Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/A278A9AC60E211EF938734A9762E951A.roa
File: A278A9AC60E211EF938734A9762E951A.roa (raw, json)
Hash identifier: z1Jlw/yZ++yZq2QaqkGqkTifs65T2BP5GQxHjafo/Nk=
Subject key identifier: CC:7B:F2:E5:C1:6D:38:94:EB:A5:ED:00:73:6C:75:6B:10:6B:19:12
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 02DB
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/A278A9AC60E211EF938734A9762E951A.roa
Signing time: Thu 22 Aug 2024 23:59:58 +0000
ROA not before: Fri 23 Aug 2024 23:59:54 +0000
ROA not after: Sun 31 Dec 2034 23:59:54 +0000
asID: 328977
IP address blocks: 102.208.0.0/22 maxlen: 24
2c0f:6300::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731 (0x2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Aug 23 23:59:54 2024 GMT
Not After : Dec 31 23:59:54 2034 GMT
Subject: CN=66c7d0fe-4123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:5f:60:f5:f9:3c:7b:7a:79:88:5e:90:09:
58:3d:1c:44:ae:f1:b9:20:6e:15:8b:f7:cd:1e:8f:
34:1d:e9:65:6c:cb:c3:97:c3:37:be:0b:98:1c:5f:
6c:84:b1:fc:e0:d1:51:0d:4c:7f:cc:c9:9a:f2:f1:
82:46:ed:57:f5:77:08:8b:49:23:d3:8e:31:1d:75:
8c:14:0a:af:94:3d:de:a6:70:fc:f6:bd:c3:7f:98:
2a:6b:21:f3:82:b2:f7:ce:b3:b3:14:5d:d2:b8:dd:
c1:4b:09:97:77:d9:05:c5:87:cd:8d:bf:a2:9d:98:
f7:a0:93:24:66:87:33:b2:8a:dd:de:99:43:bd:a3:
bb:3b:3c:12:49:f9:1c:8f:c6:f5:3d:41:b8:cc:39:
d7:d5:9b:47:ca:aa:f3:d6:03:dc:aa:9a:b4:9a:fa:
c1:1d:da:e0:ff:87:16:5d:a2:b5:26:36:e9:b1:a6:
e5:ac:50:bb:61:84:7e:e7:56:25:51:aa:7c:d4:e0:
c2:9e:fb:41:9c:76:38:c1:0a:5c:c4:cc:9e:20:68:
e2:00:15:34:34:72:44:78:8f:32:94:78:53:3b:dc:
a0:55:a6:1b:85:aa:50:cd:e0:16:28:42:7d:46:57:
56:26:2d:9d:64:81:b0:35:1c:a0:43:ef:5d:62:3c:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7B:F2:E5:C1:6D:38:94:EB:A5:ED:00:73:6C:75:6B:10:6B:19:12
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/A278A9AC60E211EF938734A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.0.0/22
IPv6:
2c0f:6300::/32
Signature Algorithm: sha256WithRSAEncryption
67:ff:ad:23:db:9e:fa:2b:2b:a3:2c:13:62:06:4c:f3:de:7b:
ac:cb:f3:d2:b1:fd:d1:73:b1:bd:d6:af:5b:0b:97:2b:e9:df:
d0:bd:07:6d:1b:2b:ab:f2:c9:38:fd:8d:2e:20:0f:5e:19:30:
bc:47:6c:87:b4:18:c8:9f:4d:15:bf:89:36:b5:d4:36:7f:1d:
4d:5a:3a:95:09:96:d3:7e:50:83:01:3a:10:6d:3c:54:e8:94:
d3:a8:fb:00:6f:c5:c3:3f:1f:e3:db:5f:d3:48:1b:1e:dc:a0:
64:ab:ec:e9:1b:9b:a1:2b:4d:2f:e3:49:f9:d4:9e:b2:88:97:
65:9e:f1:0c:ff:cb:e8:cc:13:c6:c1:a1:81:12:af:84:58:5b:
b6:9c:96:2c:02:b8:3c:74:4c:1e:38:6d:c5:62:6f:24:d2:4d:
60:bc:4a:81:a2:da:c5:50:55:c0:44:aa:8d:95:f7:25:1e:ec:
ba:c7:49:b3:30:1f:85:e0:5c:b6:8d:ba:1d:81:84:fc:d2:6b:
16:40:ae:9a:37:36:46:c3:8b:66:9f:02:e7:cf:42:6e:7c:35:
54:86:a6:fd:86:13:df:be:98:e2:98:a3:67:9e:51:ec:75:2b:
62:a7:f2:25:92:bb:91:8f:9f:fe:6f:d2:2a:4b:45:a3:0d:fc:
bf:4f:95:ae
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAtswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw
MUVDNUE4MDdGODAeFw0yNDA4MjMyMzU5NTRaFw0zNDEyMzEyMzU5NTRaMBgxFjAU
BgNVBAMTDTY2YzdkMGZlLTQxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFGF9g9fk8e3p5iF6QCVg9HESu8bkgbhWL980ejzQd6WVsy8OXwze+C5gc
X2yEsfzg0VENTH/MyZry8YJG7Vf1dwiLSSPTjjEddYwUCq+UPd6mcPz2vcN/mCpr
IfOCsvfOs7MUXdK43cFLCZd32QXFh82Nv6KdmPegkyRmhzOyit3emUO9o7s7PBJJ
+RyPxvU9QbjMOdfVm0fKqvPWA9yqmrSa+sEd2uD/hxZdorUmNumxpuWsULthhH7n
ViVRqnzU4MKe+0GcdjjBClzEzJ4gaOIAFTQ0ckR4jzKUeFM73KBVphuFqlDN4BYo
Qn1GV1YmLZ1kgbA1HKBD711iPO+bAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUzHvy
5cFtOJTrpe0Ac2x1axBrGRIwHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo
B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP
MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0Yx
MjIyNDY4L0EyNzhBOUFDNjBFMjExRUY5Mzg3MzRBOTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0AAwDQQCAAIwBwMFACwP
YwAwDQYJKoZIhvcNAQELBQADggEBAGf/rSPbnvorK6MsE2IGTPPee6zL89Kx/dFz
sb3Wr1sLlyvp39C9B20bK6vyyTj9jS4gD14ZMLxHbIe0GMifTRW/iTa11DZ/HU1a
OpUJltN+UIMBOhBtPFTolNOo+wBvxcM/H+PbX9NIGx7coGSr7Okbm6ErTS/jSfnU
nrKIl2We8Qz/y+jME8bBoYESr4RYW7acliwCuDx0TB44bcVibyTSTWC8SoGi2sVQ
VcBEqo2V9yUe7LrHSbMwH4XgXLaNuh2BhPzSaxZArpo3NkbDi2afAufPQm58NVSG
pv2GE9++mOKYo2eeUex1K2Kn8iWSu5GPn/5v0ipLRaMN/L9Pla4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:01 2024 by rpki-client on console-fra.rpki-client.org