Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/FE48D08AFC9D11E9BD0D4B40F8AEA228.roa
File: FE48D08AFC9D11E9BD0D4B40F8AEA228.roa (raw, json)
Hash identifier: bklBiFJiibIM4Ahr4MuYEGegKTjEFLUjUyhhSPhmCAA=
Subject key identifier: A0:05:4F:1B:29:52:93:98:B4:87:B1:BB:88:74:51:A9:52:54:E0:FA
Certificate issuer: /CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Certificate serial: 04
Authority key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/FE48D08AFC9D11E9BD0D4B40F8AEA228.roa
Signing time: Fri 01 Nov 2019 11:51:52 +0000
ROA not before: Fri 01 Nov 2019 11:51:47 +0000
ROA not after: Thu 01 Nov 2029 11:51:47 +0000
asID: 37682
IP address blocks: 102.68.108.0/24 maxlen: 24
102.68.109.0/24 maxlen: 24
102.68.110.0/24 maxlen: 24
102.68.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Validity
Not Before: Nov 1 11:51:47 2019 GMT
Not After : Nov 1 11:51:47 2029 GMT
Subject: CN=5dbc1c58-6fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:88:48:a3:cb:92:4b:66:89:df:c5:b8:fd:
ee:75:98:94:8e:2c:a3:fb:87:a8:7a:67:03:e6:1a:
c6:4b:81:25:c2:13:43:9f:ff:6d:4c:4a:eb:1d:02:
2a:27:00:4c:96:5d:ea:db:01:0c:0a:9a:f3:dd:9d:
1e:9a:cf:34:e6:1f:b7:d6:2c:4d:68:09:0d:67:00:
33:5b:1c:7f:73:a2:b1:22:00:ea:91:c5:55:fc:2a:
07:85:cd:60:85:27:2b:bb:f6:a3:7a:2d:4c:0d:ef:
40:ff:d4:92:66:64:38:4f:c4:14:0f:8f:c4:d7:e4:
32:df:36:0d:d9:e0:89:e7:3a:e4:8b:7d:b5:07:1b:
3e:f5:60:e2:29:46:15:7a:6c:ed:97:f4:cb:1d:8a:
fa:14:37:7f:e1:e8:a1:e2:40:0b:cb:ce:cd:dd:6b:
cd:5c:bd:a5:d8:60:c0:80:67:5f:f9:84:20:83:94:
75:01:44:40:a6:00:4e:f0:cb:48:f9:8d:68:a0:b7:
7c:8c:79:a7:07:45:7e:4c:cf:3d:cc:a5:61:7b:5e:
6a:a0:cc:a1:51:48:ec:0c:9f:03:c4:2b:88:20:44:
88:14:e6:93:c0:d8:0e:bf:56:6b:4a:d1:8b:20:d9:
61:87:c3:28:8b:3e:5f:c0:2b:94:65:7c:b2:a8:06:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:05:4F:1B:29:52:93:98:B4:87:B1:BB:88:74:51:A9:52:54:E0:FA
X509v3 Authority Key Identifier:
keyid:39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/FE48D08AFC9D11E9BD0D4B40F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.68.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:8f:5a:eb:72:f3:ff:ba:ed:19:f2:bf:7d:34:f3:09:48:6c:
d4:75:86:bf:79:1b:23:23:7c:df:57:89:03:18:80:25:08:27:
5d:a5:d5:10:41:61:f9:af:56:22:cc:a6:32:ae:9b:b3:25:c8:
c1:b7:77:2d:e7:d3:f9:27:27:88:b4:6f:80:e1:cf:7b:b5:1c:
69:c7:d6:ca:4c:f2:8b:ff:3f:b6:84:d9:7a:91:48:d2:4a:be:
08:b6:21:54:e1:63:82:de:ab:2e:b0:b0:86:5d:31:fa:6a:a6:
20:c7:4d:e9:af:76:a1:02:cc:61:34:a3:91:54:bf:fa:76:0a:
04:ce:10:19:49:7e:02:1d:d7:60:1f:7a:72:db:62:5a:52:90:
db:15:8f:df:87:f5:f9:3e:a3:05:25:c5:39:8b:89:0b:3e:0c:
49:ec:fb:21:9c:25:94:a6:96:1d:a5:57:d2:f8:cc:f9:35:bb:
b8:a6:03:12:96:25:3c:18:0e:84:d1:f5:22:60:e3:0c:e5:5a:
d6:67:0b:b0:c0:7e:09:20:04:41:7e:69:c6:f1:db:35:e3:ad:
14:b2:54:bc:53:6e:7a:0f:f2:16:41:65:7d:c4:72:e9:3f:e4:
91:d2:fd:c1:33:20:df:fa:e4:4c:24:47:f6:0a:a0:38:4d:05:
96:71:d4:47
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MDE2M0FGMTEwLwYDVQQFEygzOUQwMzBBRTBBRkFDNjkxMkIwQjEzM0ZGN0EzNDJG
Nzg0RDBFQThDMB4XDTE5MTEwMTExNTE0N1oXDTI5MTEwMTExNTE0N1owGDEWMBQG
A1UEAxMNNWRiYzFjNTgtNmZhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN63iEijy5JLZonfxbj97nWYlI4so/uHqHpnA+YaxkuBJcITQ5//bUxK6x0C
KicATJZd6tsBDAqa892dHprPNOYft9YsTWgJDWcAM1scf3OisSIA6pHFVfwqB4XN
YIUnK7v2o3otTA3vQP/UkmZkOE/EFA+PxNfkMt82Ddngiec65It9tQcbPvVg4ilG
FXps7Zf0yx2K+hQ3f+HooeJAC8vOzd1rzVy9pdhgwIBnX/mEIIOUdQFEQKYATvDL
SPmNaKC3fIx5pwdFfkzPPcylYXteaqDMoVFI7AyfA8QriCBEiBTmk8DYDr9Wa0rR
iyDZYYfDKIs+X8ArlGV8sqgGUd8CAwEAAaOCAm4wggJqMB0GA1UdDgQWBBSgBU8b
KVKTmLSHsbuIdFGpUlTg+jAfBgNVHSMEGDAWgBQ50DCuCvrGkSsLEz/3o0L3hNDq
jDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhBRUEyMjgvT2RBd3Jn
cjZ4cEVyQ3hNXzk2TkM5NFRRNm93LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvT2RBd3JncjZ4cEVyQ3hNXzk2TkM5NFRRNm93LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhB
RUEyMjgvRkU0OEQwOEFGQzlEMTFFOUJEMEQ0QjQwRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZkRsMA0GCSqGSIb3DQEBCwUAA4IBAQAv
j1rrcvP/uu0Z8r99NPMJSGzUdYa/eRsjI3zfV4kDGIAlCCddpdUQQWH5r1YizKYy
rpuzJcjBt3ct59P5JyeItG+A4c97tRxpx9bKTPKL/z+2hNl6kUjSSr4ItiFU4WOC
3qsusLCGXTH6aqYgx03pr3ahAsxhNKORVL/6dgoEzhAZSX4CHddgH3py22JaUpDb
FY/fh/X5PqMFJcU5i4kLPgxJ7PshnCWUppYdpVfS+Mz5Nbu4pgMSliU8GA6E0fUi
YOMM5VrWZwuwwH4JIARBfmnG8ds1460UslS8U256D/IWQWV9xHLpP+SR0v3BMyDf
+uRMJEf2CqA4TQWWcdRH
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:16 2024 by rpki-client on console-fra.rpki-client.org