Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361AD11/7AB42AA6B5B811EA8D1C8D38F8AEA228/2411BBA2B5BB11EA967B5A3BF8AEA228.roa
File: 2411BBA2B5BB11EA967B5A3BF8AEA228.roa (raw, json)
Hash identifier: VayYNCnFrxNYiKXhCN/zpmj96HT61RHNHJYx6bzaLBs=
Subject key identifier: 8F:B5:7D:20:A3:2A:01:78:20:97:AD:11:32:D5:4E:3A:20:F1:B0:CE
Certificate issuer: /CN=F361AD11AF/serialNumber=02BCC978E3F98C996570B2ED3BDA572D68C08A45
Certificate serial: 03
Authority key identifier: 02:BC:C9:78:E3:F9:8C:99:65:70:B2:ED:3B:DA:57:2D:68:C0:8A:45
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ArzJeOP5jJllcLLtO9pXLWjAikU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361AD11/7AB42AA6B5B811EA8D1C8D38F8AEA228/2411BBA2B5BB11EA967B5A3BF8AEA228.roa
Signing time: Wed 24 Jun 2020 01:36:36 +0000
ROA not before: Wed 24 Jun 2020 01:36:30 +0000
ROA not after: Mon 24 Jun 2030 01:36:30 +0000
asID: 37126
IP address blocks: 41.222.88.0/22 maxlen: 22
41.222.88.0/24 maxlen: 24
41.222.89.0/24 maxlen: 24
41.222.90.0/24 maxlen: 24
41.222.91.0/24 maxlen: 24
41.222.92.0/22 maxlen: 22
41.222.92.0/24 maxlen: 24
41.222.93.0/24 maxlen: 24
41.222.94.0/24 maxlen: 24
41.222.95.0/24 maxlen: 24
154.127.16.0/22 maxlen: 22
154.127.16.0/24 maxlen: 24
154.127.17.0/24 maxlen: 24
154.127.18.0/24 maxlen: 24
154.127.19.0/24 maxlen: 24
154.127.20.0/22 maxlen: 22
154.127.20.0/24 maxlen: 24
154.127.21.0/24 maxlen: 24
154.127.22.0/24 maxlen: 24
154.127.23.0/24 maxlen: 24
154.127.24.0/22 maxlen: 22
154.127.24.0/24 maxlen: 24
154.127.25.0/24 maxlen: 24
154.127.26.0/24 maxlen: 24
154.127.27.0/24 maxlen: 24
154.127.28.0/22 maxlen: 22
154.127.28.0/24 maxlen: 24
154.127.29.0/24 maxlen: 24
154.127.30.0/24 maxlen: 24
154.127.31.0/24 maxlen: 24
2c0f:f320::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361AD11/7AB42AA6B5B811EA8D1C8D38F8AEA228/ArzJeOP5jJllcLLtO9pXLWjAikU.crl
rsync://rpki.afrinic.net/repository/member_repository/F361AD11/7AB42AA6B5B811EA8D1C8D38F8AEA228/ArzJeOP5jJllcLLtO9pXLWjAikU.mft
rsync://rpki.afrinic.net/repository/afrinic/ArzJeOP5jJllcLLtO9pXLWjAikU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361AD11AF/serialNumber=02BCC978E3F98C996570B2ED3BDA572D68C08A45
Validity
Not Before: Jun 24 01:36:30 2020 GMT
Not After : Jun 24 01:36:30 2030 GMT
Subject: CN=5ef2ae24-0545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:12:48:ab:7c:18:df:c2:e4:e0:0e:f8:13:
bd:0a:01:12:95:d4:d5:e7:fb:f1:e8:e4:52:da:37:
02:cb:12:6f:6d:c3:5d:c6:76:98:64:9a:cc:43:69:
37:db:39:cf:87:05:18:e0:b7:42:43:01:80:a7:1b:
8b:73:ca:6f:62:96:9e:6a:a5:da:da:5c:0d:da:35:
96:3f:d9:01:ef:6f:39:26:c9:8f:c0:4f:c0:ac:bc:
ec:ac:a8:02:df:87:8d:5d:96:fa:60:0c:aa:7f:83:
e3:a1:93:1e:10:9e:c8:ae:f6:00:bc:3e:e3:6f:50:
8d:8e:f0:9d:ac:b8:73:a3:c7:fa:ee:07:62:9a:b7:
5e:b7:26:bb:20:03:66:08:d6:ae:d4:bd:7b:8a:78:
6b:2e:9d:6b:7a:ae:42:80:53:6f:62:e2:84:76:54:
d4:f5:03:80:f6:27:86:03:83:c3:65:a1:8a:81:94:
e9:e4:10:78:16:26:36:32:bf:01:30:56:d9:4b:5d:
9f:5c:f2:32:7f:09:97:33:22:1d:47:c8:63:f7:01:
