Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/8593E5E6301411EDA995117EF1222468.roa
File: 8593E5E6301411EDA995117EF1222468.roa (raw, json)
Hash identifier: GKoKftTIvxGfYixZSmwiKcSVVIX7+F2sJvw6JysYI8o=
Subject key identifier: 6F:86:26:BD:18:03:FF:1D:CE:B8:F6:0E:EA:E8:AC:30:A5:22:BA:3B
Certificate issuer: /CN=F36FB8C3AF/serialNumber=965D79974E405D90C757F9A25C4305BEADEEA06D
Certificate serial: 02
Authority key identifier: 96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/8593E5E6301411EDA995117EF1222468.roa
Signing time: Fri 09 Sep 2022 07:53:42 +0000
ROA not before: Fri 09 Sep 2022 07:53:38 +0000
ROA not after: Fri 12 Sep 2025 07:53:38 +0000
asID: 329052
IP address blocks: 102.215.176.0/22 maxlen: 24
2c0f:1080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB8C3AF/serialNumber=965D79974E405D90C757F9A25C4305BEADEEA06D
Validity
Not Before: Sep 9 07:53:38 2022 GMT
Not After : Sep 12 07:53:38 2025 GMT
Subject: CN=631af106-55c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:41:09:a9:7b:16:d6:ce:90:9f:0d:f1:21:
b8:a9:81:99:32:b5:ed:25:e8:20:55:38:94:e3:cd:
1b:4f:eb:83:0a:f2:33:d0:4d:20:88:70:58:6c:3e:
70:3d:b5:2a:04:1d:66:31:87:22:aa:4e:40:37:d5:
f7:ef:c0:82:f9:45:63:0f:d3:1e:2f:a9:df:b9:4e:
36:8c:92:61:e0:ca:60:bc:16:7d:3a:49:47:74:22:
ea:20:1c:c3:d7:e7:d3:d0:3f:b8:d4:75:e5:c4:f4:
89:6e:2d:ac:87:fd:83:a0:59:40:75:76:4b:77:66:
ab:4c:9c:cf:59:01:39:c3:14:01:fe:25:50:7d:99:
94:d8:3e:b8:cc:e0:d1:d3:5c:1d:f3:6f:3a:51:45:
03:68:fe:38:76:10:aa:65:00:b1:fa:48:66:f9:8b:
5b:fe:5f:e2:c0:ed:e4:2d:cf:13:69:ed:b6:a5:f3:
c3:ce:5f:33:0d:c7:15:7e:94:3c:7a:b4:aa:01:65:
c3:f3:95:fc:35:b2:9b:3e:29:32:51:17:0d:49:d6:
5a:6f:d6:fd:74:81:fc:ac:58:4e:7a:32:da:e3:6e:
8a:ed:62:7e:59:3d:d3:67:c9:25:86:30:c2:ad:d8:
60:c2:16:92:14:ad:5a:3f:4e:a2:ca:03:e9:b1:a2:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:86:26:BD:18:03:FF:1D:CE:B8:F6:0E:EA:E8:AC:30:A5:22:BA:3B
X509v3 Authority Key Identifier:
keyid:96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/8593E5E6301411EDA995117EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.176.0/22
IPv6:
2c0f:1080::/32
Signature Algorithm: sha256WithRSAEncryption
35:51:cb:8e:f9:9f:a5:43:e0:da:9c:7c:50:e3:59:fd:df:ad:
32:02:d3:3f:dd:5d:36:08:da:d1:7e:ba:9c:1f:39:fe:41:48:
7d:74:ab:4f:b8:ca:44:86:16:df:8d:53:dd:01:ef:a9:76:8e:
