Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/FD442A68977511EFAFDE5CA6762E951A.roa
File: FD442A68977511EFAFDE5CA6762E951A.roa (raw, json)
Hash identifier: jCYhuEuX8SeXpiy1mcrGpnTn+Pm2iMoNn/fsKbfF3rg=
Subject key identifier: 3A:FE:05:20:0F:37:2A:CB:49:EC:D2:E0:87:98:9C:8C:F9:19:15:DD
Certificate issuer: /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial: 046C
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/FD442A68977511EFAFDE5CA6762E951A.roa
Signing time: Thu 31 Oct 2024 10:50:49 +0000
ROA not before: Thu 31 Oct 2024 10:50:45 +0000
ROA not after: Tue 31 Oct 2034 10:50:45 +0000
asID: 328537
IP address blocks: 102.36.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132 (0x46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Validity
Not Before: Oct 31 10:50:45 2024 GMT
Not After : Oct 31 10:50:45 2034 GMT
Subject: CN=67236109-68e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:89:aa:4c:4a:07:99:75:29:1e:7b:50:b1:
5f:26:ca:87:28:cf:5e:af:ab:fb:ac:f5:7a:6c:e7:
0f:a9:37:58:7a:b9:78:dd:3d:02:29:8c:1f:a4:7d:
cf:1c:fe:eb:a6:98:45:8a:e2:ac:ec:55:85:91:58:
74:57:0f:dc:c9:b9:bb:ce:e4:6e:87:ec:da:fb:59:
eb:f3:bf:77:33:58:a7:0b:9e:d1:f7:0d:e1:c3:6d:
ab:6e:9c:d9:88:27:a1:47:d5:40:19:1a:81:1a:91:
30:25:02:b6:8a:e7:40:2f:87:94:d3:a4:d1:8e:f7:
8f:d4:e4:84:d6:2f:a4:75:a0:84:38:83:e7:70:41:
1f:f2:e5:3f:d3:3b:c2:91:71:90:16:c5:f3:e6:72:
f5:d8:40:d6:09:3e:55:06:e5:e5:fe:14:fc:cd:e6:
5a:5c:89:70:bf:0f:c9:1c:ef:5b:76:88:a0:3a:df:
92:54:4e:8d:d5:8b:70:1d:b5:6d:7b:ef:02:3f:87:
8b:df:8e:90:ab:aa:b8:a3:c2:14:f0:89:b6:69:31:
75:6d:99:3f:49:df:2a:ff:2c:b3:76:c4:23:4b:f2:
f7:ba:7b:19:ef:3b:0d:ac:11:7a:d0:60:1d:27:b4:
f6:9a:d9:7b:7c:0b:5b:38:60:f8:58:0f:47:d9:73:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FE:05:20:0F:37:2A:CB:49:EC:D2:E0:87:98:9C:8C:F9:19:15:DD
X509v3 Authority Key Identifier:
keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/FD442A68977511EFAFDE5CA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.174.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0c:28:34:8d:b3:6d:a1:5b:0a:20:94:c5:ef:6d:1e:eb:fb:
20:19:79:5e:6f:9f:b7:14:9c:4e:59:b0:a3:4f:f1:5d:26:1e:
08:34:1a:4e:71:3f:53:6e:2c:70:f7:88:93:9c:42:a5:87:42:
0b:bc:3b:fe:31:05:8e:8b:eb:46:b8:ae:a6:15:f5:11:22:40:
55:fd:e8:89:ee:84:ce:31:80:18:28:c3:5e:36:1b:07:ef:46:
9f:36:a8:54:fa:81:d3:78:e8:8a:db:e5:93:a1:5d:87:ef:3a:
56:74:1d:7f:25:97:0a:eb:7c:60:a8:52:5c:3f:8c:bb:d0:bc:
2e:54:68:0d:42:e2:e2:6d:63:c1:3c:b0:12:b8:9b:71:38:b6:
84:ca:b4:43:07:5f:fd:5a:8b:25:73:3e:18:15:6d:5b:9d:8e:
bf:6e:ec:dd:73:4d:59:b7:f1:1c:60:37:2c:1b:6a:ed:ce:5b:
f5:1f:1b:5a:24:66:b3:86:d3:f3:9a:ca:cb:6c:31:0e:3e:11:
c3:4c:17:78:fc:af:35:12:76:6f:7f:c5:aa:27:0b:27:06:cf:
9c:d1:19:83:73:a2:46:07:1f:51:15:f3:10:59:ff:4e:8d:9f:
e8:38:20:d9:be:73:31:46:24:cd:6c:eb:3a:88:df:c7:2a:c1:
e7:c4:60:63
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDMyRDFBRjExMC8GA1UEBRMoQkY1RDNGNERDOUFGMTdGOEJBNzNGNTVBMUQ3MkYz
OTU5QzA1MThFMjAeFw0yNDEwMzExMDUwNDVaFw0zNDEwMzExMDUwNDVaMBgxFjAU
BgNVBAMTDTY3MjM2MTA5LTY4ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtA4mqTEoHmXUpHntQsV8myocoz16vq/us9Xps5w+pN1h6uXjdPQIpjB+k
fc8c/uummEWK4qzsVYWRWHRXD9zJubvO5G6H7Nr7Wevzv3czWKcLntH3DeHDbatu
nNmIJ6FH1UAZGoEakTAlAraK50Avh5TTpNGO94/U5ITWL6R1oIQ4g+dwQR/y5T/T
O8KRcZAWxfPmcvXYQNYJPlUG5eX+FPzN5lpciXC/D8kc71t2iKA635JUTo3Vi3Ad
tW177wI/h4vfjpCrqrijwhTwibZpMXVtmT9J3yr/LLN2xCNL8ve6exnvOw2sEXrQ
YB0ntPaa2Xt8C1s4YPhYD0fZc1fjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOv4F
IA83KstJ7NLgh5icjPkZFd0wHwYDVR0jBBgwFoAUv10/TcmvF/i6c/VaHXLzlZwF
GOIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQzMkQxL0FEMDA5MzJDNDA3RDExRUNBOEU1OUQwRkQ4QTAxNENFL3YxMF9U
Y212Rl9pNmNfVmFIWEx6bFp3RkdPSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3YxMF9UY212Rl9pNmNfVmFIWEx6bFp3RkdPSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQzMkQxL0FEMDA5MzJDNDA3RDExRUNBOEU1OUQwRkQ4
QTAxNENFL0ZENDQyQTY4OTc3NTExRUZBRkRFNUNBNjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmJK4wDQYJKoZIhvcNAQEL
BQADggEBAIMMKDSNs22hWwoglMXvbR7r+yAZeV5vn7cUnE5ZsKNP8V0mHgg0Gk5x
P1NuLHD3iJOcQqWHQgu8O/4xBY6L60a4rqYV9REiQFX96InuhM4xgBgow142Gwfv
Rp82qFT6gdN46Irb5ZOhXYfvOlZ0HX8llwrrfGCoUlw/jLvQvC5UaA1C4uJtY8E8
sBK4m3E4toTKtEMHX/1aiyVzPhgVbVudjr9u7N1zTVm38RxgNywbau3OW/UfG1ok
ZrOG0/OaystsMQ4+EcNMF3j8rzUSdm9/xaonCycGz5zRGYNzokYHH1EV8xBZ/06N
n+g4INm+czFGJM1s6zqI38cqwefEYGM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org