Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/2512C0E08AD811EF90DC88A7762E951A.roa
File: 2512C0E08AD811EF90DC88A7762E951A.roa (raw, json)
Hash identifier: qUW1NKzzbm6VrZyHXGTmIByGwNH0s2gHrRXn4IvpjsA=
Subject key identifier: 01:FC:B5:31:27:1C:B9:7E:2C:B3:83:29:B8:A9:75:C7:FC:AF:2E:8D
Certificate issuer: /CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Certificate serial: 01A7
Authority key identifier: F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/2512C0E08AD811EF90DC88A7762E951A.roa
Signing time: Tue 15 Oct 2024 09:30:41 +0000
ROA not before: Tue 15 Oct 2024 09:30:38 +0000
ROA not after: Tue 31 Oct 2034 09:30:38 +0000
asID: 328611
IP address blocks: 102.207.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Validity
Not Before: Oct 15 09:30:38 2024 GMT
Not After : Oct 31 09:30:38 2034 GMT
Subject: CN=670e3641-dcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:ee:3d:17:74:d1:a3:b3:03:77:90:fd:30:
b6:74:b0:ef:df:c9:02:86:9b:40:e1:a8:ce:4c:80:
75:7e:81:b2:56:d6:c3:2c:d9:36:19:6c:24:dc:82:
e7:68:6f:7b:b7:09:e1:47:43:43:44:83:51:29:f6:
84:81:a5:44:b1:ce:c9:af:ea:36:92:b9:f4:ae:13:
98:59:34:65:e6:19:4a:8c:72:f9:9a:13:af:09:28:
f2:4a:1d:56:21:c5:1b:6f:01:07:c9:1f:0a:57:57:
8a:85:b8:e9:7d:bd:b4:82:12:f8:fa:94:ae:7f:39:
82:0f:49:75:ca:12:45:f3:9e:f1:0e:eb:5a:91:9a:
05:d4:36:e5:dc:0a:aa:c7:69:db:e1:6c:35:20:df:
8f:7a:f9:57:1c:3d:bf:e4:d9:07:ab:64:0e:7c:34:
16:61:82:b2:08:8e:d4:14:ae:6a:b1:b0:b2:6c:0e:
af:55:8d:22:01:c5:ae:6a:59:24:91:f5:8c:4e:45:
cb:77:1e:80:59:72:ee:ab:d2:ac:f3:2f:6e:c4:bc:
c6:95:e8:fc:b3:f8:b9:ab:86:7e:99:ba:43:9c:97:
c1:5d:4a:2e:b9:09:68:16:5b:7b:7f:a4:de:e3:ea:
1e:9b:df:51:ad:29:ea:02:c3:ac:23:c6:19:31:51:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:B5:31:27:1C:B9:7E:2C:B3:83:29:B8:A9:75:C7:FC:AF:2E:8D
X509v3 Authority Key Identifier:
keyid:F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/2512C0E08AD811EF90DC88A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.132.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:3f:af:0f:16:dc:ee:6f:5a:b7:ca:f0:73:22:f4:68:3b:d8:
67:eb:19:7e:b1:09:50:37:f4:5f:25:b8:86:77:e1:ad:47:dd:
cc:a4:0b:e1:a9:27:e9:be:2f:d9:1f:44:29:f4:fd:d0:77:b7:
6f:30:d5:e0:0b:99:ea:0f:78:a1:ff:f6:53:7d:78:4d:76:c4:
2c:3f:ac:c1:6b:6d:45:fb:c2:3e:94:f3:12:d6:dc:63:92:2f:
9c:ab:df:f9:0a:0d:1d:59:c6:05:6b:36:8f:21:17:2b:eb:2d:
94:e1:a0:df:4c:70:ac:c1:f7:64:34:05:fc:5a:ae:a7:29:7d:
28:63:78:7c:4c:df:5c:51:ed:fd:fa:98:e4:b8:9c:1e:72:5f:
90:43:98:aa:0d:f5:17:6f:41:48:4a:f8:f5:00:7d:e2:b1:2f:
64:f1:80:d2:32:76:8b:85:7b:c0:e6:bf:d5:66:69:ba:6f:a9:
fc:1f:32:c3:6c:83:cd:0b:45:0f:a4:99:61:7d:fd:84:8e:25:
b8:b3:82:8e:f8:b6:9e:68:e4:77:a8:a7:7d:64:b0:37:33:a2:
1d:a9:46:59:d0:b6:1b:32:d9:7b:39:34:c7:37:8c:9b:6d:43:
22:88:30:4a:fd:c7:ad:35:94:de:5a:07:92:b3:db:5c:41:6f:
34:46:46:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAacwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUYxODZBRjExMC8GA1UEBRMoRjM3N0Q0RDQyOEY5NDY1QjE1NDQ5QzZBRkQ0NTMy
QzQyMjQ0Njk2NDAeFw0yNDEwMTUwOTMwMzhaFw0zNDEwMzEwOTMwMzhaMBgxFjAU
BgNVBAMTDTY3MGUzNjQxLWRjYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLXe49F3TRo7MDd5D9MLZ0sO/fyQKGm0DhqM5MgHV+gbJW1sMs2TYZbCTc
gudob3u3CeFHQ0NEg1Ep9oSBpUSxzsmv6jaSufSuE5hZNGXmGUqMcvmaE68JKPJK
HVYhxRtvAQfJHwpXV4qFuOl9vbSCEvj6lK5/OYIPSXXKEkXznvEO61qRmgXUNuXc
CqrHadvhbDUg3496+VccPb/k2QerZA58NBZhgrIIjtQUrmqxsLJsDq9VjSIBxa5q
WSSR9YxORct3HoBZcu6r0qzzL27EvMaV6Pyz+Lmrhn6ZukOcl8FdSi65CWgWW3t/
pN7j6h6b31GtKeoCw6wjxhkxUR0nAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAfy1
MSccuX4ss4MpuKl1x/yvLo0wHwYDVR0jBBgwFoAU83fU1Cj5RlsVRJxq/UUyxCJE
aWQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGMTg2LzA5NUI3QTJBNTQ4MDExRUU4QzhGMzMyRDRBRDlFNkZDLzgzZlUx
Q2o1UmxzVlJKeHFfVVV5eENKRWFXUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzgzZlUxQ2o1UmxzVlJKeHFfVVV5eENKRWFXUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVGMTg2LzA5NUI3QTJBNTQ4MDExRUU4QzhGMzMyRDRB
RDlFNkZDLzI1MTJDMEUwOEFEODExRUY5MERDODhBNzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmz4QwDQYJKoZIhvcNAQEL
BQADggEBAMw/rw8W3O5vWrfK8HMi9Gg72GfrGX6xCVA39F8luIZ34a1H3cykC+Gp
J+m+L9kfRCn0/dB3t28w1eALmeoPeKH/9lN9eE12xCw/rMFrbUX7wj6U8xLW3GOS
L5yr3/kKDR1ZxgVrNo8hFyvrLZThoN9McKzB92Q0BfxarqcpfShjeHxM31xR7f36
mOS4nB5yX5BDmKoN9RdvQUhK+PUAfeKxL2TxgNIydouFe8Dmv9VmabpvqfwfMsNs
g80LRQ+kmWF9/YSOJbizgo74tp5o5Heop31ksDczoh2pRlnQthsy2Xs5NMc3jJtt
QyKIMEr9x601lN5aB5Kz21xBbzRGRjU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:31 2024 by rpki-client on console-ams.rpki-client.org