Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/A95C3E7CC46711EE9DAAFFA7775412E6.roa
File: A95C3E7CC46711EE9DAAFFA7775412E6.roa (raw, json)
Hash identifier: 5YGMUo45vZOEsVw7rxMl98qm2QPWhnBn5cPNqxBly50=
Subject key identifier: 1E:B7:DC:4C:FC:FF:75:3A:81:99:BD:03:10:41:78:58:CE:9A:FE:00
Certificate issuer: /CN=F36E75A9AF/serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
Certificate serial: 02
Authority key identifier: B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/A95C3E7CC46711EE9DAAFFA7775412E6.roa
Signing time: Mon 05 Feb 2024 20:46:40 +0000
ROA not before: Mon 05 Feb 2024 20:46:34 +0000
ROA not after: Tue 05 Feb 2030 20:46:34 +0000
asID: 329378
IP address blocks: 102.210.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E75A9AF/serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
Validity
Not Before: Feb 5 20:46:34 2024 GMT
Not After : Feb 5 20:46:34 2030 GMT
Subject: CN=65c14930-e918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:a3:90:19:71:2c:7c:da:32:75:53:4f:5c:
3f:fa:12:56:e2:14:7b:b5:54:58:75:43:5e:52:88:
03:24:3d:1b:4e:6e:8c:b6:71:bc:7d:b2:f1:b7:28:
33:3f:28:b4:f2:e3:de:11:fe:e4:2c:1f:de:1d:c0:
7e:95:8e:cb:87:01:a4:f7:4d:76:52:70:f5:e9:70:
ae:b2:f7:c0:96:4d:c3:44:43:46:e6:e5:37:18:39:
0a:af:67:42:33:99:5f:2b:1f:60:db:e3:92:cf:23:
e1:74:42:65:40:06:3f:d1:34:17:05:4c:62:f7:d2:
f4:15:41:26:4c:d1:8b:1b:99:cc:a3:f1:e6:4a:b0:
d2:b4:ff:40:c6:f5:a0:dc:84:02:01:b1:fb:90:5e:
6e:29:8a:6a:30:0d:a3:d4:53:a3:1c:11:41:66:a4:
6b:5a:55:60:a4:9e:27:5f:13:54:95:c9:d2:4f:d7:
d1:bf:4e:0b:67:86:83:48:25:4f:fc:34:0f:02:c9:
f0:65:c1:82:db:59:cd:1d:ad:7b:b9:be:45:6a:89:
e1:7e:93:a6:5d:44:3c:78:e5:5d:ec:2e:49:c9:8c:
fb:81:32:ed:38:3a:e3:07:9b:df:93:57:3c:76:fb:
65:83:f7:f6:a3:7d:43:73:2c:e6:da:1b:68:d1:2a:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:DC:4C:FC:FF:75:3A:81:99:BD:03:10:41:78:58:CE:9A:FE:00
X509v3 Authority Key Identifier:
keyid:B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/A95C3E7CC46711EE9DAAFFA7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:76:c4:6b:78:e6:a8:ec:aa:a4:05:63:48:90:ae:30:bd:69:
33:d2:d1:39:94:13:53:94:42:d2:1b:b1:04:64:e5:60:f6:7e:
a9:5f:6c:d5:66:ce:bf:fd:06:6a:2a:40:50:a8:28:2e:cc:14:
0e:a6:f9:b1:34:e2:58:06:4b:f4:a9:e6:be:ea:a4:69:e0:bc:
5b:a3:7c:ca:c2:bf:65:1e:05:72:51:cb:a6:ff:6f:13:ed:ef:
aa:16:f5:24:6b:f2:08:eb:4a:77:83:7a:6c:e6:0d:5b:29:53:
a7:f3:01:22:6e:5f:09:b2:4d:65:60:d1:2d:16:02:ce:37:3e:
d1:c9:fc:93:b6:53:31:59:c8:45:18:ed:f7:f7:93:13:b1:74:
47:34:35:23:2c:b6:68:dc:3d:88:c0:52:75:de:6e:59:03:a2:
01:a8:e6:c0:39:13:e2:3d:e5:bc:b2:b3:24:72:27:94:c4:b7:
04:df:71:9a:c1:10:08:63:c5:14:68:c0:4c:5d:2a:e5:e0:18:
b4:b1:4b:c4:30:d2:ab:a0:13:8c:85:0c:6f:a3:29:33:43:ca:
29:6c:c4:30:42:c8:16:a4:95:33:d6:22:39:54:de:ab:60:39:
7c:68:c2:30:7d:ad:59:33:54:11:1c:12:ed:45:8f:58:f1:ac:
9f:91:16:45
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
NzVBOUFGMTEwLwYDVQQFEyhCNUM3NDI0NkVFNUUzQzhGQTk5OTg0MUREQzQ0MzY1
M0Y4NTRCQTdEMB4XDTI0MDIwNTIwNDYzNFoXDTMwMDIwNTIwNDYzNFowGDEWMBQG
A1UEAxMNNjVjMTQ5MzAtZTkxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALFSo5AZcSx82jJ1U09cP/oSVuIUe7VUWHVDXlKIAyQ9G05ujLZxvH2y8bco
Mz8otPLj3hH+5Cwf3h3AfpWOy4cBpPdNdlJw9elwrrL3wJZNw0RDRublNxg5Cq9n
QjOZXysfYNvjks8j4XRCZUAGP9E0FwVMYvfS9BVBJkzRixuZzKPx5kqw0rT/QMb1
oNyEAgGx+5BebimKajANo9RToxwRQWaka1pVYKSeJ18TVJXJ0k/X0b9OC2eGg0gl
T/w0DwLJ8GXBgttZzR2te7m+RWqJ4X6Tpl1EPHjlXewuScmM+4Ey7Tg64web35NX
PHb7ZYP39qN9Q3Ms5tobaNEqfr8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQet9xM
/P91OoGZvQMQQXhYzpr+ADAfBgNVHSMEGDAWgBS1x0JG7l48j6mZhB3cRDZT+FS6
fTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTc1QTkvNTU1MjAzNDBDNDA2MTFFRThGNEEyODhENzc1NDEyRTYvdGNkQ1J1
NWVQSS1wbVlRZDNFUTJVX2hVdW4wLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdGNkQ1J1NWVQSS1wbVlRZDNFUTJVX2hVdW4wLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTc1QTkvNTU1MjAzNDBDNDA2MTFFRThGNEEyODhENzc1
NDEyRTYvQTk1QzNFN0NDNDY3MTFFRTlEQUFGRkE3Nzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbSaDANBgkqhkiG9w0BAQsF
AAOCAQEAX3bEa3jmqOyqpAVjSJCuML1pM9LROZQTU5RC0huxBGTlYPZ+qV9s1WbO
v/0GaipAUKgoLswUDqb5sTTiWAZL9KnmvuqkaeC8W6N8ysK/ZR4FclHLpv9vE+3v
qhb1JGvyCOtKd4N6bOYNWylTp/MBIm5fCbJNZWDRLRYCzjc+0cn8k7ZTMVnIRRjt
9/eTE7F0RzQ1Iyy2aNw9iMBSdd5uWQOiAajmwDkT4j3lvLKzJHInlMS3BN9xmsEQ
CGPFFGjATF0q5eAYtLFLxDDSq6ATjIUMb6MpM0PKKWzEMELIFqSVM9YiOVTeq2A5
fGjCMH2tWTNUERwS7UWPWPGsn5EWRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:36 2024 by rpki-client on console-fra.rpki-client.org