da:33:eb:1c:40:85:55:f8:fa:9c:07:bc:32:b8:3f:4c:28:13:
e5:27:69:3e:a2:1c:92:9e:1f:1d:01:fb:62:bb:64:cb:25:18:
b9:eb:94:25:2b:93:7f:5c:81:45:d6:06:7c:b0:92:cc:95:0c:
8e:20:fc:7d:0a:6f:fa:ce:21:97:82:2a:8b:5e:dd:18:6c:d5:
73:e6:a0:d7:f6:f2:84:62:e3:aa:79:57:ed:69:21:4e:11:b0:
a1:3e:84:11:ba:28:9a:38:2d:a3:ce:3a:11:e3:1d:29:57:40:
7f:5f:7d:be:0e:87:28:04:2f:05:a6:3c:8a:4b:f1:f0:a6:e1:
bd:b5:d4:fc:8b:87:a6:98:90:2c:47:2a:5d:57:e4:6c:69:ff:
fb:bc:7f:35:1e:79:a1:5e:a3:a1:e3:26:27:05:40:16:4e:17:
41:8a:b9:91:eb:9e:8b:57:9c:62:3d:ff:6c:4a:5c:5f:d4:b8:
d6:71:6a:a1:d5:b0:c1:10:8b:e9:e7:6e:e7:3d:fa:f5:10:67:
43:4a:17:ed
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZG
QjhDM0FGMTEwLwYDVQQFEyg5NjVENzk5NzRFNDA1RDkwQzc1N0Y5QTI1QzQzMDVC
RUFERUVBMDZEMB4XDTIyMDkwOTA3NTMzOFoXDTI1MDkxMjA3NTMzOFowGDEWMBQG
A1UEAwwNNjMxYWYxMDYtNTVjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMLzQQmpexbWzpCfDfEhuKmBmTK17SXoIFU4lOPNG0/rgwryM9BNIIhwWGw+
cD21KgQdZjGHIqpOQDfV9+/AgvlFYw/THi+p37lONoySYeDKYLwWfTpJR3Qi6iAc
w9fn09A/uNR15cT0iW4trIf9g6BZQHV2S3dmq0ycz1kBOcMUAf4lUH2ZlNg+uMzg
0dNcHfNvOlFFA2j+OHYQqmUAsfpIZvmLW/5f4sDt5C3PE2nttqXzw85fMw3HFX6U
PHq0qgFlw/OV/DWymz4pMlEXDUnWWm/W/XSB/KxYTnoy2uNuiu1iflk902fJJYYw
wq3YYMIWkhStWj9OosoD6bGijLkCAwEAAaOCArQwggKwMB0GA1UdDgQWBBRvhia9
GAP/Hc649g7q6KwwpSK6OzAfBgNVHSMEGDAWgBSWXXmXTkBdkMdX+aJcQwW+re6g
bTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkI4QzMvOTgwMUE1RjIzMDEzMTFFRDk2MUUzMkZBRjEyMjI0NjgvbGwxNWww
NUFYWkRIVl9taVhFTUZ2cTN1b0cwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbGwxNWwwNUFYWkRIVl9taVhFTUZ2cTN1b0cwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkI4QzMvOTgwMUE1RjIzMDEzMTFFRDk2MUUzMkZBRjEy
MjI0NjgvODU5M0U1RTYzMDE0MTFFREE5OTUxMTdFRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbXsDANBAIAAjAHAwUALA8Q
gDANBgkqhkiG9w0BAQsFAAOCAQEANVHLjvmfpUPg2px8UONZ/d+tMgLTP91dNgja
0X66nB85/kFIfXSrT7jKRIYW341T3QHvqXaO2jPrHECFVfj6nAe8Mrg/TCgT5Sdp
PqIckp4fHQH7YrtkyyUYueuUJSuTf1yBRdYGfLCSzJUMjiD8fQpv+s4hl4Iqi17d
GGzVc+ag1/byhGLjqnlX7WkhThGwoT6EEboomjgto846EeMdKVdAf199vg6HKAQv
BaY8ikvx8KbhvbXU/IuHppiQLEcqXVfkbGn/+7x/NR55oV6joeMmJwVAFk4XQYq5
keuei1ecYj3/bEpcX9S41nFqodWwwRCL6edu5z369RBnQ0oX7Q==
-----END CERTIFICATE-----
Generated at Sun May 19 02:39:34 2024 by rpki-client on console-fra.rpki-client.org