Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E49C7E642E5011EE9B0ADE414AD9E6FC.roa
File: E49C7E642E5011EE9B0ADE414AD9E6FC.roa (raw, json)
Hash identifier: 2Xm4AnGKPsGwv0nbLRfoKVgb4iveLlg02pkk2ElVL28=
Subject key identifier: D3:1F:54:56:58:50:6A:F2:23:50:06:A1:26:2A:1A:CE:BD:F3:60:46
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 04C3
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E49C7E642E5011EE9B0ADE414AD9E6FC.roa
Signing time: Sat 29 Jul 2023 20:45:46 +0000
ROA not before: Sat 29 Jul 2023 20:45:43 +0000
ROA not after: Sat 30 Jul 2033 20:45:43 +0000
asID: 37119
IP address blocks: 105.172.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Jul 29 20:45:43 2023 GMT
Not After : Jul 30 20:45:43 2033 GMT
Subject: CN=64c57a7a-7086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:c1:16:86:b6:8c:4f:8a:eb:a0:7f:99:0c:
3d:b2:9c:ff:37:d0:e8:3a:d1:52:9a:c3:bb:81:a1:
b7:f7:da:07:7e:34:f0:c9:86:df:6f:d1:8c:78:d7:
ec:a3:dd:2d:b5:61:17:4b:97:c7:31:48:fc:92:2e:
e1:c2:11:75:f7:b2:8a:33:ca:d0:fd:ac:c4:c7:ba:
da:48:a4:96:5b:0f:20:17:2c:f6:97:09:30:e3:e3:
53:83:33:62:6f:fb:ef:19:56:e4:34:27:13:d7:6e:
60:90:25:b1:89:c9:2b:bb:c6:92:1d:85:a8:9f:82:
8a:82:e4:76:8a:9a:34:d3:f7:fb:d1:69:ac:e0:3a:
61:39:6c:50:82:f9:f9:25:b8:6c:87:35:f2:1e:2e:
39:51:d8:8a:8c:27:7b:14:1f:d5:e4:5c:8c:b7:e4:
0e:7a:bc:68:cd:f9:a3:42:60:d2:4d:34:87:18:0b:
16:a5:89:12:f7:f5:22:c4:43:8f:17:06:76:a2:09:
a3:3f:e2:db:08:22:55:6e:29:3b:67:b3:cf:d1:c2:
4d:93:02:b3:08:ac:20:77:30:5e:60:3f:4b:ac:05:
d9:3c:0c:a3:6a:d9:74:25:4e:38:2f:b0:9c:4d:f6:
2d:b2:6c:e0:b4:dc:43:e3:f2:1d:df:cf:e3:1b:28:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1F:54:56:58:50:6A:F2:23:50:06:A1:26:2A:1A:CE:BD:F3:60:46
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E49C7E642E5011EE9B0ADE414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.0.0/14
Signature Algorithm: sha256WithRSAEncryption
2b:37:25:36:9c:4e:af:82:72:5f:e0:8f:2e:f4:4e:b8:f4:87:
21:b1:6f:44:94:e6:b3:50:fa:3c:7b:7f:cb:6e:e0:a7:b5:55:
57:d0:2b:d4:76:03:78:fb:28:67:33:68:39:db:bd:4e:0f:74:
8c:76:79:41:74:f0:aa:3d:fd:4b:15:6a:9a:71:f9:7c:2b:65:
bc:59:d6:b5:32:53:c7:46:fa:fa:82:75:b3:76:26:97:3b:1e:
bd:df:ad:14:c4:b1:83:cc:1a:0f:4f:7f:85:e3:d6:2f:1c:cd:
a5:e7:a0:cf:e8:16:82:b7:a2:f0:c5:46:47:0b:76:15:0e:89:
65:89:e0:ab:80:cf:79:19:0a:b2:50:90:41:5a:5b:5b:6c:61:
f8:d4:eb:32:d0:33:4f:65:6d:d0:cd:7f:35:bb:a5:21:76:82:
79:b8:d3:f9:06:3e:b7:f2:99:67:19:f2:f4:51:82:d3:ac:ff:
c8:20:61:fd:d8:b9:f2:f8:cb:14:15:f9:a9:b1:ca:b8:14:dc:
5b:94:e8:62:02:5c:16:59:18:83:43:01:26:8d:64:02:05:a7:
7a:25:92:2b:60:e5:fe:4b:1a:50:ea:6e:ee:71:47:11:3c:0a:
aa:e3:62:be:17:44:cd:31:b6:65:61:46:23:25:db:1a:7e:c3:
6c:17:84:d7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMzA3MjkyMDQ1NDNaFw0zMzA3MzAyMDQ1NDNaMBgxFjAU
BgNVBAMTDTY0YzU3YTdhLTcwODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAh8EWhraMT4rroH+ZDD2ynP830Og60VKaw7uBobf32gd+NPDJht9v0Yx4
1+yj3S21YRdLl8cxSPySLuHCEXX3soozytD9rMTHutpIpJZbDyAXLPaXCTDj41OD
M2Jv++8ZVuQ0JxPXbmCQJbGJySu7xpIdhaifgoqC5HaKmjTT9/vRaazgOmE5bFCC
+fkluGyHNfIeLjlR2IqMJ3sUH9XkXIy35A56vGjN+aNCYNJNNIcYCxaliRL39SLE
Q48XBnaiCaM/4tsIIlVuKTtns8/Rwk2TArMIrCB3MF5gP0usBdk8DKNq2XQlTjgv
sJxN9i2ybOC03EPj8h3fz+MbKD/VAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU0x9U
VlhQavIjUAahJioazr3zYEYwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4L0U0OUM3RTY0MkU1MDExRUU5QjBBREU0MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJprDANBgkqhkiG9w0BAQsF
AAOCAQEAKzclNpxOr4JyX+CPLvROuPSHIbFvRJTms1D6PHt/y27gp7VVV9Ar1HYD
ePsoZzNoOdu9Tg90jHZ5QXTwqj39SxVqmnH5fCtlvFnWtTJTx0b6+oJ1s3Ymlzse
vd+tFMSxg8waD09/hePWLxzNpeegz+gWgrei8MVGRwt2FQ6JZYngq4DPeRkKslCQ
QVpbW2xh+NTrMtAzT2Vt0M1/NbulIXaCebjT+QY+t/KZZxny9FGC06z/yCBh/di5
8vjLFBX5qbHKuBTcW5ToYgJcFlkYg0MBJo1kAgWneiWSK2Dl/ksaUOpu7nFHETwK
quNivhdEzTG2ZWFGIyXbGn7DbBeE1w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org