Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/DAF0E168407F11ECB8D6EB12D8A014CE.roa
File: DAF0E168407F11ECB8D6EB12D8A014CE.roa (raw, json)
Hash identifier: hHFxlWCSnH4gDexnkdfm1eIFVHKF3ZADP/XYQDBgtyE=
Subject key identifier: 43:BB:96:B0:3C:00:EC:04:BA:06:F8:7C:DE:BB:24:EC:10:C9:98:F0
Certificate issuer: /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial: 02
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/DAF0E168407F11ECB8D6EB12D8A014CE.roa
Signing time: Mon 08 Nov 2021 10:37:22 +0000
ROA not before: Mon 08 Nov 2021 10:37:19 +0000
ROA not after: Sat 30 Nov 2041 10:37:19 +0000
asID: 328537
IP address blocks: 102.36.172.0/22 maxlen: 22
2c0f:ea58::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Validity
Not Before: Nov 8 10:37:19 2021 GMT
Not After : Nov 30 10:37:19 2041 GMT
Subject: CN=6188fde2-a8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:96:1b:6e:1f:b3:b7:c5:f2:9e:5e:da:2a:
af:69:1b:7e:af:15:90:34:67:76:a8:b2:43:42:cb:
f8:df:dd:14:8d:29:3c:a6:e3:04:32:30:77:bd:ad:
44:38:9e:0b:2e:f4:e6:64:fb:22:ff:05:4e:04:56:
95:e0:92:3b:f9:ad:6d:18:dc:fd:da:43:fe:ef:8d:
98:93:dd:9d:46:40:81:73:38:34:8e:23:54:22:c5:
77:78:0d:54:bd:ed:2d:9c:81:b2:24:e5:0e:4e:50:
ea:50:bf:62:9d:e2:63:a9:5f:29:32:61:99:2f:c5:
fe:e6:c1:2c:58:b6:c9:dd:00:46:45:cb:08:3a:bc:
92:97:d3:79:68:e4:c3:c3:6c:bb:6d:0d:82:16:55:
38:ce:cc:f0:e4:d9:6a:2e:20:f3:aa:79:e6:a0:39:
88:a8:78:69:b3:cd:69:55:00:6e:7b:d0:0e:7f:2e:
1c:18:17:58:2a:fc:61:0a:e1:17:cb:49:ca:b9:f7:
21:03:84:cf:94:a2:2d:63:5c:cf:0c:16:77:e7:81:
a3:41:42:8b:22:3e:74:3a:e8:00:90:88:e3:2b:56:
61:35:d4:aa:7b:5c:fe:76:f0:9a:42:f4:96:3d:b1:
d1:20:cd:85:d3:b7:41:26:d4:e0:59:fb:f8:9f:f8:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:96:B0:3C:00:EC:04:BA:06:F8:7C:DE:BB:24:EC:10:C9:98:F0
X509v3 Authority Key Identifier:
keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/DAF0E168407F11ECB8D6EB12D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.172.0/22
IPv6:
2c0f:ea58::/32
Signature Algorithm: sha256WithRSAEncryption
04:0a:4c:56:67:89:fa:19:88:72:ac:1b:bd:fe:3a:14:98:18:
f5:38:34:bd:49:20:9f:17:4c:10:c8:9e:ec:38:6a:aa:14:a6:
12:d3:61:08:09:f2:0f:f3:97:05:26:c5:64:08:ea:63:93:4c:
3e:f7:d3:5e:75:8c:1c:88:f0:e6:98:40:c9:01:72:b9:c9:3a:
