Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/9A9301DE101511EEB030254C4AD9E6FC.roa
File: 9A9301DE101511EEB030254C4AD9E6FC.roa (raw, json)
Hash identifier: RMfgwMLkiAYYAKy0pSpxJKXLZ5NggtX42RB4bXfmtYk=
Subject key identifier: D0:72:C9:9F:37:F6:88:D3:86:DE:D5:0E:9F:66:D8:3F:CC:F4:FA:9C
Certificate issuer: /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial: 0C
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access: rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/9A9301DE101511EEB030254C4AD9E6FC.roa
Signing time: Wed 21 Jun 2023 09:25:47 +0000
ROA not before: Wed 21 Jun 2023 09:25:43 +0000
ROA not after: Fri 21 Jun 2024 09:25:43 +0000
asID: 37684
IP address blocks: 62.12.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Jun 2024 00:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Validity
Not Before: Jun 21 09:25:43 2023 GMT
Not After : Jun 21 09:25:43 2024 GMT
Subject: CN=6492c21b-e6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:0f:96:fb:99:17:f7:d0:36:78:97:95:40:
d7:15:65:0e:45:72:0a:66:84:b0:d6:0f:ba:ec:ca:
d5:3c:5a:cc:7e:d3:9c:39:ec:15:e1:45:59:b0:d1:
5c:0b:d7:42:d2:08:0f:8f:4c:35:39:97:59:c9:aa:
91:ad:1f:e3:60:4c:62:89:96:2e:c4:61:b4:7e:55:
f9:5a:49:27:ab:d5:0a:e8:06:fa:33:91:f2:5f:b2:
1e:53:01:d6:d1:0f:db:66:32:f8:60:20:96:70:9c:
61:e6:f1:93:96:c8:2f:90:8a:61:68:3e:d1:3a:3c:
b9:3b:45:72:91:08:6d:9c:81:93:7c:67:fb:49:32:
e0:b9:1c:55:48:35:bd:78:d7:70:1d:40:bf:98:b8:
99:cd:a1:68:f2:b5:55:ff:07:1c:3b:cf:43:ea:84:
c2:a0:f9:06:4f:50:0e:98:55:c3:e8:e3:7b:5a:7a:
09:f5:b0:71:47:18:73:23:49:20:4d:9f:de:d0:5f:
31:42:c2:ff:24:4e:a7:ff:c4:af:df:38:c6:9d:49:
6e:43:5d:ce:2d:e2:eb:5d:4e:f8:cc:db:10:6b:b1:
74:f4:60:61:e1:a7:b9:4e:49:08:33:d6:06:c1:0e:
cb:ff:90:6b:e1:3a:33:cb:a7:b8:33:2d:05:4a:38:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:72:C9:9F:37:F6:88:D3:86:DE:D5:0E:9F:66:D8:3F:CC:F4:FA:9C
X509v3 Authority Key Identifier:
keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/9A9301DE101511EEB030254C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.12.113.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:c0:0c:dc:10:db:11:6e:e9:e9:da:db:ea:1d:e6:fa:e2:5f:
77:9f:de:50:81:7f:70:56:5d:cf:85:e8:eb:a1:e4:e1:b8:c8:
9c:97:28:e7:ca:f3:35:62:42:5c:62:c2:01:12:ff:a7:2b:9f:
7c:70:1d:05:f1:de:ee:b0:4a:85:dd:34:03:91:a8:1c:aa:61:
b0:75:d7:7b:b3:fa:7e:50:96:85:7c:ee:c4:53:61:31:2f:03:
13:17:5e:ca:fb:89:09:7c:09:cb:61:13:05:9a:b7:16:e7:10:
47:07:f3:41:b8:15:de:83:4a:9d:33:9d:63:ad:55:01:c8:a6:
51:06:4c:cf:b5:c0:3a:8a:4f:c5:16:f2:59:6f:62:f4:64:43:
21:c3:c0:42:09:bc:9b:a8:04:46:9c:76:73:de:a2:e3:3e:ed:
32:53:47:e4:29:b0:18:91:42:db:47:c4:64:b0:b7:ae:87:f0:
3e:6f:91:59:7f:56:f7:0a:ee:b8:4e:68:9d:1b:8a:72:b3:c7:
f1:c0:fe:08:50:46:7b:53:3b:f9:9a:d1:79:5c:d3:2c:7b:a6:
b8:06:33:a1:57:97:b2:11:8a:bb:dd:16:eb:f3:e2:9b:2b:40:
58:28:b9:72:26:66:0d:6d:0a:03:cc:f2:4e:5c:6f:7e:8a:37:
d1:d3:14:fa
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
MkI4Q1JJMTEwLwYDVQQFEygwNjI5Qzk5RDQ3NjBDMjg5Qjg0Q0RCRUNGMUI2QzEz
Q0Y1MjVFQUFGMB4XDTIzMDYyMTA5MjU0M1oXDTI0MDYyMTA5MjU0M1owGDEWMBQG
A1UEAxMNNjQ5MmMyMWItZTZhNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKDvD5b7mRf30DZ4l5VA1xVlDkVyCmaEsNYPuuzK1TxazH7TnDnsFeFFWbDR
XAvXQtIID49MNTmXWcmqka0f42BMYomWLsRhtH5V+VpJJ6vVCugG+jOR8l+yHlMB
1tEP22Yy+GAglnCcYebxk5bIL5CKYWg+0To8uTtFcpEIbZyBk3xn+0ky4LkcVUg1
vXjXcB1Av5i4mc2haPK1Vf8HHDvPQ+qEwqD5Bk9QDphVw+jje1p6CfWwcUcYcyNJ
IE2f3tBfMULC/yROp//Er984xp1JbkNdzi3i611O+MzbEGuxdPRgYeGnuU5JCDPW
BsEOy/+Qa+E6M8unuDMtBUo4ym0CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBTQcsmf
N/aI04be1Q6fZtg/zPT6nDAfBgNVHSMEGDAWgBQGKcmdR2DCibhM2+zxtsE89SXq
rzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTJCOEMvQjUwQ0E0QUEwQjYyMTFFRUIyRDM1RThBNEFEOUU2RkMvQmluSm5V
ZGd3b200VE52czhiYkJQUFVsNnE4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
QmluSm5VZGd3b200VE52czhiYkJQUFVsNnE4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTJCOEMvQjUwQ0E0QUEwQjYyMTFFRUIyRDM1RThBNEFEOUU2
RkMvOUE5MzAxREUxMDE1MTFFRUIwMzAyNTRDNEFEOUU2RkMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD4McTANBgkqhkiG9w0BAQsFAAOC
AQEAz8AM3BDbEW7p6drb6h3m+uJfd5/eUIF/cFZdz4Xo66Hk4bjInJco58rzNWJC
XGLCARL/pyuffHAdBfHe7rBKhd00A5GoHKphsHXXe7P6flCWhXzuxFNhMS8DExde
yvuJCXwJy2ETBZq3FucQRwfzQbgV3oNKnTOdY61VAcimUQZMz7XAOopPxRbyWW9i
9GRDIcPAQgm8m6gERpx2c96i4z7tMlNH5CmwGJFC20fEZLC3rofwPm+RWX9W9wru
uE5onRuKcrPH8cD+CFBGe1M7+ZrReVzTLHumuAYzoVeXshGKu90W6/PimytAWCi5
ciZmDW0KA8zyTlxvfoo30dMU+g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 03:05:54 2024 by rpki-client on console-fra.rpki-client.org