Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/A74E8468AA5A11EE911F24C4775412E6.roa
File: A74E8468AA5A11EE911F24C4775412E6.roa (raw, json)
Hash identifier: IxZYXXcepGDgsjaWwJ6ychZek0ca5ertsJZ4n6COMN4=
Subject key identifier: EF:B4:BD:4A:F8:E9:B3:DC:39:FD:6C:72:67:B3:66:F5:65:4D:79:35
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 0323
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/A74E8468AA5A11EE911F24C4775412E6.roa
Signing time: Wed 03 Jan 2024 17:08:03 +0000
ROA not before: Wed 03 Jan 2024 17:07:59 +0000
ROA not after: Tue 03 Jan 2034 17:07:59 +0000
asID: 15399
IP address blocks: 102.210.84.0/22 maxlen: 22
102.210.180.0/22 maxlen: 22
102.211.32.0/22 maxlen: 22
102.211.88.0/22 maxlen: 22
102.211.248.0/22 maxlen: 24
102.212.112.0/22 maxlen: 22
102.212.116.0/22 maxlen: 22
102.213.36.0/22 maxlen: 22
102.214.48.0/22 maxlen: 22
102.215.28.0/22 maxlen: 22
102.215.148.0/22 maxlen: 22
102.215.160.0/22 maxlen: 22
102.216.60.0/22 maxlen: 22
102.216.244.0/22 maxlen: 22
102.217.80.0/22 maxlen: 22
102.218.28.0/22 maxlen: 22
102.219.120.0/22 maxlen: 22
102.219.216.0/22 maxlen: 22
102.221.20.0/22 maxlen: 22
102.222.84.0/22 maxlen: 22
2c0f:e958::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: Jan 3 17:07:59 2024 GMT
Not After : Jan 3 17:07:59 2034 GMT
Subject: CN=65959472-fb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:c1:a3:b6:c2:5d:9c:fb:bc:25:5b:bc:17:
48:bc:dd:f9:15:a3:f5:0a:f4:13:a0:e5:ca:67:21:
a3:8e:c3:10:dd:94:84:7b:20:a9:48:52:c1:b2:18:
f1:09:cf:58:01:1e:30:e7:28:37:82:be:5a:88:8d:
5a:81:29:7b:28:d2:c9:45:8d:45:9e:8d:d7:3a:67:
07:40:fe:df:e9:7f:58:c5:f2:7e:6a:fd:34:4a:ec:
ac:66:9e:f3:4b:4f:7f:f7:1e:ae:f6:f4:1d:e0:9f:
fb:3d:64:1a:9e:f2:ba:86:2e:33:12:19:d8:58:67:
4e:6e:0b:f9:6f:e6:59:98:4a:31:f2:e8:3a:d5:db:
fd:1c:4c:bc:e5:7c:98:1d:51:a3:a5:ed:22:0e:bf:
1d:9e:19:db:61:6b:4e:8f:6f:3f:aa:db:f1:bc:d3:
a6:03:66:38:99:4a:d4:b4:58:0f:95:2b:25:ab:31:
1a:e3:ad:a7:ec:87:ff:db:99:78:26:ba:40:2f:2e:
26:b9:7c:a6:a5:9c:c9:30:5c:49:de:af:60:ac:d0:
02:e3:17:88:1a:fe:29:20:9c:09:a5:36:2b:24:84:
da:dc:5e:ca:79:a8:a0:b0:f4:b0:32:38:5e:1a:f0:
0e:64:7e:c2:93:d3:e9:0a:7b:3b:3c:9f:76:40:87:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:BD:4A:F8:E9:B3:DC:39:FD:6C:72:67:B3:66:F5:65:4D:79:35
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/A74E8468AA5A11EE911F24C4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.84.0/22
102.210.180.0/22
102.211.32.0/22
102.211.88.0/22
102.211.248.0/22
102.212.112.0/21
102.213.36.0/22
102.214.48.0/22
102.215.28.0/22
102.215.148.0/22
102.215.160.0/22
102.216.60.0/22
102.216.244.0/22
102.217.80.0/22
102.218.28.0/22
102.219.120.0/22
102.219.216.0/22
102.221.20.0/22
102.222.84.0/22
IPv6:
