Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/C3211D4895B111EFBD9DB787762E951A.roa
File: C3211D4895B111EFBD9DB787762E951A.roa (raw, json)
Hash identifier: JnieWPjJElBhKdYvFGoa5sjYRYxRiLNaSNC2wHImHSg=
Subject key identifier: 2F:04:11:79:FD:62:48:93:28:95:79:7A:88:05:09:75:47:D4:50:06
Certificate issuer: /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial: 40
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/C3211D4895B111EFBD9DB787762E951A.roa
Signing time: Tue 29 Oct 2024 04:53:39 +0000
ROA not before: Tue 29 Oct 2024 04:53:35 +0000
ROA not after: Sun 29 Oct 2034 04:53:35 +0000
asID: 37680
IP address blocks: 102.132.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Validity
Not Before: Oct 29 04:53:35 2024 GMT
Not After : Oct 29 04:53:35 2034 GMT
Subject: CN=67206a53-2012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:68:b5:ad:40:13:a2:1b:56:d3:90:e1:9f:
93:3c:94:c1:6b:b4:06:5f:d9:b1:54:8f:20:32:19:
ba:65:77:27:73:03:8c:41:cf:db:28:b9:19:be:67:
0d:98:0b:07:8c:0b:b7:35:1d:a6:98:f1:ed:e3:00:
7f:7e:33:86:70:4d:17:d0:ae:09:28:ed:1e:9d:27:
39:b8:59:80:4a:b3:80:be:db:43:04:42:b2:f8:86:
f5:cf:f4:b5:a2:5b:2e:99:30:83:34:63:74:d5:41:
7a:d0:cb:7a:40:e1:82:ee:1a:ee:c6:06:9f:a1:e8:
4d:84:88:a3:4f:1c:ec:af:b0:c6:65:a8:eb:cd:65:
23:9f:d0:86:21:fe:bf:ed:6d:a3:26:e7:8c:1b:be:
ea:ae:57:be:82:f6:9a:b2:96:61:fd:6e:a9:39:21:
3d:c7:d1:f6:a4:ab:59:b6:45:70:1f:a3:38:27:0d:
d0:9c:e0:07:b5:eb:5a:44:3d:80:00:11:9b:ac:d0:
e6:d4:58:84:1a:ba:c6:84:57:ea:c5:51:8c:92:0d:
ba:06:b4:1f:cf:96:0a:af:77:64:f5:d7:02:c7:63:
2e:ed:dc:2a:75:2c:d1:1c:5c:75:a0:3e:e9:4b:45:
97:ca:d2:9d:94:28:9d:47:a6:47:45:85:12:bc:5e:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:11:79:FD:62:48:93:28:95:79:7A:88:05:09:75:47:D4:50:06
X509v3 Authority Key Identifier:
keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/C3211D4895B111EFBD9DB787762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.132.144.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:7c:4d:4a:f9:ef:7d:55:26:ae:a7:08:99:7a:21:c8:66:95:
49:80:75:65:f1:ad:49:92:b9:38:c0:f4:2a:24:dd:40:c2:1d:
4a:d7:44:74:41:ce:0c:5a:2b:ab:3c:f3:25:dc:fe:11:04:e3:
01:b7:c6:14:8e:18:ae:1f:98:9c:d1:6b:bf:f2:fb:d3:4c:06:
a6:e1:5a:2f:1e:ee:a1:55:81:92:e4:9a:5d:4f:e4:73:54:01:
71:a2:2c:4f:39:3f:dc:f4:8f:b1:a7:7e:8d:ab:69:63:4b:60:
93:35:ab:a3:bf:0a:87:24:4d:a3:95:07:2c:61:4a:4e:c3:00:
39:a6:91:f9:e7:1c:f4:df:c9:4c:f7:f1:5c:24:6b:9b:be:06:
e4:c3:7d:e2:a9:24:ab:fc:72:99:22:c4:13:e5:71:a2:b5:3d:
e6:3c:69:14:10:16:0f:f6:9b:ef:b4:b0:f3:e2:36:a2:e4:e2:
58:53:90:50:85:52:38:6d:c7:b6:04:57:a8:9b:58:f8:a5:71:
c8:e1:44:1f:59:cf:e1:2e:82:f2:63:e8:b2:3d:d3:68:98:ea:
c1:7b:68:28:0a:73:eb:b9:e8:fc:9f:cc:6e:3c:c8:d7:69:ea:
99:08:2f:a2:c9:2a:7d:d0:80:d5:b4:92:9d:f1:f3:1e:65:1e:
8a:e7:17:c9
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBQDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
QzZDOEFGMTEwLwYDVQQFEygyNTExQkFENDA3OEQ0NjcyQUNGNDMyNDI5OTIxOENF
NDg1NUQwMzlEMB4XDTI0MTAyOTA0NTMzNVoXDTM0MTAyOTA0NTMzNVowGDEWMBQG
A1UEAxMNNjcyMDZhNTMtMjAxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKLMaLWtQBOiG1bTkOGfkzyUwWu0Bl/ZsVSPIDIZumV3J3MDjEHP2yi5Gb5n
DZgLB4wLtzUdppjx7eMAf34zhnBNF9CuCSjtHp0nObhZgEqzgL7bQwRCsviG9c/0
taJbLpkwgzRjdNVBetDLekDhgu4a7sYGn6HoTYSIo08c7K+wxmWo681lI5/QhiH+
v+1toybnjBu+6q5XvoL2mrKWYf1uqTkhPcfR9qSrWbZFcB+jOCcN0JzgB7XrWkQ9
gAARm6zQ5tRYhBq6xoRX6sVRjJINuga0H8+WCq93ZPXXAsdjLu3cKnUs0RxcdaA+
6UtFl8rSnZQonUemR0WFErxeik8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQvBBF5
/WJIkyiVeXqIBQl1R9RQBjAfBgNVHSMEGDAWgBQlEbrUB41Gcqz0MkKZIYzkhV0D
nTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkM2QzgvRDM3RDJEQTA3MEUzMTFFRjg0NjEwMTQ3NzYyRTk1MUEvSlJHNjFB
ZU5SbktzOURKQ21TR001SVZkQTUwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSlJHNjFBZU5SbktzOURKQ21TR001SVZkQTUwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM2QzgvRDM3RDJEQTA3MEUzMTFFRjg0NjEwMTQ3NzYy
RTk1MUEvQzMyMTFENDg5NUIxMTFFRkJEOURCNzg3NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGaEkDANBgkqhkiG9w0BAQsF
AAOCAQEAXHxNSvnvfVUmrqcImXohyGaVSYB1ZfGtSZK5OMD0KiTdQMIdStdEdEHO
DForqzzzJdz+EQTjAbfGFI4Yrh+YnNFrv/L700wGpuFaLx7uoVWBkuSaXU/kc1QB
caIsTzk/3PSPsad+jatpY0tgkzWro78KhyRNo5UHLGFKTsMAOaaR+ecc9N/JTPfx
XCRrm74G5MN94qkkq/xymSLEE+VxorU95jxpFBAWD/ab77Sw8+I2ouTiWFOQUIVS
OG3HtgRXqJtY+KVxyOFEH1nP4S6C8mPosj3TaJjqwXtoKApz67no/J/MbjzI12nq
mQgvoskqfdCA1bSSnfHzHmUeiucXyQ==
-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:40 2024 by rpki-client on console-fra.rpki-client.org