Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/23292B7612C311EFB9087350017001B1.roa
File: 23292B7612C311EFB9087350017001B1.roa (raw, json)
Hash identifier: ljEIXCzMDkNC6MsSv3Wx80qJCOfaflJx6GdHSwJRefU=
Subject key identifier: FA:0C:39:6F:29:B8:E0:4A:B9:03:1F:B8:76:72:53:31:52:2F:DE:AE
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: CD
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/23292B7612C311EFB9087350017001B1.roa
Signing time: Wed 15 May 2024 13:57:59 +0000
ROA not before: Wed 15 May 2024 13:57:55 +0000
ROA not after: Thu 31 Dec 2026 13:57:55 +0000
asID: 36912
IP address blocks: 102.244.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: May 15 13:57:55 2024 GMT
Not After : Dec 31 13:57:55 2026 GMT
Subject: CN=6644bf67-202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f2:c0:63:aa:73:3c:22:d7:fb:13:32:aa:c4:
ed:dd:bc:b4:ef:27:b9:af:a9:95:fe:ac:34:6f:e9:
13:9b:ce:de:aa:1e:f6:3e:ef:92:c8:9c:94:0a:e5:
0b:74:68:08:08:dd:67:a5:f2:43:67:0f:fc:fd:70:
f4:3f:23:e9:6c:b6:aa:d0:c7:c9:2e:b0:05:26:e1:
bc:d0:b8:fd:e7:b6:cb:3a:ac:69:ab:49:98:46:a6:
c7:70:fe:17:3c:17:cb:e2:86:03:6e:30:aa:23:29:
cb:2d:ab:60:c4:8e:0f:74:b0:35:d2:3f:47:c3:8e:
79:2a:de:97:b2:17:18:9f:78:32:0b:58:76:f2:e0:
13:85:90:a1:c8:db:57:cc:2a:4f:ee:20:fb:5c:73:
ee:92:fe:09:c5:a0:13:f2:93:d0:ca:3a:86:8a:07:
94:e2:92:8c:eb:ec:7f:42:82:18:80:0e:5d:e1:04:
34:8d:ce:21:a0:be:cf:93:3f:69:49:67:8a:11:a2:
80:9a:01:17:9e:44:79:ae:7f:26:11:fb:f4:f6:6a:
ff:ee:14:9a:34:7b:29:a0:cc:2c:a6:9a:17:e0:c9:
bc:c2:a9:e6:a8:0d:88:91:65:0d:86:f4:bd:09:99:
9d:92:f2:97:f4:ef:e6:7e:84:f3:70:57:21:44:cf:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:39:6F:29:B8:E0:4A:B9:03:1F:B8:76:72:53:31:52:2F:DE:AE
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/23292B7612C311EFB9087350017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.244.104.0/22
Signature Algorithm: sha256WithRSAEncryption
63:13:bf:4d:49:db:75:d8:39:72:08:25:c9:32:54:a5:e1:15:
6b:5c:1e:d3:c7:4f:63:81:81:20:53:fd:b8:9f:fd:28:3f:8a:
5a:88:87:8e:da:77:ed:cc:b6:13:5b:89:72:54:a5:c6:9c:93:
7d:1d:f8:f5:8b:b7:23:52:24:aa:b4:65:a7:0e:b0:35:c8:bb:
b6:c9:5f:07:c6:49:88:0d:be:40:55:b9:84:44:71:cb:dd:66:
17:66:dc:ec:7f:14:92:85:70:f3:7b:63:83:a7:53:f7:cd:a2:
2d:d8:dd:61:56:84:d0:78:52:f7:9b:ec:cd:44:1f:ba:1e:ac:
6c:d9:51:f0:d7:7d:95:ae:6c:21:e1:e7:0f:d0:fb:c1:90:1c:
9b:72:30:ce:4c:98:97:e0:a4:4d:0a:39:88:43:af:25:94:60:
42:4e:a4:f7:d2:63:af:ec:12:05:6c:e1:d1:15:3d:23:0a:0b:
af:bd:7d:07:18:4b:15:24:73:87:ca:59:81:48:e8:18:34:3b:
7e:2b:00:7c:e9:5c:28:a8:67:c5:70:44:57:36:10:9b:e7:49:
b5:6f:5a:1f:84:6c:ee:36:fa:9e:09:d4:5f:08:c7:ef:31:6e:
b3:d3:56:97:00:a8:5c:b7:3c:87:03:37:99:86:09:16:f6:05:
27:94:07:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTRCNjlBRjExMC8GA1UEBRMoQ0E2NjQyRUE5QUZDQzczQUEyNEFBNDA0NzU0NEIx
N0MyNjAzQ0JEMjAeFw0yNDA1MTUxMzU3NTVaFw0yNjEyMzExMzU3NTVaMBgxFjAU
BgNVBAMTDTY2NDRiZjY3LTIwMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDt8sBjqnM8Itf7EzKqxO3dvLTvJ7mvqZX+rDRv6RObzt6qHvY+75LInJQK
5Qt0aAgI3Wel8kNnD/z9cPQ/I+lstqrQx8kusAUm4bzQuP3ntss6rGmrSZhGpsdw
/hc8F8vihgNuMKojKcstq2DEjg90sDXSP0fDjnkq3peyFxifeDILWHby4BOFkKHI
21fMKk/uIPtcc+6S/gnFoBPyk9DKOoaKB5Tikozr7H9CghiADl3hBDSNziGgvs+T
P2lJZ4oRooCaAReeRHmufyYR+/T2av/uFJo0eymgzCymmhfgybzCqeaoDYiRZQ2G
9L0JmZ2S8pf07+Z+hPNwVyFEz16JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+gw5
bym44Eq5Ax+4dnJTMVIv3q4wHwYDVR0jBBgwFoAUymZC6pr8xzqiSqQEdUSxfCYD
y9IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU0QjY5L0RFMTQ3NzBFODg3MzExRUU4OUI4MTE0MzRBRDlFNkZDL3ltWkM2
cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ltWkM2cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkU0QjY5L0RFMTQ3NzBFODg3MzExRUU4OUI4MTE0MzRB
RDlFNkZDLzIzMjkyQjc2MTJDMzExRUZCOTA4NzM1MDAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm9GgwDQYJKoZIhvcNAQEL
BQADggEBAGMTv01J23XYOXIIJckyVKXhFWtcHtPHT2OBgSBT/bif/Sg/ilqIh47a
d+3MthNbiXJUpcack30d+PWLtyNSJKq0ZacOsDXIu7bJXwfGSYgNvkBVuYREccvd
Zhdm3Ox/FJKFcPN7Y4OnU/fNoi3Y3WFWhNB4Uveb7M1EH7oerGzZUfDXfZWubCHh
5w/Q+8GQHJtyMM5MmJfgpE0KOYhDryWUYEJOpPfSY6/sEgVs4dEVPSMKC6+9fQcY
SxUkc4fKWYFI6Bg0O34rAHzpXCioZ8VwRFc2EJvnSbVvWh+EbO42+p4J1F8Ix+8x
brPTVpcAqFy3PIcDN5mGCRb2BSeUBzQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:44 2024 by rpki-client on console-ams.rpki-client.org