Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9434289A2E4C11EEBBBD2D354AD9E6FC.roa
File: 9434289A2E4C11EEBBBD2D354AD9E6FC.roa (raw, json)
Hash identifier: TX83MWcxtvtbAYrco3Gw4j+qMhD3nRui8b9vqTz/xoI=
Subject key identifier: 29:4A:CF:5C:C0:8E:98:88:3E:CF:41:CF:0C:A3:73:F3:C9:73:D6:E3
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 04A9
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9434289A2E4C11EEBBBD2D354AD9E6FC.roa
Signing time: Sat 29 Jul 2023 20:14:54 +0000
ROA not before: Sat 29 Jul 2023 20:14:49 +0000
ROA not after: Sat 30 Jul 2033 20:14:49 +0000
asID: 37119
IP address blocks: 105.169.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Jul 29 20:14:49 2023 GMT
Not After : Jul 30 20:14:49 2033 GMT
Subject: CN=64c5733d-2e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:53:fb:42:e9:4f:2b:c4:5e:6d:59:3b:ca:
76:89:1e:b2:02:79:6d:67:63:e6:b2:06:d2:91:06:
f5:da:4a:a9:fc:1d:9a:15:c0:11:5f:04:72:86:35:
ae:cb:e1:9f:4a:52:6f:e1:3a:df:40:a6:cd:46:9c:
90:4a:1a:49:90:2c:6f:81:7b:2b:e6:d3:12:65:4d:
1c:13:d7:ea:10:a9:c0:c2:23:66:06:f4:40:9c:72:
3c:49:b9:89:59:74:af:1c:7d:65:db:0b:9c:10:60:
b1:cc:bf:14:07:eb:8a:68:c4:f9:51:e5:a1:11:18:
79:4f:11:ec:00:96:8c:06:22:85:55:35:ba:69:86:
2d:a2:25:d5:fe:d0:41:bc:64:cb:a3:3a:fd:c9:2c:
b4:92:95:b4:80:67:1f:7a:c2:67:3f:20:81:31:b8:
36:ad:da:43:31:2a:4c:dc:35:dc:be:b7:c1:e7:84:
de:98:b4:51:43:98:94:d8:e6:9e:03:54:2b:6b:3e:
4c:5d:d0:55:4f:16:dd:b5:7f:58:5b:9b:9a:90:3c:
4d:86:a8:24:8b:bd:d6:26:a0:76:3f:90:d2:2e:f5:
ac:71:a1:b6:44:02:58:fb:14:47:ff:09:04:f0:25:
3c:46:7d:e6:f3:bf:73:24:f2:aa:ee:ae:f5:f1:1a:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:CF:5C:C0:8E:98:88:3E:CF:41:CF:0C:A3:73:F3:C9:73:D6:E3
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9434289A2E4C11EEBBBD2D354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.169.64.0/19
Signature Algorithm: sha256WithRSAEncryption
36:1c:96:2e:9a:4c:52:93:70:b7:3a:2c:b9:98:64:40:d6:84:
10:14:96:7a:ca:cc:4b:ba:5f:19:21:d9:0e:5b:2f:ac:1b:0c:
8d:ff:39:2c:35:04:b4:cc:4f:0d:cd:c0:7a:ea:21:54:97:a8:
f1:97:1a:a8:56:f9:5c:1c:88:b4:12:55:30:18:56:be:c6:82:
ab:2d:f8:e3:73:2d:25:db:a1:35:78:67:20:de:df:54:f1:1f:
e5:69:53:9d:e1:66:a4:3c:9c:84:f6:e3:79:f9:57:ef:e0:21:
8b:18:9c:d4:e3:93:b5:02:67:0d:0d:f9:45:5d:b6:a2:91:fb:
f3:e2:2c:20:42:3e:1b:dc:aa:98:f6:0f:f1:97:85:b1:71:c0:
85:7d:7a:83:c9:0b:72:b8:51:36:32:b1:db:04:5f:e7:10:68:
e5:14:16:b2:3c:9b:bc:ef:4c:a9:91:38:f5:d8:1b:e2:83:a4:
be:ca:7e:44:3f:9b:6a:1f:5c:7f:ba:52:e9:4b:ea:55:4a:fc:
1f:33:c3:21:38:10:41:97:df:07:29:b5:78:4f:1a:5b:d6:e5:
0e:5d:a7:8c:54:69:b8:9d:99:ed:0c:d1:21:b1:09:4c:4c:b4:
3c:ed:77:2e:72:90:5b:5e:65:99:b9:cd:13:27:d8:d9:14:3b:
ea:7b:df:8d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMzA3MjkyMDE0NDlaFw0zMzA3MzAyMDE0NDlaMBgxFjAU
BgNVBAMTDTY0YzU3MzNkLTJlNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAiVP7QulPK8RebVk7ynaJHrICeW1nY+ayBtKRBvXaSqn8HZoVwBFfBHKG
Na7L4Z9KUm/hOt9Aps1GnJBKGkmQLG+Beyvm0xJlTRwT1+oQqcDCI2YG9ECccjxJ
uYlZdK8cfWXbC5wQYLHMvxQH64poxPlR5aERGHlPEewAlowGIoVVNbpphi2iJdX+
0EG8ZMujOv3JLLSSlbSAZx96wmc/IIExuDat2kMxKkzcNdy+t8HnhN6YtFFDmJTY
5p4DVCtrPkxd0FVPFt21f1hbm5qQPE2GqCSLvdYmoHY/kNIu9axxobZEAlj7FEf/
CQTwJTxGfebzv3Mk8qrurvXxGntzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKUrP
XMCOmIg+z0HPDKNz88lz1uMwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4Lzk0MzQyODlBMkU0QzExRUVCQkJEMkQzNTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVpqUAwDQYJKoZIhvcNAQEL
BQADggEBADYcli6aTFKTcLc6LLmYZEDWhBAUlnrKzEu6Xxkh2Q5bL6wbDI3/OSw1
BLTMTw3NwHrqIVSXqPGXGqhW+VwciLQSVTAYVr7Ggqst+ONzLSXboTV4ZyDe31Tx
H+VpU53hZqQ8nIT243n5V+/gIYsYnNTjk7UCZw0N+UVdtqKR+/PiLCBCPhvcqpj2
D/GXhbFxwIV9eoPJC3K4UTYysdsEX+cQaOUUFrI8m7zvTKmROPXYG+KDpL7KfkQ/
m2ofXH+6UulL6lVK/B8zwyE4EEGX3wcptXhPGlvW5Q5dp4xUabidme0M0SGxCUxM
tDztdy5ykFteZZm5zRMn2NkUO+p7340=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org