2c0f:e958::/32
Signature Algorithm: sha256WithRSAEncryption
92:15:23:fa:08:74:e6:79:a1:56:27:d4:db:33:84:9b:0e:04:
64:b6:3f:74:6c:0e:02:24:f7:f5:a4:9f:97:69:cc:24:da:22:
c0:24:18:60:4f:d8:08:3b:20:10:03:ea:ce:cf:46:23:eb:cb:
4e:96:eb:e5:6e:fc:0b:4b:f1:07:56:2a:f4:4a:b0:1f:c1:f4:
af:bb:bc:df:03:14:83:8f:8e:f6:94:f1:67:65:41:da:8f:65:
63:af:b7:ab:c1:24:8d:97:55:f2:b8:7a:7b:75:d3:6b:3b:48:
13:97:66:14:25:40:dd:9e:28:69:43:a3:54:11:04:fc:80:ad:
fd:2b:f4:0e:b4:83:c5:cb:da:a3:4e:2a:0d:87:1f:50:05:db:
ce:9b:66:86:67:51:9a:10:98:f2:fc:51:4b:0d:a4:20:50:92:
3d:db:f3:9a:b9:66:d2:a7:32:df:0e:4f:1e:7e:11:10:a3:83:
f4:7b:89:02:50:b9:73:40:20:d6:0d:c4:74:7c:fb:45:82:1e:
01:33:54:23:44:51:15:6e:52:6d:31:12:63:cb:dd:5f:15:b8:
3d:59:86:fc:77:a1:b9:a0:05:e5:59:cd:ec:e0:ca:a5:3d:da:
53:f2:d8:fc:ab:24:12:53:ed:00:f7:0f:88:4a:dc:94:11:09:
ae:c0:ae:a9
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REEzRTlBRjExMC8GA1UEBRMoM0QyQzAzNEY4NTFGMzcxNUIyQkE0QzlDOTVFNTI4
NURBRjJFRTkyMzAeFw0yNDAxMDMxNzA3NTlaFw0zNDAxMDMxNzA3NTlaMBgxFjAU
BgNVBAMTDTY1OTU5NDcyLWZiNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEP8GjtsJdnPu8JVu8F0i83fkVo/UK9BOg5cpnIaOOwxDdlIR7IKlIUsGy
GPEJz1gBHjDnKDeCvlqIjVqBKXso0slFjUWejdc6ZwdA/t/pf1jF8n5q/TRK7Kxm
nvNLT3/3Hq729B3gn/s9ZBqe8rqGLjMSGdhYZ05uC/lv5lmYSjHy6DrV2/0cTLzl
fJgdUaOl7SIOvx2eGdtha06Pbz+q2/G806YDZjiZStS0WA+VKyWrMRrjrafsh//b
mXgmukAvLia5fKalnMkwXEner2Cs0ALjF4ga/ikgnAmlNiskhNrcXsp5qKCw9LAy
OF4a8A5kfsKT0+kKezs8n3ZAhy2XAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU77S9
Svjps9w5/WxyZ7Nm9WVNeTUwHwYDVR0jBBgwFoAUPSwDT4UfNxWyukycleUoXa8u
6SMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBM0U5LzNDQkNCOTcyNTlDMDExRUM5QjQzNjQ3MjVBNDBENTc3L1BTd0RU
NFVmTnhXeXVreWNsZVVvWGE4dTZTTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BTd0RUNFVmTnhXeXVreWNsZVVvWGE4dTZTTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRBM0U5LzNDQkNCOTcyNTlDMDExRUM5QjQzNjQ3MjVB
NDBENTc3L0E3NEU4NDY4QUE1QTExRUU5MTFGMjRDNDc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwgZwGCCsGAQUFBwEHAQH/BIGMMIGJMHgEAgABMHIDBAJm0lQDBAJm0rQDBAJm
0yADBAJm01gDBAJm0/gDBANm1HADBAJm1SQDBAJm1jADBAJm1xwDBAJm15QDBAJm
16ADBAJm2DwDBAJm2PQDBAJm2VADBAJm2hwDBAJm23gDBAJm29gDBAJm3RQDBAJm
3lQwDQQCAAIwBwMFACwP6VgwDQYJKoZIhvcNAQELBQADggEBAJIVI/oIdOZ5oVYn
1NszhJsOBGS2P3RsDgIk9/Wkn5dpzCTaIsAkGGBP2Ag7IBAD6s7PRiPry06W6+Vu
/AtL8QdWKvRKsB/B9K+7vN8DFIOPjvaU8WdlQdqPZWOvt6vBJI2XVfK4ent102s7
SBOXZhQlQN2eKGlDo1QRBPyArf0r9A60g8XL2qNOKg2HH1AF286bZoZnUZoQmPL8
UUsNpCBQkj3b85q5ZtKnMt8OTx5+ERCjg/R7iQJQuXNAINYNxHR8+0WCHgEzVCNE
URVuUm0xEmPL3V8VuD1Zhvx3obmgBeVZzezgyqU92lPy2PyrJBJT7QD3D4hK3JQR
Ca7Arqk=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:48:47 2024 by rpki-client on console-ams.rpki-client.org