Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/6FF821EC40B811EEAA1112234AD9E6FC.roa
File: 6FF821EC40B811EEAA1112234AD9E6FC.roa (raw, json)
Hash identifier: LpDKodbHkpLTmMWPNMNHkmwQuf/YokY9pE0HTQhIW7A=
Subject key identifier: 97:0C:EA:D2:B3:23:91:2A:51:6C:7D:29:AD:73:7E:D9:A8:C5:BF:A7
Certificate issuer: /CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Certificate serial: 6B
Authority key identifier: A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/6FF821EC40B811EEAA1112234AD9E6FC.roa
Signing time: Tue 22 Aug 2023 06:52:19 +0000
ROA not before: Tue 22 Aug 2023 06:52:16 +0000
ROA not after: Tue 24 Aug 2027 06:52:16 +0000
asID: 328344
IP address blocks: 102.135.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 19 Jun 2024 00:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Validity
Not Before: Aug 22 06:52:16 2023 GMT
Not After : Aug 24 06:52:16 2027 GMT
Subject: CN=64e45b23-e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:d7:f7:15:02:28:dd:01:bc:6e:02:0f:d4:
0e:9f:4c:6f:f1:45:0b:42:3e:a4:93:11:c5:42:f9:
9e:a4:47:14:14:12:83:f6:ba:f4:0a:58:c2:91:23:
7f:bf:23:a6:28:2a:c1:16:c0:6d:c5:9b:10:7b:a8:
de:3f:6d:6a:c4:2c:12:59:27:36:b9:e6:35:9e:24:
51:24:06:8f:b9:83:98:88:d1:da:e6:f3:d7:3e:28:
53:60:bf:9d:f0:55:07:fb:a7:33:e2:84:b7:b6:81:
a3:8d:d5:08:4b:3c:86:80:7b:0f:16:17:74:dc:b3:
29:50:d3:f0:9f:84:57:71:d5:5c:e6:cd:cf:cc:34:
0c:90:ba:be:af:a3:e9:16:99:a8:c1:38:75:93:2e:
98:65:ff:7d:36:e9:86:0b:7b:20:d1:5b:77:5b:f5:
29:40:33:69:32:1d:40:c2:91:e7:e1:f4:8c:44:44:
02:2b:73:91:f0:03:90:26:b2:36:ef:97:f2:19:c1:
d3:48:2b:b3:62:44:39:d9:59:71:5b:31:5d:ed:af:
2e:b0:31:21:8d:9a:e9:f2:5c:1b:ff:d8:5a:33:ce:
64:8a:0a:ea:6c:a8:9f:9e:f1:5d:32:82:60:b1:94:
4a:b5:73:1b:df:98:9f:e3:8a:9a:21:0a:41:18:07:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:EA:D2:B3:23:91:2A:51:6C:7D:29:AD:73:7E:D9:A8:C5:BF:A7
X509v3 Authority Key Identifier:
keyid:A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/6FF821EC40B811EEAA1112234AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9a:50:24:b8:bb:a7:78:3b:a6:0e:b2:c1:63:96:fb:c4:6d:
21:38:38:62:9a:5d:29:f7:05:32:a1:73:90:8e:9c:9c:7b:b2:
e1:a0:a7:ca:30:18:bd:26:f9:1e:5f:5c:0a:45:fe:ab:f5:78:
30:69:b2:42:7d:cf:41:1f:34:6f:7d:fd:b7:bd:bc:6e:2b:d7:
e1:2a:77:bd:20:2f:4b:1f:be:a2:33:42:dd:ff:22:a6:d1:b2:
2f:61:3a:fc:e4:c7:22:33:96:20:77:8f:05:95:27:45:e7:ed:
b6:d2:bf:e0:fd:ee:5c:a7:ee:0a:be:53:bd:38:ab:32:7a:d4:
30:22:89:57:8c:3f:ff:c0:74:54:54:5f:22:ec:6e:bb:c1:43:
97:d1:75:ba:d7:75:1d:d1:4e:c6:b0:e2:b2:9c:e9:ca:8d:4c:
ea:50:44:c6:fc:9b:0f:ec:ce:b5:5d:ff:6e:0d:ad:7f:21:d4:
d2:dc:77:25:e7:f2:ea:1d:8f:33:96:d8:9f:bf:11:0b:f0:47:
73:ec:42:34:07:81:9f:ca:13:95:7b:55:cc:6f:e6:35:9b:d5:
d2:f4:c9:2b:9a:b2:c2:c1:11:9c:99:f6:1a:bc:77:5d:db:38:
5b:a7:b7:3f:09:23:b8:de:f5:ef:06:28:fd:a2:1a:93:64:79:
7b:89:a3:ed
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBazANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
N0ZCN0FGMTEwLwYDVQQFEyhBNThBNkQyOTExNEM4ODFFMDA1ODc3Mjc5RDk1QUJB
QTM5RUUxNDFDMB4XDTIzMDgyMjA2NTIxNloXDTI3MDgyNDA2NTIxNlowGDEWMBQG
A1UEAxMNNjRlNDViMjMtZTNkZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCb1/cVAijdAbxuAg/UDp9Mb/FFC0I+pJMRxUL5nqRHFBQSg/a69ApYwpEj
f78jpigqwRbAbcWbEHuo3j9tasQsElknNrnmNZ4kUSQGj7mDmIjR2ubz1z4oU2C/
nfBVB/unM+KEt7aBo43VCEs8hoB7DxYXdNyzKVDT8J+EV3HVXObNz8w0DJC6vq+j
6RaZqME4dZMumGX/fTbphgt7INFbd1v1KUAzaTIdQMKR5+H0jEREAitzkfADkCay
Nu+X8hnB00grs2JEOdlZcVsxXe2vLrAxIY2a6fJcG//YWjPOZIoK6myon57xXTKC
YLGUSrVzG9+Yn+OKmiEKQRgHJhcCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSXDOrS
syORKlFsfSmtc37ZqMW/pzAfBgNVHSMEGDAWgBSlim0pEUyIHgBYdyedlauqOe4U
HDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDdGQjcvOEFDMUM1NzJGNjJDMTFFREExMEQzQjNBNEFEOUU2RkMvcFlwdEtS
Rk1pQjRBV0hjbm5aV3Jxam51RkJ3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcFlwdEtSRk1pQjRBV0hjbm5aV3Jxam51RkJ3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDdGQjcvOEFDMUM1NzJGNjJDMTFFREExMEQzQjNBNEFE
OUU2RkMvNkZGODIxRUM0MEI4MTFFRUFBMTExMjIzNEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGaHtTANBgkqhkiG9w0BAQsF
AAOCAQEADJpQJLi7p3g7pg6ywWOW+8RtITg4YppdKfcFMqFzkI6cnHuy4aCnyjAY
vSb5Hl9cCkX+q/V4MGmyQn3PQR80b339t728bivX4Sp3vSAvSx++ojNC3f8iptGy
L2E6/OTHIjOWIHePBZUnReftttK/4P3uXKfuCr5TvTirMnrUMCKJV4w//8B0VFRf
Iuxuu8FDl9F1utd1HdFOxrDispzpyo1M6lBExvybD+zOtV3/bg2tfyHU0tx3Jefy
6h2PM5bYn78RC/BHc+xCNAeBn8oTlXtVzG/mNZvV0vTJK5qywsERnJn2Grx3Xds4
W6e3PwkjuN717wYo/aIak2R5e4mj7Q==
-----END CERTIFICATE-----
Generated at Mon Jun 17 03:47:44 2024 by rpki-client on console-ams.rpki-client.org