Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/9B2502C4BE8D11EEA1D8008E775412E6.roa
File: 9B2502C4BE8D11EEA1D8008E775412E6.roa (raw, json)
Hash identifier: 2uWdDoCB9rm102+vAjhKlk9jPVh942iWp8njHWrZ3oU=
Subject key identifier: BF:FA:41:5F:3E:BA:8F:63:62:87:D8:8F:56:02:43:31:2B:D5:0D:D2
Certificate issuer: /CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Certificate serial: 0216
Authority key identifier: 2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/9B2502C4BE8D11EEA1D8008E775412E6.roa
Signing time: Mon 29 Jan 2024 10:03:10 +0000
ROA not before: Mon 29 Jan 2024 10:03:06 +0000
ROA not after: Wed 29 Jan 2025 10:03:06 +0000
asID: 329126
IP address blocks: 102.214.116.0/22 maxlen: 24
2c0f:7280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Validity
Not Before: Jan 29 10:03:06 2024 GMT
Not After : Jan 29 10:03:06 2025 GMT
Subject: CN=65b777de-9b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:5f:64:1d:e7:28:2b:c4:fa:4d:d4:5b:d8:
9e:e9:e4:fa:20:c1:01:55:10:ce:7e:b1:ba:c2:1a:
ff:33:8a:bc:16:10:a2:5a:cd:2d:bc:57:d3:a5:66:
91:68:b3:5d:bb:2c:b2:ea:cc:22:f0:1d:e7:26:ce:
c5:13:fc:b7:7c:e1:04:24:db:c6:62:2e:0d:50:81:
71:e2:0b:69:97:d3:15:75:f7:54:49:51:46:fc:7b:
ff:51:0f:24:da:a2:2b:83:15:36:95:7f:cc:6c:7f:
18:73:91:18:ad:8a:1a:8b:fd:ff:e9:c6:55:ef:81:
36:65:33:f1:8d:8b:5a:23:83:3f:4b:9f:e2:a6:2f:
ed:39:a8:b9:22:cc:58:b2:d7:08:c3:55:97:28:4e:
7d:8f:a6:b2:01:7b:b6:87:8c:5b:4a:87:a1:26:86:
37:7a:12:ce:aa:81:9f:80:0c:98:71:f9:00:8a:eb:
7a:cb:59:0b:0f:7e:e3:71:a1:b5:ee:74:37:fd:e9:
fe:d7:0d:e9:b2:c4:fe:19:07:9d:63:15:a1:2e:38:
eb:2d:0f:e7:90:d5:cb:ce:18:58:9a:04:7e:0e:b5:
3e:dc:30:b5:0d:6c:21:c6:6f:e9:c9:d9:ee:d7:ee:
ee:4b:0e:38:c8:4f:ea:9c:ac:f5:79:bc:9c:7e:fd:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:41:5F:3E:BA:8F:63:62:87:D8:8F:56:02:43:31:2B:D5:0D:D2
X509v3 Authority Key Identifier:
keyid:2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/9B2502C4BE8D11EEA1D8008E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.116.0/22
IPv6:
2c0f:7280::/32
Signature Algorithm: sha256WithRSAEncryption
14:a4:c5:ea:44:4f:bd:53:06:c1:6c:03:14:d2:46:8b:0e:7a:
31:da:9c:25:de:a4:86:37:6c:f6:83:58:fb:57:17:ad:53:ab:
69:a5:64:fd:44:b4:06:c0:f0:e9:4f:ea:cf:fe:7f:0e:37:2a:
03:01:86:91:bc:a4:49:06:3f:87:90:bf:c8:f3:13:70:17:34:
