Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/F2E8745215FF11EC9C41353BD8A014CE.roa
File: F2E8745215FF11EC9C41353BD8A014CE.roa (raw, json)
Hash identifier: DALkcQgZJxSOm1jJNi52fbxFVjnJTlBys9WoNl+MGWs=
Subject key identifier: DE:50:84:0A:66:9F:75:2C:A3:C4:8B:73:B5:22:FC:5E:ED:77:8C:BB
Certificate issuer: /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial: 0A
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/F2E8745215FF11EC9C41353BD8A014CE.roa
Signing time: Wed 15 Sep 2021 08:35:58 +0000
ROA not before: Wed 15 Sep 2021 08:35:53 +0000
ROA not after: Wed 16 Sep 2026 08:35:53 +0000
asID: 11845
IP address blocks: 102.219.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Validity
Not Before: Sep 15 08:35:53 2021 GMT
Not After : Sep 16 08:35:53 2026 GMT
Subject: CN=6141b06e-1d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:0a:49:26:d4:92:15:d0:ec:a8:2f:dd:b7:
67:c0:9f:4f:58:1e:db:2b:75:0f:51:46:3b:87:d1:
e2:52:dd:9e:cc:8a:d9:e8:8f:45:3b:fb:7a:75:01:
dd:e9:39:79:fc:d5:7e:99:47:51:c4:77:7a:62:cd:
a4:d4:64:2a:08:69:cc:9c:59:91:b3:70:31:ef:a7:
dd:1c:b2:a8:74:c0:74:1f:0d:cd:24:d6:a5:3c:37:
a7:67:f1:a8:04:ae:e6:41:e6:c0:2a:f0:61:30:13:
53:33:33:c2:87:97:0f:4b:76:4e:a4:55:f0:bb:cc:
14:93:7a:aa:63:62:9f:92:de:8b:af:72:6b:10:61:
58:62:fe:a8:79:87:68:6e:3a:25:bd:19:62:c2:b4:
b4:29:4a:d3:71:38:38:52:75:c0:f8:60:3d:06:ce:
ce:15:f7:e3:ec:31:9e:a1:38:03:91:0e:f5:5f:82:
5c:3a:d2:6a:10:48:d1:a5:de:fb:d5:63:20:ca:28:
fb:c5:6f:93:06:52:a2:72:39:6b:c8:0f:74:38:21:
77:05:d0:38:66:fa:e2:6b:61:79:08:ea:36:ee:19:
fe:1e:ec:f6:70:3d:8a:f9:fc:04:08:64:34:8d:a6:
d7:34:bf:64:f3:ad:5e:a4:e3:ed:61:c6:75:d9:81:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:50:84:0A:66:9F:75:2C:A3:C4:8B:73:B5:22:FC:5E:ED:77:8C:BB
X509v3 Authority Key Identifier:
keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/F2E8745215FF11EC9C41353BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a5:d6:0a:03:ee:9a:6c:34:9f:83:38:92:80:25:e9:73:02:
cc:7b:9d:92:e3:0f:08:0f:9c:d1:9e:bd:42:c6:49:23:27:76:
f5:cf:1d:f5:05:a1:60:2f:eb:0a:fc:e0:95:1f:16:cf:b7:95:
56:4e:f0:ee:46:62:ab:4e:c3:ff:7e:b7:54:f4:5d:a5:66:35:
c6:2a:4a:8b:e0:3c:9b:87:a3:e9:9b:9f:55:5d:53:ff:dc:20:
d2:cc:de:47:79:7c:4a:51:57:d8:ff:30:78:b0:5c:a7:2c:cc:
87:07:34:b3:a7:3c:17:20:c9:f9:46:07:46:d2:9e:09:ab:b4:
27:27:d5:9f:2a:3a:3d:a9:47:a6:38:f3:dc:b9:97:be:f0:a0:
0a:a1:07:60:49:cb:e7:5a:d2:70:3c:b8:d6:11:44:80:c3:fa:
ef:27:ca:3b:3d:83:86:eb:e2:3e:7e:6a:1a:fb:e8:e0:4f:a8:
1d:05:dc:c3:bd:21:b0:ae:d3:e9:1e:97:e6:12:0a:29:a5:79:
81:07:06:ae:ba:e0:29:cf:b4:89:f0:41:59:6c:8b:50:e6:0a:
2c:ee:cb:ae:74:3e:8c:af:49:82:62:ea:31:d6:3f:41:8f:2f:
a1:95:b2:9b:b4:28:d4:9a:31:26:60:0a:8b:a9:77:29:f5:2a:
bb:9c:7e:5b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZG
NjFBNUFGMTEwLwYDVQQFEyhFMkVERjQ0NkVDMjUyRTEyRkY4NThFRUJFMzE4QTZE
OUFFMDQzMUIwMB4XDTIxMDkxNTA4MzU1M1oXDTI2MDkxNjA4MzU1M1owGDEWMBQG
A1UEAwwNNjE0MWIwNmUtMWQ2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtZCkkm1JIV0OyoL923Z8CfT1ge2yt1D1FGO4fR4lLdnsyK2eiPRTv7enUB
3ek5efzVfplHUcR3emLNpNRkKghpzJxZkbNwMe+n3RyyqHTAdB8NzSTWpTw3p2fx
qASu5kHmwCrwYTATUzMzwoeXD0t2TqRV8LvMFJN6qmNin5Lei69yaxBhWGL+qHmH
aG46Jb0ZYsK0tClK03E4OFJ1wPhgPQbOzhX34+wxnqE4A5EO9V+CXDrSahBI0aXe
+9VjIMoo+8VvkwZSonI5a8gPdDghdwXQOGb64mtheQjqNu4Z/h7s9nA9ivn8BAhk
NI2m1zS/ZPOtXqTj7WHGddmB9tsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTeUIQK
Zp91LKPEi3O1Ivxe7XeMuzAfBgNVHSMEGDAWgBTi7fRG7CUuEv+FjuvjGKbZrgQx
sDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjYxQTUvMDZGN0Y2NkMwRkM5MTFFQzg1NDVFOTczRDhBMDE0Q0UvNHUzMFJ1
d2xMaExfaFk3cjR4aW0yYTRFTWJBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNHUzMFJ1d2xMaExfaFk3cjR4aW0yYTRFTWJBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjYxQTUvMDZGN0Y2NkMwRkM5MTFFQzg1NDVFOTczRDhB
MDE0Q0UvRjJFODc0NTIxNUZGMTFFQzlDNDEzNTNCRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbbXTANBgkqhkiG9w0BAQsF
AAOCAQEAoKXWCgPummw0n4M4koAl6XMCzHudkuMPCA+c0Z69QsZJIyd29c8d9QWh
YC/rCvzglR8Wz7eVVk7w7kZiq07D/363VPRdpWY1xipKi+A8m4ej6ZufVV1T/9wg
0szeR3l8SlFX2P8weLBcpyzMhwc0s6c8FyDJ+UYHRtKeCau0JyfVnyo6PalHpjjz
3LmXvvCgCqEHYEnL51rScDy41hFEgMP67yfKOz2DhuviPn5qGvvo4E+oHQXcw70h
sK7T6R6X5hIKKaV5gQcGrrrgKc+0ifBBWWyLUOYKLO7LrnQ+jK9JgmLqMdY/QY8v
oZWym7Qo1JoxJmAKi6l3KfUqu5x+Ww==
-----END CERTIFICATE-----
Generated at Sun May 5 02:12:59 2024 by rpki-client on console-ams.rpki-client.org