Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/A67CF5BA216A11EFA90D51127DDC24C2.roa
File: A67CF5BA216A11EFA90D51127DDC24C2.roa (raw, json)
Hash identifier: lsxPoy4LkYh0ebWwRE+vefdBa5LLS6CukBLh7U9d9E4=
Subject key identifier: 54:A4:1E:36:68:75:A1:20:25:74:76:36:7C:38:CF:05:B5:9F:39:5F
Certificate issuer: /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial: 0185
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access: rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/A67CF5BA216A11EFA90D51127DDC24C2.roa
Signing time: Mon 03 Jun 2024 05:32:22 +0000
ROA not before: Mon 03 Jun 2024 05:32:18 +0000
ROA not after: Tue 01 Jan 2030 05:32:18 +0000
asID: 37684
IP address blocks: 62.12.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Validity
Not Before: Jun 3 05:32:18 2024 GMT
Not After : Jan 1 05:32:18 2030 GMT
Subject: CN=665d5565-0a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:2d:c6:35:bf:f7:b5:4b:e6:e3:9f:32:e0:
3e:96:43:c1:40:7b:21:91:64:de:96:33:e9:8e:f9:
08:9a:28:72:98:a6:62:a2:e5:a1:3a:36:00:ef:9b:
63:45:02:be:66:3c:aa:d3:4c:8a:de:e2:e5:0b:ab:
eb:81:68:71:e1:96:32:2e:bc:62:58:f2:b3:ea:23:
0d:b4:5f:42:f9:63:e8:a9:fb:ec:df:8e:a2:e6:76:
c8:93:67:24:38:d8:49:c4:0f:7e:dd:f0:23:f1:a1:
20:a6:b6:22:62:da:c1:41:ae:a0:3a:fd:a4:e5:b2:
25:eb:e1:f5:94:8a:5c:09:ac:26:f9:40:0f:5f:3f:
ff:21:a3:88:df:19:30:51:34:88:db:52:1a:0c:42:
9a:59:2e:47:bc:81:53:6f:70:fa:f7:92:c4:1e:5b:
3e:74:f8:57:9f:21:ee:53:85:e3:c8:99:2b:17:f6:
e1:d5:80:42:2f:52:76:1d:fd:3a:36:37:d3:6c:be:
f3:66:93:62:2d:96:75:8d:c4:9f:e9:9d:2b:39:5b:
45:74:00:2e:8e:62:11:d4:d0:43:db:56:ae:5d:67:
b2:43:28:28:1f:2f:d6:6e:3a:f7:74:3b:db:f0:ec:
77:4e:d5:26:d7:d3:11:3d:6b:32:55:9c:70:4c:d4:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:1E:36:68:75:A1:20:25:74:76:36:7C:38:CF:05:B5:9F:39:5F
X509v3 Authority Key Identifier:
keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/A67CF5BA216A11EFA90D51127DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.12.114.0/23
Signature Algorithm: sha256WithRSAEncryption
54:6c:43:12:b8:d7:cc:42:76:72:0c:6a:d8:d3:70:6b:e5:65:
bc:83:f1:9c:d9:f3:7e:49:3e:29:20:c9:6b:ed:fd:4f:d1:d9:
fa:eb:d7:11:07:14:1a:eb:dc:dd:f9:90:16:73:fb:80:4f:ff:
11:eb:64:91:00:10:b8:70:d5:25:2b:be:6f:07:76:88:b1:48:
71:b0:e8:c1:b1:23:06:23:00:01:c1:49:8f:28:13:83:db:af:
9c:69:40:2f:b2:da:3c:91:fb:aa:56:11:8f:39:9b:05:cf:72:
d7:a2:ab:63:a0:ff:20:e4:17:1b:d8:08:a3:ac:fb:d8:2f:ec:
a8:e9:e1:1e:ea:99:0d:8b:da:91:55:83:b0:3f:39:e8:7d:96:
c0:95:14:b6:c0:5f:df:36:73:2b:fb:c1:4d:73:d3:cf:e5:76:
96:a3:1d:de:1d:d3:fb:b2:3d:b1:6c:f6:4a:04:3b:af:fb:12:
06:ca:4e:d1:47:b9:d4:fa:9f:9c:90:64:28:44:30:84:a3:3e:
7f:5c:dd:e9:52:26:df:e4:9d:40:46:d3:54:5a:3f:26:36:b9:
db:ba:9e:d9:85:b3:f8:1e:c7:25:bc:3b:43:0d:d9:31:55:fd:
e4:ac:58:31:2a:e3:b1:02:06:d3:dc:77:73:cf:40:3a:0d:fd:
a4:b8:2f:a7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTJCOENSSTExMC8GA1UEBRMoMDYyOUM5OUQ0NzYwQzI4OUI4NENEQkVDRjFCNkMx
M0NGNTI1RUFBRjAeFw0yNDA2MDMwNTMyMThaFw0zMDAxMDEwNTMyMThaMBgxFjAU
BgNVBAMTDTY2NWQ1NTY1LTBhNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkTi3GNb/3tUvm458y4D6WQ8FAeyGRZN6WM+mO+QiaKHKYpmKi5aE6NgDv
m2NFAr5mPKrTTIre4uULq+uBaHHhljIuvGJY8rPqIw20X0L5Y+ip++zfjqLmdsiT
ZyQ42EnED37d8CPxoSCmtiJi2sFBrqA6/aTlsiXr4fWUilwJrCb5QA9fP/8ho4jf
GTBRNIjbUhoMQppZLke8gVNvcPr3ksQeWz50+FefIe5ThePImSsX9uHVgEIvUnYd
/To2N9NsvvNmk2ItlnWNxJ/pnSs5W0V0AC6OYhHU0EPbVq5dZ7JDKCgfL9ZuOvd0
O9vw7HdO1SbX0xE9azJVnHBM1ACNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVKQe
Nmh1oSAldHY2fDjPBbWfOV8wHwYDVR0jBBgwFoAUBinJnUdgwom4TNvs8bbBPPUl
6q8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyQjhDL0I1MENBNEFBMEI2MjExRUVCMkQzNUU4QTRBRDlFNkZDL0Jpbkpu
VWRnd29tNFROdnM4YmJCUFBVbDZxOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0JpbkpuVWRnd29tNFROdnM4YmJCUFBVbDZxOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkUyQjhDL0I1MENBNEFBMEI2MjExRUVCMkQzNUU4QTRBRDlF
NkZDL0E2N0NGNUJBMjE2QTExRUZBOTBENTExMjdEREMyNEMyLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAE+DHIwDQYJKoZIhvcNAQELBQAD
ggEBAFRsQxK418xCdnIMatjTcGvlZbyD8ZzZ835JPikgyWvt/U/R2frr1xEHFBrr
3N35kBZz+4BP/xHrZJEAELhw1SUrvm8HdoixSHGw6MGxIwYjAAHBSY8oE4Pbr5xp
QC+y2jyR+6pWEY85mwXPcteiq2Og/yDkFxvYCKOs+9gv7Kjp4R7qmQ2L2pFVg7A/
Oeh9lsCVFLbAX982cyv7wU1z08/ldpajHd4d0/uyPbFs9koEO6/7EgbKTtFHudT6
n5yQZChEMISjPn9c3elSJt/knUBG01RaPyY2udu6ntmFs/gexyW8O0MN2TFV/eSs
WDEq47ECBtPcd3PPQDoN/aS4L6c=
-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:20 2024 by rpki-client on console-fra.rpki-client.org