Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/391A826E132311ED89F578F7F1222468.roa
File: 391A826E132311ED89F578F7F1222468.roa (raw, json)
Hash identifier: f4iDvOghIvvKoUP+uwLCDZEkbK2gOJxg1Mz+fV118HQ=
Subject key identifier: 28:11:87:98:4E:C9:41:65:AD:33:9C:79:84:AF:91:E5:A2:53:30:26
Certificate issuer: /CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Certificate serial: 02
Authority key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/391A826E132311ED89F578F7F1222468.roa
Signing time: Wed 03 Aug 2022 11:55:52 +0000
ROA not before: Wed 03 Aug 2022 11:55:46 +0000
ROA not after: Tue 31 Aug 2032 11:55:46 +0000
asID: 328257
IP address blocks: 102.22.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Validity
Not Before: Aug 3 11:55:46 2022 GMT
Not After : Aug 31 11:55:46 2032 GMT
Subject: CN=62ea6248-f803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:81:37:62:96:6e:55:fc:7f:b1:a6:d1:42:
57:3a:fb:24:2f:88:2d:a0:66:c3:8c:3f:d0:ac:ed:
ee:85:8e:93:fe:7d:65:71:32:19:99:c4:cb:03:80:
09:ef:55:bb:19:92:28:16:77:d9:74:7c:98:68:b0:
d6:78:83:73:0b:97:1e:02:49:1e:64:d8:09:a0:0e:
aa:3b:8f:6b:7a:79:77:5b:52:1c:7e:3f:bb:2d:97:
47:5a:8d:7a:a2:4a:bf:2e:e4:a4:58:cb:39:28:25:
3d:b1:6d:cd:a0:13:bc:70:fb:62:f9:73:7e:07:1b:
06:63:bd:79:04:aa:43:b5:a6:4a:6b:2a:00:b6:45:
54:86:30:df:bd:b8:12:f3:98:99:d3:66:8e:4a:a0:
07:e8:72:6b:ee:12:3c:c6:37:ef:17:54:74:dd:f1:
f8:d3:26:c4:e2:a7:32:4c:5f:dc:30:22:df:3b:f0:
35:2a:79:28:81:d2:4b:da:ae:4e:b4:c0:37:01:49:
d1:45:75:17:96:8a:aa:7f:c9:de:5d:29:a1:0e:81:
56:bb:98:37:75:74:77:10:69:1c:b5:0a:6b:56:0f:
9f:ce:05:92:d8:69:e3:39:e1:04:62:18:4c:13:1e:
bc:a2:53:db:7c:b9:62:d8:d9:54:e7:6e:c9:85:61:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:87:98:4E:C9:41:65:AD:33:9C:79:84:AF:91:E5:A2:53:30:26
X509v3 Authority Key Identifier:
keyid:53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/391A826E132311ED89F578F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.112.0/21
Signature Algorithm: sha256WithRSAEncryption
41:20:1a:34:31:66:c4:6d:4c:45:a0:c6:da:66:8f:91:62:77:
53:8a:92:8a:18:a7:6e:4f:fc:86:14:01:b0:ba:00:75:e3:6d:
32:f0:df:ae:6a:15:24:1c:ac:f9:36:a0:a6:2b:2a:be:25:d2:
06:65:01:44:c7:6c:b2:c2:ee:6f:7a:0d:44:29:46:a9:b9:c8:
1a:9a:7b:77:b3:fb:7e:f7:58:f2:12:30:fd:a0:2f:61:17:6c:
8d:01:37:72:e7:6f:fc:68:48:c7:d8:a4:e9:64:5e:fe:0a:0c:
80:12:03:74:f0:0d:d1:ec:92:c9:70:e3:0b:4c:98:e7:6f:cb:
c6:0d:cd:44:6a:82:37:4c:a7:64:bd:6c:33:04:07:7c:63:ec:
e8:74:d0:b3:d7:81:de:c3:ef:4c:54:12:d2:d9:29:7e:10:1d:
ae:7c:f9:ad:06:5f:4f:8a:6a:39:dd:ed:77:92:48:7c:2f:fd:
5f:92:49:45:fd:75:3b:aa:68:1d:84:7b:f3:5c:a4:e6:e2:5e:
bd:0e:0e:fe:df:d0:04:31:f0:27:e7:3a:0d:f1:56:20:72:ce:
16:9e:5b:df:76:c6:2a:90:45:7c:95:e8:e7:e9:af:88:29:ae:
20:d0:65:4c:5d:ef:2c:89:67:fb:60:5f:b8:65:c8:08:ce:83:
44:84:26:4b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZF
QURCN0FGMTEwLwYDVQQFEyg1MzQzQzM4QkRGMkU0OTE4MzEzOUE1OEFDNDJGMTE2
RkE5OTY3M0NEMB4XDTIyMDgwMzExNTU0NloXDTMyMDgzMTExNTU0NlowGDEWMBQG
A1UEAwwNNjJlYTYyNDgtZjgwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKk4gTdilm5V/H+xptFCVzr7JC+ILaBmw4w/0Kzt7oWOk/59ZXEyGZnEywOA
Ce9VuxmSKBZ32XR8mGiw1niDcwuXHgJJHmTYCaAOqjuPa3p5d1tSHH4/uy2XR1qN
eqJKvy7kpFjLOSglPbFtzaATvHD7YvlzfgcbBmO9eQSqQ7WmSmsqALZFVIYw3724
EvOYmdNmjkqgB+hya+4SPMY37xdUdN3x+NMmxOKnMkxf3DAi3zvwNSp5KIHSS9qu
TrTANwFJ0UV1F5aKqn/J3l0poQ6BVruYN3V0dxBpHLUKa1YPn84Fkthp4znhBGIY
TBMevKJT23y5YtjZVOduyYVhT3kCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQoEYeY
TslBZa0znHmEr5HlolMwJjAfBgNVHSMEGDAWgBRTQ8OL3y5JGDE5pYrELxFvqZZz
zTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUFEQjcvM0M4RUIyOTIxMzIwMTFFRDlDQUU0M0VFRjEyMjI0NjgvVTBQRGk5
OHVTUmd4T2FXS3hDOFJiNm1XYzgwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVTBQRGk5OHVTUmd4T2FXS3hDOFJiNm1XYzgwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUFEQjcvM0M4RUIyOTIxMzIwMTFFRDlDQUU0M0VFRjEy
MjI0NjgvMzkxQTgyNkUxMzIzMTFFRDg5RjU3OEY3RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2YWcDANBgkqhkiG9w0BAQsF
AAOCAQEAQSAaNDFmxG1MRaDG2maPkWJ3U4qSihinbk/8hhQBsLoAdeNtMvDfrmoV
JBys+TagpisqviXSBmUBRMdsssLub3oNRClGqbnIGpp7d7P7fvdY8hIw/aAvYRds
jQE3cudv/GhIx9ik6WRe/goMgBIDdPAN0eySyXDjC0yY52/Lxg3NRGqCN0ynZL1s
MwQHfGPs6HTQs9eB3sPvTFQS0tkpfhAdrnz5rQZfT4pqOd3td5JIfC/9X5JJRf11
O6poHYR781yk5uJevQ4O/t/QBDHwJ+c6DfFWIHLOFp5b33bGKpBFfJXo5+mviCmu
INBlTF3vLIln+2BfuGXICM6DRIQmSw==
-----END CERTIFICATE-----
Generated at Fri May 17 02:38:36 2024 by rpki-client on console-fra.rpki-client.org