51:70:ad:8d:5d:1b:06:5e:83:6e:71:70:1c:58:d7:2d:6b:3c:
8a:13:1c:3c:e1:cd:ab:93:08:ec:16:85:de:57:bb:70:56:3f:
a5:e8:d1:9d:6c:3d:27:dd:e5:0c:a9:c6:c8:9d:35:c3:90:59:
a3:e4:17:85:6a:9a:1b:fd:d6:ae:88:35:a9:76:f3:a7:bc:80:
d8:84:91:d6:7a:70:e1:b0:09:79:25:1f:3e:5c:f6:1a:40:aa:
38:b8:95:75:0b:97:b5:19:29:0f:3f:72:9f:93:fc:79:c5:ca:
49:22:ec:6a:ed:f6:78:8a:cb:ba:74:af:bc:27:b3:df:e9:f9:
94:e4:68:b3:06:cf:5a:f0:e9:1a:fe:8e:e8:b6:08:05:ff:dd:
81:af:f0:e3:b4:2d:41:07:03:19:50:f7:2f:60:0f:6e:e4:37:
27:99:12:36:77:75:62:8a:ea:99:69:4b:6c:d9:b5:9e:16:87:
1d:0e:3d:e1
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDk2QTBBRjExMC8GA1UEBRMoMkM0OTczQjkzMDgzQTQ4NEFDMkQ0NjU4Mjc4NTAy
Qzc4OEQwNjRGNTAeFw0yNDAxMjkxMDAzMDZaFw0yNTAxMjkxMDAzMDZaMBgxFjAU
BgNVBAMTDTY1Yjc3N2RlLTliNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCphF9kHecoK8T6TdRb2J7p5PogwQFVEM5+sbrCGv8zirwWEKJazS28V9Ol
ZpFos127LLLqzCLwHecmzsUT/Ld84QQk28ZiLg1QgXHiC2mX0xV191RJUUb8e/9R
DyTaoiuDFTaVf8xsfxhzkRitihqL/f/pxlXvgTZlM/GNi1ojgz9Ln+KmL+05qLki
zFiy1wjDVZcoTn2PprIBe7aHjFtKh6Emhjd6Es6qgZ+ADJhx+QCK63rLWQsPfuNx
obXudDf96f7XDemyxP4ZB51jFaEuOOstD+eQ1cvOGFiaBH4OtT7cMLUNbCHGb+nJ
2e7X7u5LDjjIT+qcrPV5vJx+/S91AgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUv/pB
Xz66j2Nih9iPVgJDMSvVDdIwHwYDVR0jBBgwFoAULElzuTCDpISsLUZYJ4UCx4jQ
ZPUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ5NkEwLzY3OTZGRUYyMzM2NjExRURCQzNBRDdENUYxMjIyNDY4L0xFbHp1
VENEcElTc0xVWllKNFVDeDRqUVpQVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xFbHp1VENEcElTc0xVWllKNFVDeDRqUVpQVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQ5NkEwLzY3OTZGRUYyMzM2NjExRURCQzNBRDdENUYx
MjIyNDY4LzlCMjUwMkM0QkU4RDExRUVBMUQ4MDA4RTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1nQwDQQCAAIwBwMFACwP
coAwDQYJKoZIhvcNAQELBQADggEBABSkxepET71TBsFsAxTSRosOejHanCXepIY3
bPaDWPtXF61Tq2mlZP1EtAbA8OlP6s/+fw43KgMBhpG8pEkGP4eQv8jzE3AXNFFw
rY1dGwZeg25xcBxY1y1rPIoTHDzhzauTCOwWhd5Xu3BWP6Xo0Z1sPSfd5Qypxsid
NcOQWaPkF4Vqmhv91q6INal286e8gNiEkdZ6cOGwCXklHz5c9hpAqji4lXULl7UZ
KQ8/cp+T/HnFykki7Grt9niKy7p0r7wns9/p+ZTkaLMGz1rw6Rr+jui2CAX/3YGv
8OO0LUEHAxlQ9y9gD27kNyeZEjZ3dWKK6plpS2zZtZ4Whx0OPeE=
-----END CERTIFICATE-----
Generated at Tue May 28 03:12:57 2024 by rpki-client on console-fra.rpki-client.org