Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/A607F30E2B7111EEBD6CF8174AD9E6FC.roa
File: A607F30E2B7111EEBD6CF8174AD9E6FC.roa (raw, json)
Hash identifier: hZa69mfNQSB9pbapRwb8sB9Dq+PScArCQ+8Z5829TS8=
Subject key identifier: 35:5F:BE:76:E7:1F:17:A5:20:53:B4:4F:E6:98:3B:EE:FD:7F:26:9A
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 053F
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/A607F30E2B7111EEBD6CF8174AD9E6FC.roa
Signing time: Wed 26 Jul 2023 05:02:41 +0000
ROA not before: Wed 26 Jul 2023 05:02:38 +0000
ROA not after: Tue 31 Jul 2040 05:02:38 +0000
asID: 7262
IP address blocks: 41.221.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1343 (0x53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Jul 26 05:02:38 2023 GMT
Not After : Jul 31 05:02:38 2040 GMT
Subject: CN=64c0a8f1-8477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:30:b2:1f:10:e5:be:97:08:bd:05:b1:16:
dc:76:bc:07:44:32:7e:24:00:d1:49:2c:86:f1:f2:
61:b7:f2:ca:d5:fc:81:3f:25:81:75:52:c9:3f:c1:
1f:13:91:e9:6c:cc:46:8b:64:2e:40:30:cd:66:32:
45:76:6e:8d:75:a6:10:09:6b:38:0c:d2:33:a9:00:
fe:c9:0a:1d:f8:8f:5b:73:29:6e:f3:98:c8:20:6c:
7d:bc:46:ff:ed:04:48:6f:40:0c:39:e3:1f:b3:69:
6a:70:7b:59:08:f7:7d:89:f6:f5:c9:66:93:7f:83:
ba:54:a6:53:2f:df:0f:f1:91:84:72:e9:82:06:a8:
0c:e8:b9:de:ae:9c:ab:85:df:b3:53:07:a8:2b:d3:
22:2b:51:7d:1c:ae:0e:a1:00:6b:8a:2a:e0:4e:74:
dc:37:0a:08:25:6f:37:99:f6:16:dc:ff:af:43:2c:
d7:a4:c0:79:13:9c:d4:9b:04:31:20:fe:7b:2e:92:
44:bd:b1:b1:c6:4e:6b:70:52:98:c0:6a:d0:89:54:
0b:cd:8d:8b:70:67:ca:3c:cc:92:43:7e:81:0b:2a:
b3:90:a3:45:13:d3:20:fe:11:0e:f9:28:61:3a:1c:
99:16:5a:cc:7d:86:b6:1f:8e:c4:60:85:a9:8f:b0:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:BE:76:E7:1F:17:A5:20:53:B4:4F:E6:98:3B:EE:FD:7F:26:9A
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/A607F30E2B7111EEBD6CF8174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.215.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:e4:f7:9b:b2:8f:ca:d2:c0:7d:9b:b4:11:d8:c5:5e:c2:b7:
4b:43:ca:dd:40:af:36:e8:da:83:2c:b2:56:40:1c:9e:aa:af:
d8:d6:be:91:7b:f8:9e:e1:87:85:20:1d:f3:64:cd:d8:8d:c6:
ad:8d:c7:39:d7:db:bd:e5:df:4a:c2:ed:b6:78:b5:1b:5f:63:
2b:19:a1:45:89:75:2d:45:fa:f2:89:87:cc:46:8b:c5:c6:5a:
64:6e:c3:86:d6:13:01:f4:4f:b7:9d:df:49:6a:53:4d:89:d2:
22:08:27:89:76:0b:62:b7:74:68:c7:a6:5d:bb:38:c1:d8:0c:
b5:40:3d:d2:0e:b9:4b:47:75:f0:b1:5f:97:62:f5:e4:32:68:
b8:a0:7c:30:60:f1:4c:b8:8e:5b:6b:72:23:e3:78:d1:8e:64:
a6:6b:2a:c3:1b:95:8c:67:7a:6a:85:14:d1:e0:d1:e6:2c:32:
6b:10:15:58:3d:13:aa:3b:91:a6:7c:43:fd:14:05:4a:a1:96:
87:c7:b6:54:87:90:77:3e:94:72:ba:3c:af:6f:88:69:2c:58:
43:d1:3a:da:48:9d:d4:78:a2:69:e0:4c:f5:f7:59:d5:92:be:
89:f8:46:65:79:2d:50:47:e3:39:e7:3e:fc:2d:22:27:84:32:
64:5e:06:2c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RTNEN0ZBRjExMC8GA1UEBRMoOTY1QzhDMzVCMEYxMEY4RUE1REJEQTU0NEYyOTFC
NkNBOTI4M0I1RDAeFw0yMzA3MjYwNTAyMzhaFw00MDA3MzEwNTAyMzhaMBgxFjAU
BgNVBAMTDTY0YzBhOGYxLTg0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCw0DCyHxDlvpcIvQWxFtx2vAdEMn4kANFJLIbx8mG38srV/IE/JYF1Usk/
wR8TkelszEaLZC5AMM1mMkV2bo11phAJazgM0jOpAP7JCh34j1tzKW7zmMggbH28
Rv/tBEhvQAw54x+zaWpwe1kI932J9vXJZpN/g7pUplMv3w/xkYRy6YIGqAzoud6u
nKuF37NTB6gr0yIrUX0crg6hAGuKKuBOdNw3CgglbzeZ9hbc/69DLNekwHkTnNSb
BDEg/nsukkS9sbHGTmtwUpjAatCJVAvNjYtwZ8o8zJJDfoELKrOQo0UT0yD+EQ75
KGE6HJkWWsx9hrYfjsRghamPsKavAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNV++
ducfF6UgU7RP5pg77v1/JpowHwYDVR0jBBgwFoAUllyMNbDxD46l29pUTykbbKko
O10wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzRDdGL0I3MDVFQUYyNDFBNjExRUE4ODFBNjcyOEY4QUVBMjI4L2xseU1O
YkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xseU1OYkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzRDdGL0I3MDVFQUYyNDFBNjExRUE4ODFBNjcyOEY4
QUVBMjI4L0E2MDdGMzBFMkI3MTExRUVCRDZDRjgxNzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp3dcwDQYJKoZIhvcNAQEL
BQADggEBAOTk95uyj8rSwH2btBHYxV7Ct0tDyt1Arzbo2oMsslZAHJ6qr9jWvpF7
+J7hh4UgHfNkzdiNxq2NxznX273l30rC7bZ4tRtfYysZoUWJdS1F+vKJh8xGi8XG
WmRuw4bWEwH0T7ed30lqU02J0iIIJ4l2C2K3dGjHpl27OMHYDLVAPdIOuUtHdfCx
X5di9eQyaLigfDBg8Uy4jltrciPjeNGOZKZrKsMblYxnemqFFNHg0eYsMmsQFVg9
E6o7kaZ8Q/0UBUqhlofHtlSHkHc+lHK6PK9viGksWEPROtpIndR4omngTPX3WdWS
von4RmV5LVBH4znnPvwtIieEMmReBiw=
-----END CERTIFICATE-----
Generated at Fri May 17 02:01:36 2024 by rpki-client on console-ams.rpki-client.org