Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/A64FEB6895B111EFBC4AA087762E951A.roa
File: A64FEB6895B111EFBC4AA087762E951A.roa (raw, json)
Hash identifier: OWaQRm/LTXnDp75dm8kg/sL6I9dVQ8W3gQtvUM418zE=
Subject key identifier: 99:36:3F:91:89:26:34:C2:29:79:A2:C0:B6:E9:25:FA:F6:E2:45:DE
Certificate issuer: /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial: 3E
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/A64FEB6895B111EFBC4AA087762E951A.roa
Signing time: Tue 29 Oct 2024 04:52:50 +0000
ROA not before: Tue 29 Oct 2024 04:52:46 +0000
ROA not after: Sun 29 Oct 2034 04:52:46 +0000
asID: 37680
IP address blocks: 102.132.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Validity
Not Before: Oct 29 04:52:46 2024 GMT
Not After : Oct 29 04:52:46 2034 GMT
Subject: CN=67206a22-f178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:5f:20:01:3e:2d:89:ce:4e:5f:19:e6:b9:
54:6f:ac:15:e4:72:33:5a:16:bf:40:b8:55:bd:ea:
c0:79:75:66:1e:f3:db:c9:d2:57:04:58:a5:e5:9d:
a9:90:ea:ac:c5:0c:7e:86:7b:91:2f:bf:a5:79:2c:
0f:6f:94:4e:e3:60:26:7b:da:bf:89:df:60:fb:c1:
15:2b:43:0e:d6:76:e6:ad:f2:fb:df:96:7a:0b:27:
59:c4:d1:be:99:ad:59:59:30:a2:41:3e:58:d1:c3:
89:85:57:6f:e9:34:b7:55:97:ef:d3:9f:2c:94:c7:
27:bc:90:2c:ff:26:66:0d:af:f5:ba:b3:04:ff:d0:
f3:f5:15:18:87:8d:18:f9:c0:3e:b4:36:9d:e7:0e:
cf:e4:80:0b:3e:4f:b5:6d:0c:38:75:26:2d:a5:4f:
c1:41:e7:7f:ef:70:e1:d9:1b:14:9e:3c:a0:81:f7:
92:3f:a7:be:b3:7b:71:30:67:24:d4:58:0b:ea:cd:
e0:f5:33:53:11:02:b9:ef:4e:c9:ff:f0:d4:4a:a5:
d4:39:32:e4:1a:52:65:6a:f3:2b:21:df:ec:70:05:
cf:09:56:00:88:2f:72:ea:e0:71:4f:58:72:cd:6c:
c9:65:c9:39:f7:71:f4:6c:ea:2e:b7:41:de:cc:29:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:3F:91:89:26:34:C2:29:79:A2:C0:B6:E9:25:FA:F6:E2:45:DE
X509v3 Authority Key Identifier:
keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/A64FEB6895B111EFBC4AA087762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.132.128.0/20
Signature Algorithm: sha256WithRSAEncryption
55:bb:0f:46:68:95:20:e1:8c:6d:eb:f9:5b:89:ed:aa:1a:44:
6b:18:8f:2c:0a:25:ba:14:4f:f5:dd:29:62:72:66:1b:f4:08:
5f:59:5a:12:dd:44:06:70:6d:cf:b5:94:ac:76:4d:ec:29:b1:
d3:c3:94:65:f2:e1:89:5f:07:a3:69:6c:8f:ba:62:a7:d8:41:
61:a1:f2:92:ee:50:aa:fc:a5:60:55:62:cb:62:2e:99:87:73:
06:1e:eb:da:5f:0b:9f:4d:6f:01:28:a4:57:f6:38:ed:9c:09:
44:1e:44:13:f1:60:6b:f8:b8:fc:96:53:94:4f:17:02:46:21:
eb:ca:e9:5b:12:43:66:43:79:c2:7c:7d:1f:b8:e1:3b:a2:b6:
ff:55:5e:74:2b:0a:31:dd:36:1a:99:67:14:85:33:6f:a4:0f:
d7:b8:a4:73:2b:35:ad:c2:48:0c:79:c7:5c:ac:c0:5a:fa:c3:
3c:7b:73:b7:5a:ee:e9:f1:cc:00:a1:17:96:01:35:b8:23:8d:
72:ef:6f:e9:bc:0d:af:32:9d:67:c0:2c:ae:6e:84:28:a2:d4:
5b:a4:c4:e5:87:61:46:44:51:76:b9:aa:70:08:de:dc:aa:06:
b8:fa:45:0c:b0:c6:8f:01:ad:de:3b:d9:8f:a3:6b:c2:c7:35:
2d:29:a2:3f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBPjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
QzZDOEFGMTEwLwYDVQQFEygyNTExQkFENDA3OEQ0NjcyQUNGNDMyNDI5OTIxOENF
NDg1NUQwMzlEMB4XDTI0MTAyOTA0NTI0NloXDTM0MTAyOTA0NTI0NlowGDEWMBQG
A1UEAxMNNjcyMDZhMjItZjE3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJeNXyABPi2Jzk5fGea5VG+sFeRyM1oWv0C4Vb3qwHl1Zh7z28nSVwRYpeWd
qZDqrMUMfoZ7kS+/pXksD2+UTuNgJnvav4nfYPvBFStDDtZ25q3y+9+WegsnWcTR
vpmtWVkwokE+WNHDiYVXb+k0t1WX79OfLJTHJ7yQLP8mZg2v9bqzBP/Q8/UVGIeN
GPnAPrQ2necOz+SACz5PtW0MOHUmLaVPwUHnf+9w4dkbFJ48oIH3kj+nvrN7cTBn
JNRYC+rN4PUzUxECue9Oyf/w1Eql1Dky5BpSZWrzKyHf7HAFzwlWAIgvcurgcU9Y
cs1syWXJOfdx9GzqLrdB3swpSf0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSZNj+R
iSY0wil5osC26SX69uJF3jAfBgNVHSMEGDAWgBQlEbrUB41Gcqz0MkKZIYzkhV0D
nTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkM2QzgvRDM3RDJEQTA3MEUzMTFFRjg0NjEwMTQ3NzYyRTk1MUEvSlJHNjFB
ZU5SbktzOURKQ21TR001SVZkQTUwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSlJHNjFBZU5SbktzOURKQ21TR001SVZkQTUwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM2QzgvRDM3RDJEQTA3MEUzMTFFRjg0NjEwMTQ3NzYy
RTk1MUEvQTY0RkVCNjg5NUIxMTFFRkJDNEFBMDg3NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGaEgDANBgkqhkiG9w0BAQsF
AAOCAQEAVbsPRmiVIOGMbev5W4ntqhpEaxiPLAoluhRP9d0pYnJmG/QIX1laEt1E
BnBtz7WUrHZN7Cmx08OUZfLhiV8Ho2lsj7pip9hBYaHyku5QqvylYFViy2IumYdz
Bh7r2l8Ln01vASikV/Y47ZwJRB5EE/Fga/i4/JZTlE8XAkYh68rpWxJDZkN5wnx9
H7jhO6K2/1VedCsKMd02GplnFIUzb6QP17ikcys1rcJIDHnHXKzAWvrDPHtzt1ru
6fHMAKEXlgE1uCONcu9v6bwNrzKdZ8Asrm6EKKLUW6TE5YdhRkRRdrmqcAje3KoG
uPpFDLDGjwGt3jvZj6Nrwsc1LSmiPw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:40 2024 by rpki-client on console-fra.rpki-client.org