Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/90BC8EA4FEA911EEA69C406E017001B1.roa
File: 90BC8EA4FEA911EEA69C406E017001B1.roa (raw, json)
Hash identifier: UwU5AHQOAS7CU+i+ADd/wfQ4IXSkFtvjT7nzo/QGiMQ=
Subject key identifier: 57:1C:9E:39:0E:1B:6D:21:13:1C:06:D5:82:6D:10:C3:94:93:32:97
Certificate issuer: /CN=F36E3941AF/serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
Certificate serial: FA
Authority key identifier: 45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/90BC8EA4FEA911EEA69C406E017001B1.roa
Signing time: Sat 20 Apr 2024 00:04:33 +0000
ROA not before: Sat 20 Apr 2024 00:00:29 +0000
ROA not after: Thu 20 Apr 2034 00:00:29 +0000
asID: 328780
IP address blocks: 102.221.84.0/22 maxlen: 31
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 24 Jun 2024 00:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3941AF/serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
Validity
Not Before: Apr 20 00:00:29 2024 GMT
Not After : Apr 20 00:00:29 2034 GMT
Subject: CN=66230691-a08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:d9:ef:df:90:e0:80:a2:ec:da:62:44:59:
60:5f:37:b0:df:f3:01:51:d1:9d:f3:44:38:6c:d4:
e0:f6:8d:9c:4a:ef:69:6f:4f:f6:4a:ef:94:c7:31:
62:1d:87:e6:c5:54:f4:f1:0a:51:a2:95:0c:49:15:
f4:03:e9:9d:8c:24:e1:51:e1:bb:f1:44:52:b7:d2:
17:e8:ea:df:8d:c6:00:49:05:30:95:b5:16:cd:37:
72:0f:43:53:d3:1d:a2:98:a3:c9:82:8b:09:4c:98:
bc:bb:b7:82:71:17:01:27:cc:a9:01:64:87:fa:57:
b7:06:6a:8d:f0:7b:2d:51:73:83:b9:d3:1f:c3:93:
99:ac:e3:53:ec:66:36:18:f0:b8:38:dc:3d:76:91:
2a:64:78:79:3e:b5:6e:7d:2e:cb:6f:5b:ab:5d:5a:
84:5a:60:88:ee:49:a2:df:bd:99:77:81:27:14:e1:
6b:49:c4:29:b1:e9:f6:07:c9:d1:cf:ae:cc:15:33:
d5:98:24:d3:01:4e:b4:9f:42:e9:ef:35:b6:25:38:
f6:80:24:24:fb:72:59:d6:b1:17:2f:1e:46:f4:57:
fb:e5:c1:ae:f5:42:02:97:74:02:7d:fe:cb:d7:65:
e9:aa:a1:93:d6:66:68:a3:36:eb:23:bc:f9:f5:85:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1C:9E:39:0E:1B:6D:21:13:1C:06:D5:82:6D:10:C3:94:93:32:97
X509v3 Authority Key Identifier:
keyid:45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/90BC8EA4FEA911EEA69C406E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.84.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:96:79:b2:ec:14:8a:61:63:11:4e:4e:ff:86:bf:50:ef:c8:
af:79:99:cc:ae:bc:5a:c1:68:72:ac:b3:87:07:2e:02:1c:85:
07:d2:eb:ca:a0:bd:b4:9e:c5:35:2c:0b:9a:ed:db:cc:c8:ea:
41:25:60:3a:51:bb:96:d0:07:b3:c9:1f:d7:b0:cf:e6:6f:7b:
63:1c:95:b5:1c:bb:df:e0:6e:24:ac:2e:03:6a:a1:60:95:0d:
ab:cc:16:c6:88:c2:75:5a:62:02:fa:21:bc:1b:de:2f:2c:d1:
c5:27:26:ed:51:5e:ee:7d:b7:ce:eb:0c:65:d7:fe:8a:c5:ce:
45:4d:72:a7:37:43:bb:3a:48:19:0a:23:e2:b0:12:4a:6a:d8:
64:9c:f0:94:59:9f:0f:e1:6b:72:99:32:3b:d0:e2:6c:6c:c6:
03:46:22:bc:82:fa:b7:a8:b4:3b:93:1f:5a:8f:26:b9:92:1e:
6a:72:4a:aa:be:34:8d:53:0f:b7:dc:d8:cc:0f:5d:87:80:d4:
7f:fe:73:d2:49:b7:e3:6c:6e:33:27:0c:47:d1:49:ab:72:1e:
da:57:ff:4f:d8:61:5d:6a:86:57:39:6c:27:de:9f:55:67:87:
a7:89:a0:8a:e0:cc:9b:ad:07:9b:8f:05:dd:d3:9f:5e:02:c9:
c9:e8:6f:8d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAPowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM5NDFBRjExMC8GA1UEBRMoNDU2OTMxNTAxOTY0Q0RCODg0QjE0NzVCNTZENjhG
MzA2OUMyMkFGMjAeFw0yNDA0MjAwMDAwMjlaFw0zNDA0MjAwMDAwMjlaMBgxFjAU
BgNVBAMTDTY2MjMwNjkxLWEwOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCihdnv35DggKLs2mJEWWBfN7Df8wFR0Z3zRDhs1OD2jZxK72lvT/ZK75TH
MWIdh+bFVPTxClGilQxJFfQD6Z2MJOFR4bvxRFK30hfo6t+NxgBJBTCVtRbNN3IP
Q1PTHaKYo8mCiwlMmLy7t4JxFwEnzKkBZIf6V7cGao3wey1Rc4O50x/Dk5ms41Ps
ZjYY8Lg43D12kSpkeHk+tW59LstvW6tdWoRaYIjuSaLfvZl3gScU4WtJxCmx6fYH
ydHPrswVM9WYJNMBTrSfQunvNbYlOPaAJCT7clnWsRcvHkb0V/vlwa71QgKXdAJ9
/svXZemqoZPWZmijNusjvPn1heXDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVxye
OQ4bbSETHAbVgm0Qw5STMpcwHwYDVR0jBBgwFoAURWkxUBlkzbiEsUdbVtaPMGnC
KvIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzOTQxLzU4MTgwNTI0NDVEMTExRUU4QTVDQTY1NzRBRDlFNkZDL1JXa3hV
QmxremJpRXNVZGJWdGFQTUduQ0t2SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JXa3hVQmxremJpRXNVZGJWdGFQTUduQ0t2SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzOTQxLzU4MTgwNTI0NDVEMTExRUU4QTVDQTY1NzRB
RDlFNkZDLzkwQkM4RUE0RkVBOTExRUVBNjlDNDA2RTAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3VQwDQYJKoZIhvcNAQEL
BQADggEBANGWebLsFIphYxFOTv+Gv1DvyK95mcyuvFrBaHKss4cHLgIchQfS68qg
vbSexTUsC5rt28zI6kElYDpRu5bQB7PJH9ewz+Zve2MclbUcu9/gbiSsLgNqoWCV
DavMFsaIwnVaYgL6Ibwb3i8s0cUnJu1RXu59t87rDGXX/orFzkVNcqc3Q7s6SBkK
I+KwEkpq2GSc8JRZnw/ha3KZMjvQ4mxsxgNGIryC+reotDuTH1qPJrmSHmpySqq+
NI1TD7fc2MwPXYeA1H/+c9JJt+NsbjMnDEfRSatyHtpX/0/YYV1qhlc5bCfen1Vn
h6eJoIrgzJutB5uPBd3Tn14Cycnob40=
-----END CERTIFICATE-----
Generated at Sat Jun 22 03:18:54 2024 by rpki-client on console-fra.rpki-client.org