bf:ad:3e:71:c5:21:05:b4:53:43:
9a:4f:a1:54:b9:6f:04:95:e3:74:69:77:34:b5:ee:e8:4b:84:
b9:3e:b7:4b:12:38:e6:84:1e:4f:01:b2:a4:90:59:63:0f:49:
9b:15:f8:27:20:00:37:01:b3:98:4e:fa:41:1c:bb:9f:23:b6:
32:e8:de:46:7b:fe:75:03:c8:83:dc:8d:c0:7e:dd:54:3e:fe:
49:73:e2:a2:ac:8b:73:fc:63:8b:60:1e:a8:e8:59:91:12:99:
13:3a:c9:18:3f:27:7e:38:65:bc:28:08:e2:6f:66:9f:e1:da:
e4:c9:09:b4:1d:1c:58:13:71:72:39:0b:04:54:11:63:a2:b3:
1b:14:36:63:80:88:6f:23:6d:9b:04:aa:78:32:7b:89:0c:7f:
25:90:40:ed:3a:f1:ff:74:18:61:3a:4b:05:ee:ac:83:7e:64:
65:1e:7f:4f:45:83:86:17:2f:cc:b6:47:01:36:a2:ba:df:20:
8a:94:61:8b:aa:63:37:8f:7f:44:8b:7b:8e:0f:19:2f:39:f9:
fb:00:7a:36
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMzA3MjkyMDQ4MDVaFw0zMzA3MzAyMDQ4MDVaMBgxFjAU
BgNVBAMTDTY0YzU3YjA5LWI5OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChhjdSvt5ppJEevaSiWJErGid7vPsecE0jVJsOpElE30NdfnOAXl0BN2WQ
7cNMr5VZVN/aAIQVwLtXgoGwLDIirOr6yEvsB56g5y/B5P5tgYyUfr33KtuJwvQe
dBTDkIhWCUj0NkX6BTVjqWatwUxgOPFLnVIXsQGSSvND6ScJJiiL8WXo+wpK5RWI
4WIpmAYeIB5JRt511KxOSyrY9WeqJtlAPn6vz+YxZXrNnbds9PSCUxdwk11Zzwuz
PJcITcmI7xZ2gNyusjWNRGlebJ7NOSR/abUx/dcD3UQEuS2uPU8qPHzgV2/afeMW
amYvP6qcaUxvCZBeVVgFCU43YnJ3AgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUFPpV
3IElR+ktA0aWm34JAqwwpMowHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzM5NzkzRjA4MkU1MTExRUU5MjY4RkE0MjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBprDANBgkqhkiG9w0BAQsF
AAOCAQEAPWSK3GqIbKqYMRCzNolG6z4UcciMO+FmLEFCL5XPwr9CFoVMeejt5lpY
8B2/rT5xxSEFtFNDmk+hVLlvBJXjdGl3NLXu6EuEuT63SxI45oQeTwGypJBZYw9J
mxX4JyAANwGzmE76QRy7nyO2MujeRnv+dQPIg9yNwH7dVD7+SXPioqyLc/xji2Ae
qOhZkRKZEzrJGD8nfjhlvCgI4m9mn+Ha5MkJtB0cWBNxcjkLBFQRY6KzGxQ2Y4CI
byNtmwSqeDJ7iQx/JZBA7Trx/3QYYTpLBe6sg35kZR5/T0WDhhcvzLZHATaiut8g
ipRhi6pjN49/RIt7jg8ZLzn5+wB6Ng==
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:16 2024 by rpki-client on console-fra.rpki-client.org