Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/A4EBAA16FC9E11E9A1B9C140F8AEA228.roa
File: A4EBAA16FC9E11E9A1B9C140F8AEA228.roa (raw, json)
Hash identifier: 80PrfbUNINLOm8aOdH0UPxFoBlumMScmqP938jPlttA=
Subject key identifier: F5:FD:A1:E7:F5:A0:42:CD:8C:FE:E5:38:0A:24:17:59:28:07:BA:4D
Certificate issuer: /CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Certificate serial: 06
Authority key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/A4EBAA16FC9E11E9A1B9C140F8AEA228.roa
Signing time: Fri 01 Nov 2019 11:56:32 +0000
ROA not before: Fri 01 Nov 2019 11:56:27 +0000
ROA not after: Thu 01 Nov 2029 11:56:27 +0000
asID: 37682
IP address blocks: 102.134.112.0/24 maxlen: 24
102.134.113.0/24 maxlen: 24
102.134.114.0/24 maxlen: 24
102.134.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Validity
Not Before: Nov 1 11:56:27 2019 GMT
Not After : Nov 1 11:56:27 2029 GMT
Subject: CN=5dbc1d6f-e0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:2b:9a:9a:c1:39:8b:01:15:60:a2:05:0a:
0b:8a:9b:a7:f0:1f:39:16:28:ca:9c:52:e4:42:f5:
b6:9c:28:dc:38:db:c7:93:97:60:3d:1c:39:6b:eb:
dd:e9:c9:b4:ce:84:ec:ef:4e:0f:52:a8:81:06:7c:
35:9a:6d:41:46:1c:92:e6:dd:fb:7d:52:91:70:44:
46:af:af:c4:75:33:c0:63:c0:c3:12:22:ff:db:8c:
04:f7:b9:69:01:fe:c2:26:4f:9e:22:59:dd:a3:b1:
1a:aa:06:fb:fb:79:bf:3e:90:cf:21:11:6d:58:b1:
58:cf:c1:26:2f:a9:2f:b8:a9:15:a9:56:62:89:b3:
da:e2:2f:2b:20:ed:a9:77:1d:d6:a7:52:f9:b8:09:
9d:0a:66:03:3a:73:2c:de:29:12:08:db:84:e9:cf:
04:c8:6b:97:98:65:16:de:34:47:f7:58:ae:69:10:
97:73:55:99:0b:65:ad:0e:7c:2e:e8:78:7d:0c:0b:
14:0b:d3:2d:1f:b0:5b:eb:41:72:5c:81:06:c6:74:
01:fb:b2:d1:23:2e:76:d8:d9:a3:2d:b1:59:0d:81:
df:0e:f8:14:be:48:ca:64:3f:65:72:a5:c0:4a:c7:
a3:5f:59:ba:93:a3:42:e2:a5:12:8e:e8:ce:11:1c:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:A1:E7:F5:A0:42:CD:8C:FE:E5:38:0A:24:17:59:28:07:BA:4D
X509v3 Authority Key Identifier:
keyid:39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/A4EBAA16FC9E11E9A1B9C140F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.134.112.0/22
Signature Algorithm: sha256WithRSAEncryption
72:d8:97:f3:e7:92:d2:f6:f2:fc:f3:1f:ab:eb:ce:cd:ed:e1:
9f:5b:cd:d1:10:72:14:0f:da:d5:c6:11:2c:69:ed:79:8c:ef:
1e:0d:dc:fe:10:ff:6f:24:a4:84:e9:63:9b:24:6b:59:3b:67:
9f:ad:ee:28:4a:ba:75:26:fe:02:8c:10:54:1b:d8:0d:6d:33:
05:87:f0:8c:d3:96:e4:42:d8:44:e5:ed:7e:0c:a7:9b:49:54:
77:a6:02:37:7d:bc:f2:5b:fc:59:e4:83:c3:e4:49:4a:9d:d4:
04:6d:2f:95:0a:f9:bf:6b:15:fb:d8:d0:69:1c:cd:5e:cd:48:
34:db:ca:ea:c7:51:2c:ba:1d:28:c6:0b:11:4d:66:90:b3:ed:
67:fe:bd:0c:ae:70:e6:76:fe:c9:c5:ed:63:fd:62:ed:37:01:
50:b3:f6:46:6d:da:0d:36:23:56:5a:aa:4d:6b:a0:f2:6f:ba:
6f:23:cc:34:fe:4a:91:81:31:8a:7d:b0:fb:33:87:88:67:4e:
5f:fd:a9:5d:c6:11:26:4e:d1:06:d7:3f:b1:f4:2f:ee:82:94:
aa:1e:34:e9:a1:ac:c1:06:6a:6e:a2:ab:92:78:40:ee:92:d9:
33:2f:35:d5:ec:f2:1a:c6:4f:6e:45:a6:10:94:b9:4e:3d:7f:
1c:d1:30:c0
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MDE2M0FGMTEwLwYDVQQFEygzOUQwMzBBRTBBRkFDNjkxMkIwQjEzM0ZGN0EzNDJG
Nzg0RDBFQThDMB4XDTE5MTEwMTExNTYyN1oXDTI5MTEwMTExNTYyN1owGDEWMBQG
A1UEAxMNNWRiYzFkNmYtZTBiZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALNpK5qawTmLARVgogUKC4qbp/AfORYoypxS5EL1tpwo3Djbx5OXYD0cOWvr
3enJtM6E7O9OD1KogQZ8NZptQUYckubd+31SkXBERq+vxHUzwGPAwxIi/9uMBPe5
aQH+wiZPniJZ3aOxGqoG+/t5vz6QzyERbVixWM/BJi+pL7ipFalWYomz2uIvKyDt
qXcd1qdS+bgJnQpmAzpzLN4pEgjbhOnPBMhrl5hlFt40R/dYrmkQl3NVmQtlrQ58
Luh4fQwLFAvTLR+wW+tBclyBBsZ0Afuy0SMudtjZoy2xWQ2B3w74FL5IymQ/ZXKl
wErHo19ZupOjQuKlEo7ozhEc9TUCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBT1/aHn
9aBCzYz+5TgKJBdZKAe6TTAfBgNVHSMEGDAWgBQ50DCuCvrGkSsLEz/3o0L3hNDq
jDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhBRUEyMjgvT2RBd3Jn
cjZ4cEVyQ3hNXzk2TkM5NFRRNm93LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvT2RBd3JncjZ4cEVyQ3hNXzk2TkM5NFRRNm93LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhB
RUEyMjgvQTRFQkFBMTZGQzlFMTFFOUExQjlDMTQwRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZoZwMA0GCSqGSIb3DQEBCwUAA4IBAQBy
2Jfz55LS9vL88x+r687N7eGfW83REHIUD9rVxhEsae15jO8eDdz+EP9vJKSE6WOb
JGtZO2efre4oSrp1Jv4CjBBUG9gNbTMFh/CM05bkQthE5e1+DKebSVR3pgI3fbzy
W/xZ5IPD5ElKndQEbS+VCvm/axX72NBpHM1ezUg028rqx1Esuh0oxgsRTWaQs+1n
/r0MrnDmdv7Jxe1j/WLtNwFQs/ZGbdoNNiNWWqpNa6Dyb7pvI8w0/kqRgTGKfbD7
M4eIZ05f/aldxhEmTtEG1z+x9C/ugpSqHjTpoazBBmpuoquSeEDuktkzLzXV7PIa
xk9uRaYQlLlOPX8c0TDA
-----END CERTIFICATE-----
Generated at Sat Sep 28 03:42:47 2024 by rpki-client on console-ams.rpki-client.org