7a:ea:3d:13:a2:dd:e7:38:5b:56:cb:cd:25:93:80:b3:18:31:
44:f1:14:54:3d:74:c1:3a:fa:bf:3f:af:fa:e6:6f:f3:56:bf:
98:81:fe:59:ee:d3:be:b7:3c:5c:88:1c:bf:7e:68:8e:1d:2f:
0b:cc:03:c6:aa:6b:7f:ec:5b:a2:3b:06:fa:52:1a:06:32:c8:
73:e7:a1:70:7e:24:1e:48:39:82:fa:30:66:f1:bc:d3:04:be:
e9:e7:0f:20:68:50:15:59:f5:1b:60:13:df:12:4c:a6:11:18:
86:6c:13:72:ea:ea:62:53:39:4b:66:9c:98:cd:9d:4b:d2:d4:
ef:45:ee:52:40:a6:c7:e8:2e:4a:27:5f:21:62:e7:ff:94:d5:
f1:b8:f1:89:07:e3:da:70:7e:2c:f0:c4:aa:88:4a:e1:da:67:
e9:fb:c1:6c:e0:83:52:74:c8:d1:c1:72:d8:5a:59:4a:26:3b:
fe:a5:1b:ab
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZE
MzJEMUFGMTEwLwYDVQQFEyhCRjVEM0Y0REM5QUYxN0Y4QkE3M0Y1NUExRDcyRjM5
NTlDMDUxOEUyMB4XDTIxMTEwODEwMzcxOVoXDTQxMTEzMDEwMzcxOVowGDEWMBQG
A1UEAwwNNjE4OGZkZTItYThjOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANsxlhtuH7O3xfKeXtoqr2kbfq8VkDRndqiyQ0LL+N/dFI0pPKbjBDIwd72t
RDieCy705mT7Iv8FTgRWleCSO/mtbRjc/dpD/u+NmJPdnUZAgXM4NI4jVCLFd3gN
VL3tLZyBsiTlDk5Q6lC/Yp3iY6lfKTJhmS/F/ubBLFi2yd0ARkXLCDq8kpfTeWjk
w8Nsu20NghZVOM7M8OTZai4g86p55qA5iKh4abPNaVUAbnvQDn8uHBgXWCr8YQrh
F8tJyrn3IQOEz5SiLWNczwwWd+eBo0FCiyI+dDroAJCI4ytWYTXUqntc/nbwmkL0
lj2x0SDNhdO3QSbU4Fn7+J/406MCAwEAAaOCArQwggKwMB0GA1UdDgQWBBRDu5aw
PADsBLoG+HzeuyTsEMmY8DAfBgNVHSMEGDAWgBS/XT9Nya8X+Lpz9VodcvOVnAUY
4jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDMyRDEvQUQwMDkzMkM0MDdEMTFFQ0E4RTU5RDBGRDhBMDE0Q0UvdjEwX1Rj
bXZGX2k2Y19WYUhYTHpsWndGR09JLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdjEwX1RjbXZGX2k2Y19WYUhYTHpsWndGR09JLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDMyRDEvQUQwMDkzMkM0MDdEMTFFQ0E4RTU5RDBGRDhB
MDE0Q0UvREFGMEUxNjg0MDdGMTFFQ0I4RDZFQjEyRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmYkrDANBAIAAjAHAwUALA/q
WDANBgkqhkiG9w0BAQsFAAOCAQEABApMVmeJ+hmIcqwbvf46FJgY9Tg0vUkgnxdM
EMie7DhqqhSmEtNhCAnyD/OXBSbFZAjqY5NMPvfTXnWMHIjw5phAyQFyuck6euo9
E6Ld5zhbVsvNJZOAsxgxRPEUVD10wTr6vz+v+uZv81a/mIH+We7Tvrc8XIgcv35o
jh0vC8wDxqprf+xbojsG+lIaBjLIc+ehcH4kHkg5gvowZvG80wS+6ecPIGhQFVn1
G2AT3xJMphEYhmwTcurqYlM5S2acmM2dS9LU70XuUkCmx+guSidfIWLn/5TV8bjx
iQfj2nB+LPDEqohK4dpn6fvBbOCDUnTI0cFy2FpZSiY7/qUbqw==
-----END CERTIFICATE-----
Generated at Fri Apr 19 02:42:31 2024 by rpki-client on console-fra.rpki-client.org