Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/20F7E19E955B11E88F26617FF8AEA228.roa
File: 20F7E19E955B11E88F26617FF8AEA228.roa (raw, json)
Hash identifier: sfkjh7zAV15jSl9QHHQklWNOaiXkSZouLreAi3kdb8o=
Subject key identifier: 16:C2:DF:8B:46:47:76:03:4F:35:08:9D:75:3F:E7:1E:F8:28:93:BA
Certificate issuer: /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial: 02
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/20F7E19E955B11E88F26617FF8AEA228.roa
Signing time: Wed 01 Aug 2018 07:18:47 +0000
ROA not before: Wed 01 Aug 2018 07:18:37 +0000
ROA not after: Wed 30 Aug 2028 07:18:37 +0000
asID: 36924
IP address blocks: 102.141.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Validity
Not Before: Aug 1 07:18:37 2018 GMT
Not After : Aug 30 07:18:37 2028 GMT
Subject: CN=5b615ed6-3e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:ce:21:e9:eb:74:fc:6c:2b:ff:39:8d:bc:
a0:72:e6:b3:07:04:4e:cf:d4:32:48:37:d8:c7:9d:
f7:94:67:a6:7e:3e:87:d7:72:65:f4:22:04:1a:2b:
f8:d6:78:e1:ee:a7:68:c4:20:8e:04:8d:16:d9:89:
63:6f:a0:df:52:68:ee:c0:01:2b:0a:aa:9e:11:bb:
fc:22:56:c5:2c:fa:5c:6d:2e:8e:35:ac:76:66:4a:
f7:3e:a8:b9:d7:92:d1:0c:59:34:f1:71:55:07:08:
3a:ea:56:22:1f:ed:a6:b0:78:c8:77:e7:be:fa:49:
18:55:12:9a:a0:9b:12:c8:48:f6:aa:98:19:d1:91:
a3:cc:e9:99:fc:73:01:62:9e:38:10:22:fb:84:d8:
d6:fb:05:3b:46:d4:be:67:64:ad:cc:93:e3:c1:d6:
73:5f:71:36:5a:8a:53:3d:c4:e6:5a:d9:a5:ba:34:
29:8c:45:e2:f6:6d:bf:e5:92:b9:bd:11:af:f2:1e:
4e:fb:2b:8b:69:5d:2a:e8:0e:36:0a:1b:57:27:15:
cc:52:33:aa:15:ed:e9:c6:bc:6e:45:eb:d4:26:2a:
62:44:d1:0c:30:cf:90:0e:75:43:82:27:da:68:7b:
87:f7:a8:a0:be:61:21:97:86:c4:c9:19:aa:82:77:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:DF:8B:46:47:76:03:4F:35:08:9D:75:3F:E7:1E:F8:28:93:BA
X509v3 Authority Key Identifier:
keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/20F7E19E955B11E88F26617FF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.141.0.0/18
Signature Algorithm: sha256WithRSAEncryption
48:6d:e9:b9:80:0d:07:30:a1:ff:dc:7e:48:0c:45:7e:c4:f7:
56:98:0a:8a:02:ea:c4:dc:07:c4:5e:0e:33:6d:ed:f3:f0:6c:
40:00:58:eb:7e:1e:5d:91:96:05:0b:94:a2:7c:6b:b4:64:12:
cb:a9:fc:a3:14:55:28:89:15:37:86:1b:6c:3b:eb:e9:44:fb:
ba:10:4d:7b:02:e9:00:65:54:6f:69:3d:6e:79:b6:d9:01:49:
f1:b2:71:d1:e0:61:d3:18:18:0b:21:f0:c0:80:55:5a:11:bf:
92:54:f0:5a:d5:ed:77:70:4d:ca:b2:f4:09:e8:54:73:f8:ce:
bd:40:db:73:e1:24:fa:4f:ac:0b:39:a9:a1:67:1b:b2:ea:b7:
e0:e2:dd:95:1d:48:46:11:aa:c1:5e:42:5f:63:37:57:3b:d2:
45:33:7d:2a:7b:5f:16:10:90:94:21:49:a1:7a:8d:a6:df:91:
f8:24:91:65:05:61:91:63:06:c3:4e:c3:44:0b:44:6d:98:de:
54:5e:08:50:91:a0:6d:3c:f1:d8:37:47:b8:12:c8:ed:31:aa:
39:8b:98:ce:99:c6:6f:a5:89:eb:21:77:e1:0b:39:f0:27:8a:
39:90:eb:2f:9f:3e:28:1a:37:77:9a:8c:0a:5d:e7:5c:28:74:
5f:31:ce:f2
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
NTFGOEFGMTEwLwYDVQQFEyg0REVGQjQxRDNCNDJDQ0ZENzNCMUEwNDQ3N0MwRTgy
NUM3NEQ2QzZFMB4XDTE4MDgwMTA3MTgzN1oXDTI4MDgzMDA3MTgzN1owGDEWMBQG
A1UEAxMNNWI2MTVlZDYtM2UyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5JziHp63T8bCv/OY28oHLmswcETs/UMkg32Med95Rnpn4+h9dyZfQiBBor
+NZ44e6naMQgjgSNFtmJY2+g31Jo7sABKwqqnhG7/CJWxSz6XG0ujjWsdmZK9z6o
udeS0QxZNPFxVQcIOupWIh/tprB4yHfnvvpJGFUSmqCbEshI9qqYGdGRo8zpmfxz
AWKeOBAi+4TY1vsFO0bUvmdkrcyT48HWc19xNlqKUz3E5lrZpbo0KYxF4vZtv+WS
ub0Rr/IeTvsri2ldKugONgobVycVzFIzqhXt6ca8bkXr1CYqYkTRDDDPkA51Q4In
2mh7h/eooL5hIZeGxMkZqoJ3KBkCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBQWwt+L
Rkd2A081CJ11P+ce+CiTujAfBgNVHSMEGDAWgBRN77QdO0LM/XOxoER3wOglx01s
bjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjUxRjgvQjRCQTdFMkU5NTVBMTFFOEI3QjIxRDdGRjhBRUEyMjgvVGUtMEhU
dEN6UDF6c2FCRWQ4RG9KY2ROYkc0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVGUtMEhUdEN6UDF6c2FCRWQ4RG9KY2ROYkc0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjUxRjgvQjRCQTdFMkU5NTVBMTFFOEI3QjIxRDdGRjhB
RUEyMjgvMjBGN0UxOUU5NTVCMTFFODhGMjY2MTdGRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGZo0AMA0GCSqGSIb3DQEBCwUAA4IBAQBI
bem5gA0HMKH/3H5IDEV+xPdWmAqKAurE3AfEXg4zbe3z8GxAAFjrfh5dkZYFC5Si
fGu0ZBLLqfyjFFUoiRU3hhtsO+vpRPu6EE17AukAZVRvaT1uebbZAUnxsnHR4GHT
GBgLIfDAgFVaEb+SVPBa1e13cE3KsvQJ6FRz+M69QNtz4ST6T6wLOamhZxuy6rfg
4t2VHUhGEarBXkJfYzdXO9JFM30qe18WEJCUIUmheo2m35H4JJFlBWGRYwbDTsNE
C0RtmN5UXghQkaBtPPHYN0e4EsjtMao5i5jOmcZvpYnrIXfhCznwJ4o5kOsvnz4o
Gjd3mowKXedcKHRfMc7y
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:32 2024 by rpki-client on console-ams.rpki-client.org