Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A3FDC7B0A95111E9AAD65A69F8AEA228.roa
File: A3FDC7B0A95111E9AAD65A69F8AEA228.roa (raw, json)
Hash identifier: 0K5eGgVbvu8FC7WyD8sLN1TIhCRCwpbYVJe4XMYjSoU=
Subject key identifier: 31:C5:5A:D0:66:83:A2:3A:C2:A4:92:CA:63:35:71:C3:07:D3:EA:0F
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 33
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A3FDC7B0A95111E9AAD65A69F8AEA228.roa
Signing time: Thu 18 Jul 2019 11:46:13 +0000
ROA not before: Thu 18 Jul 2019 11:46:08 +0000
ROA not after: Wed 18 Jul 2029 11:46:08 +0000
asID: 0
IP address blocks: 196.60.0.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jul 18 11:46:08 2019 GMT
Not After : Jul 18 11:46:08 2029 GMT
Subject: CN=5d305c04-a7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:37:99:79:47:17:74:3e:a3:fa:18:a4:92:
8d:9f:4d:ac:3e:f1:9d:59:60:0f:77:b3:eb:3f:cf:
89:d7:15:3c:c3:59:d9:64:aa:37:89:af:96:b6:7d:
bc:de:4e:b5:03:50:53:71:b1:d0:eb:1c:f0:92:b3:
ab:67:23:6c:8d:11:31:22:50:a0:40:5b:49:63:24:
e9:7b:d9:71:e8:34:17:1c:a1:15:2d:a8:ec:61:6a:
ed:34:b3:05:0f:8a:59:1e:b6:69:61:8f:d5:e4:72:
bc:03:80:c9:34:ec:a1:b0:bb:18:42:eb:4b:e4:0e:
5e:65:a8:ae:a4:27:c3:7e:fe:9c:9f:c7:66:e0:db:
5f:9f:6d:37:4b:34:90:b0:f7:7e:be:09:d3:56:41:
2f:71:e3:20:8e:06:75:4b:c6:e2:36:bb:b3:a1:73:
4c:05:37:af:d7:de:f4:de:53:f0:8e:45:aa:fd:d5:
0a:d9:69:8a:ce:d0:8d:ec:68:02:99:e6:4e:7d:35:
b5:86:13:f2:f9:d4:1b:de:52:f8:32:e0:ba:40:8a:
fe:68:b3:f7:ac:5e:73:a1:6c:bd:5e:fc:c3:df:14:
2a:14:26:af:d3:dd:49:40:21:11:8f:b7:99:19:35:
54:f3:a2:ed:bd:a2:c0:9d:99:d5:99:9b:92:56:af:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:5A:D0:66:83:A2:3A:C2:A4:92:CA:63:35:71:C3:07:D3:EA:0F
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A3FDC7B0A95111E9AAD65A69F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.60.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2a:b6:05:f5:a3:33:1a:04:95:92:69:e2:64:f7:ba:2d:9f:
f9:61:2c:fb:d4:26:b4:e5:d9:66:77:5b:3f:cd:6a:42:17:84:
63:cb:75:97:2c:f7:9c:61:6f:4b:38:e2:ae:36:52:96:7d:98:
1e:4c:73:7b:d3:81:b9:13:7f:45:cc:83:c7:4a:3a:d1:e5:3b:
0d:7f:93:89:18:2c:0b:46:42:1f:2b:75:fe:6f:14:b1:a9:6a:
30:23:b6:bb:a9:f2:cd:5f:8a:0a:96:1a:da:7b:34:35:41:b6:
e2:84:aa:40:42:bf:b4:ec:f0:32:d5:c4:e2:6d:69:32:24:d4:
72:4d:8e:fb:1b:e0:36:94:3c:2c:25:6e:62:da:d4:a2:78:47:
de:52:94:70:47:d8:d4:1b:dc:33:54:a8:71:ee:20:75:0e:75:
ee:9f:2f:9c:09:2e:3f:91:49:6c:f9:01:c2:7c:40:c7:75:c4:
c9:5c:2e:f0:ab:49:d7:42:ef:c9:53:0b:a0:05:84:72:9f:74:
5a:c7:10:d9:ef:c5:ae:3f:2a:24:d0:f0:0c:51:2e:1f:e9:c8:
2b:90:e6:e0:c0:0b:9e:0a:bd:2a:2b:c0:54:47:b3:f5:f1:17:
7b:48:02:77:05:26:1e:7f:b2:b6:82:a6:f0:37:8f:64:15:9a:
d3:a6:6e:84
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBMzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
RUE2QkFGMTEwLwYDVQQFEyg5M0MyQzk5QUYwRUM0RDFBNDY0MzQ5N0Y1RjhDQkRD
N0VDNDU3NDhGMB4XDTE5MDcxODExNDYwOFoXDTI5MDcxODExNDYwOFowGDEWMBQG
A1UEAxMNNWQzMDVjMDQtYTdiNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9sN5l5Rxd0PqP6GKSSjZ9NrD7xnVlgD3ez6z/PidcVPMNZ2WSqN4mvlrZ9
vN5OtQNQU3Gx0Osc8JKzq2cjbI0RMSJQoEBbSWMk6XvZceg0FxyhFS2o7GFq7TSz
BQ+KWR62aWGP1eRyvAOAyTTsobC7GELrS+QOXmWorqQnw37+nJ/HZuDbX59tN0s0
kLD3fr4J01ZBL3HjII4GdUvG4ja7s6FzTAU3r9fe9N5T8I5Fqv3VCtlpis7Qjexo
ApnmTn01tYYT8vnUG95S+DLgukCK/miz96xec6FsvV78w98UKhQmr9PdSUAhEY+3
mRk1VPOi7b2iwJ2Z1Zmbklavla0CAwEAAaOCAm4wggJqMB0GA1UdDgQWBBQxxVrQ
ZoOiOsKkkspjNXHDB9PqDzAfBgNVHSMEGDAWgBSTwsma8OxNGkZDSX9fjL3H7EV0
jzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhBRUEyMjgvazhMSm12
RHNUUnBHUTBsX1g0eTl4LXhGZEk4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvazhMSm12RHNUUnBHUTBsX1g0eTl4LXhGZEk4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhB
RUEyMjgvQTNGREM3QjBBOTUxMTFFOUFBRDY1QTY5RjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxDwAMA0GCSqGSIb3DQEBCwUAA4IBAQCd
KrYF9aMzGgSVkmniZPe6LZ/5YSz71Ca05dlmd1s/zWpCF4Rjy3WXLPecYW9LOOKu
NlKWfZgeTHN704G5E39FzIPHSjrR5TsNf5OJGCwLRkIfK3X+bxSxqWowI7a7qfLN
X4oKlhraezQ1QbbihKpAQr+07PAy1cTibWkyJNRyTY77G+A2lDwsJW5i2tSieEfe
UpRwR9jUG9wzVKhx7iB1DnXuny+cCS4/kUls+QHCfEDHdcTJXC7wq0nXQu/JUwug
BYRyn3RaxxDZ78WuPyok0PAMUS4f6cgrkObgwAueCr0qK8BUR7P18Rd7SAJ3BSYe
f7K2gqbwN49kFZrTpm6E
-----END CERTIFICATE-----
Generated at Thu Apr 18 02:45:19 2024 by rpki-client on console-fra.rpki-client.org