Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/F1E13460B49C11EAAD5FFC10F8AEA228.roa
File: F1E13460B49C11EAAD5FFC10F8AEA228.roa (raw, json)
Hash identifier: BIJuAi9AxI0PjKWpBYTgVMncK8MVrrG+hBM39gZwnbw=
Subject key identifier: 78:66:CC:96:A9:19:9C:2B:A7:94:7F:4E:EE:75:09:6F:1D:ED:07:0D
Certificate issuer: /CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Certificate serial: 04
Authority key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/F1E13460B49C11EAAD5FFC10F8AEA228.roa
Signing time: Mon 22 Jun 2020 15:27:56 +0000
ROA not before: Mon 22 Jun 2020 15:27:52 +0000
ROA not after: Sun 22 Jun 2025 15:27:52 +0000
asID: 29465
IP address blocks: 41.220.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Validity
Not Before: Jun 22 15:27:52 2020 GMT
Not After : Jun 22 15:27:52 2025 GMT
Subject: CN=5ef0cdfb-efba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:26:17:c3:7e:8c:a2:ea:81:e5:bd:8c:74:
c5:e8:df:0e:d0:15:95:0c:87:ba:94:85:cc:6e:a2:
09:32:bf:68:f3:35:c8:04:bb:7c:78:63:b7:45:a0:
dd:2a:66:d0:c3:ae:87:d2:96:fd:98:6c:dd:64:4e:
ac:18:52:ec:17:24:1f:4e:9b:f7:84:20:01:c5:47:
1f:46:a8:e7:6f:b1:d5:6d:55:93:94:41:b4:ce:d3:
9d:1b:33:24:e6:36:ab:cf:a5:ae:40:05:fb:66:2f:
60:84:6d:9d:8e:e6:5d:65:f4:ee:ec:94:2f:b9:93:
cd:cb:ce:3b:ec:99:92:2c:83:50:f2:65:0d:4b:63:
68:36:06:ff:1a:30:60:2e:94:76:ce:5d:da:64:59:
84:eb:7c:55:d3:0f:85:79:94:14:8b:06:98:17:8e:
df:5e:bf:8c:85:41:65:15:ca:97:67:f1:36:c2:c9:
ea:f1:cc:30:44:76:88:6e:94:bd:ea:4c:80:59:8e:
26:74:0f:b6:5d:c2:3d:f0:74:19:04:95:02:df:ca:
05:28:d6:f7:ab:0c:8a:4b:3c:85:98:1d:aa:ba:11:
8f:fb:4c:c4:f2:b9:82:cd:e6:3f:c5:88:ad:75:d5:
f2:7c:a8:b1:c2:19:d1:f5:19:15:28:a3:0e:79:8a:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:CC:96:A9:19:9C:2B:A7:94:7F:4E:EE:75:09:6F:1D:ED:07:0D
X509v3 Authority Key Identifier:
keyid:2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/F1E13460B49C11EAAD5FFC10F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.220.64.0/20
Signature Algorithm: sha256WithRSAEncryption
af:54:74:1a:14:92:ee:8c:5e:63:a8:ad:6e:4a:ea:6e:d2:72:
9a:a1:77:29:6e:22:7a:01:f6:90:a3:a0:b7:23:17:74:f5:8b:
c6:d9:ec:b8:7d:59:5a:e5:d5:3e:d4:59:31:c0:bf:14:c2:01:
b0:ee:31:f5:99:a3:d5:e7:46:68:9c:05:4d:6d:8a:91:32:e0:
23:9e:ac:65:a6:e0:1a:e8:b5:75:0b:32:27:6e:05:25:ae:fa:
18:07:4f:1f:55:84:1d:f2:89:71:70:77:d4:b1:b2:b1:14:c5:
cb:78:fd:00:34:21:2b:73:75:22:aa:21:fe:ff:0d:60:2f:da:
d3:b0:33:65:59:a0:d1:24:3e:18:28:6f:2d:40:36:ce:bd:1f:
89:45:f6:8f:08:00:9f:b1:08:b1:c6:c5:53:a6:70:60:da:31:
0e:0b:31:55:4e:0d:cb:80:28:85:e4:be:2d:32:f9:2c:1a:49:
1a:b5:e0:88:23:0b:95:a5:fe:53:98:fb:13:39:b3:47:4b:39:
52:22:b1:2a:76:a4:c3:66:5c:9b:7d:23:24:f2:f7:b1:e2:0f:
d0:ff:6a:e7:a5:15:fa:cb:ba:63:db:ab:06:29:ab:dc:63:d5:
4d:fd:af:5c:48:d8:b7:e4:12:1c:46:24:a4:f5:4a:6f:28:f3:
99:a7:59:a1
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
RERFRUFGMTEwLwYDVQQFEygyQ0QzMUMzQzI1MUY1RURBMTgzRjkzOEU3RkNCM0E0
QTFEQkE4OUREMB4XDTIwMDYyMjE1Mjc1MloXDTI1MDYyMjE1Mjc1MlowGDEWMBQG
A1UEAxMNNWVmMGNkZmItZWZiYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOJkJhfDfoyi6oHlvYx0xejfDtAVlQyHupSFzG6iCTK/aPM1yAS7fHhjt0Wg
3Spm0MOuh9KW/Zhs3WROrBhS7BckH06b94QgAcVHH0ao52+x1W1Vk5RBtM7TnRsz
JOY2q8+lrkAF+2YvYIRtnY7mXWX07uyUL7mTzcvOO+yZkiyDUPJlDUtjaDYG/xow
YC6Uds5d2mRZhOt8VdMPhXmUFIsGmBeO316/jIVBZRXKl2fxNsLJ6vHMMER2iG6U
vepMgFmOJnQPtl3CPfB0GQSVAt/KBSjW96sMiks8hZgdqroRj/tMxPK5gs3mP8WI
rXXV8nyoscIZ0fUZFSijDnmKgesCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBR4ZsyW
qRmcK6eUf07udQlvHe0HDTAfBgNVHSMEGDAWgBQs0xw8JR9e2hg/k45/yzpKHbqJ
3TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkRERUUvMjE0QzVBRUNCNDlCMTFFQUEzRjYxRjBGRjhBRUEyMjgvTE5NY1BD
VWZYdG9ZUDVPT2Y4czZTaDI2aWQwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTE5NY1BDVWZYdG9ZUDVPT2Y4czZTaDI2aWQwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkRERUUvMjE0QzVBRUNCNDlCMTFFQUEzRjYxRjBGRjhB
RUEyMjgvRjFFMTM0NjBCNDlDMTFFQUFENUZGQzEwRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCncQDANBgkqhkiG9w0BAQsF
AAOCAQEAr1R0GhSS7oxeY6itbkrqbtJymqF3KW4iegH2kKOgtyMXdPWLxtnsuH1Z
WuXVPtRZMcC/FMIBsO4x9Zmj1edGaJwFTW2KkTLgI56sZabgGui1dQsyJ24FJa76
GAdPH1WEHfKJcXB31LGysRTFy3j9ADQhK3N1Iqoh/v8NYC/a07AzZVmg0SQ+GChv
LUA2zr0fiUX2jwgAn7EIscbFU6ZwYNoxDgsxVU4Ny4AoheS+LTL5LBpJGrXgiCML
laX+U5j7EzmzR0s5UiKxKnakw2Zcm30jJPL3seIP0P9q56UV+su6Y9urBimr3GPV
Tf2vXEjYt+QSHEYkpPVKbyjzmadZoQ==
-----END CERTIFICATE-----
Generated at Thu Apr 18 03:35:44 2024 by rpki-client on console-ams.rpki-client.org