99:e3:c3:1f:8e:28:a3:44:d0:e4:df:cc:fb:5f:d1:
ef:f0:7b:e7:5d:78:56:df:2c:84:a5:31:38:c7:7d:
64:a6:0a:2e:8e:3a:cb:4e:b4:cd:58:3c:d3:7b:39:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:7D:20:A3:2A:01:78:20:97:AD:11:32:D5:4E:3A:20:F1:B0:CE
X509v3 Authority Key Identifier:
keyid:02:BC:C9:78:E3:F9:8C:99:65:70:B2:ED:3B:DA:57:2D:68:C0:8A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361AD11/7AB42AA6B5B811EA8D1C8D38F8AEA228/ArzJeOP5jJllcLLtO9pXLWjAikU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ArzJeOP5jJllcLLtO9pXLWjAikU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361AD11/7AB42AA6B5B811EA8D1C8D38F8AEA228/2411BBA2B5BB11EA967B5A3BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.88.0/21
154.127.16.0/20
IPv6:
2c0f:f320::/32
Signature Algorithm: sha256WithRSAEncryption
ad:90:6a:9f:50:82:33:fe:d5:43:28:f1:fc:93:72:76:5b:c0:
e8:ad:42:cf:00:f1:1e:e6:39:7e:b3:63:52:f2:d1:70:9b:86:
4c:2a:e8:ba:56:c3:04:3b:10:af:d8:66:62:40:f3:45:a0:94:
85:39:7c:7f:ff:14:80:fb:33:eb:2e:67:99:15:04:f8:5f:d3:
42:87:fe:ba:36:61:7a:2b:c3:db:55:13:b2:06:31:83:43:9f:
03:37:df:0e:3f:24:05:27:99:b6:0d:aa:2b:2d:30:86:c5:88:
90:67:e2:ec:c0:05:14:58:60:9d:32:f6:07:dd:73:ca:f4:25:
0c:74:0d:5a:d2:2b:a1:a1:3d:a3:f1:cc:74:35:65:5e:6c:c1:
b8:62:ef:13:99:85:c9:57:8b:9d:01:13:db:19:fd:26:88:9a:
fc:6b:a1:fc:5e:ab:41:f6:22:43:c3:56:2f:0a:65:28:9c:7c:
c1:a6:04:48:a5:03:a8:a1:ec:23:18:f2:ce:3a:35:89:1d:e7:
cf:ed:a4:b4:ea:52:83:f5:4e:6c:ef:66:b3:5b:cb:97:7c:eb:
5a:dc:9a:8f:d1:31:ef:02:bb:e4:c9:e9:22:cb:a2:2b:40:95:
47:9c:27:42:c3:c0:a7:f6:fc:fa:87:c5:2c:64:b5:a9:bc:7b:
9e:e8:ac:4a
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
QUQxMUFGMTEwLwYDVQQFEygwMkJDQzk3OEUzRjk4Qzk5NjU3MEIyRUQzQkRBNTcy
RDY4QzA4QTQ1MB4XDTIwMDYyNDAxMzYzMFoXDTMwMDYyNDAxMzYzMFowGDEWMBQG
A1UEAxMNNWVmMmFlMjQtMDU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDSEkirfBjfwuTgDvgTvQoBEpXU1ef78ejkUto3AssSb23DXcZ2mGSazENp
N9s5z4cFGOC3QkMBgKcbi3PKb2KWnmql2tpcDdo1lj/ZAe9vOSbJj8BPwKy87Kyo
At+HjV2W+mAMqn+D46GTHhCeyK72ALw+429QjY7wnay4c6PH+u4HYpq3XrcmuyAD
ZgjWrtS9e4p4ay6da3quQoBTb2LihHZU1PUDgPYnhgODw2WhioGU6eQQeBYmNjK/
ATBW2Utdn1zyMn8JlzMiHUfIY/cBmePDH44oo0TQ5N/M+1/R7/B75114Vt8shKUx
OMd9ZKYKLo46y060zVg803s53akCAwEAAaOCArowggK2MB0GA1UdDgQWBBSPtX0g
oyoBeCCXrREy1U46IPGwzjAfBgNVHSMEGDAWgBQCvMl44/mMmWVwsu072lctaMCK
RTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUFEMTEvN0FCNDJBQTZCNUI4MTFFQThEMUM4RDM4RjhBRUEyMjgvQXJ6SmVP
UDVqSmxsY0xMdE85cFhMV2pBaWtVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQXJ6SmVPUDVqSmxsY0xMdE85cFhMV2pBaWtVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUFEMTEvN0FCNDJBQTZCNUI4MTFFQThEMUM4RDM4RjhB
RUEyMjgvMjQxMUJCQTJCNUJCMTFFQTk2N0I1QTNCRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAyneWAMEBJp/EDANBAIAAjAH
AwUALA/zIDANBgkqhkiG9w0BAQsFAAOCAQEArZBqn1CCM/7VQyjx/JNydlvA6K1C
zwDxHuY5frNjUvLRcJuGTCroulbDBDsQr9hmYkDzRaCUhTl8f/8UgPsz6y5nmRUE
+F/TQof+ujZheivD21UTsgYxg0OfAzffDj8kBSeZtg2qKy0whsWIkGfi7MAFFFhg
nTL2B91zyvQlDHQNWtIroaE9o/HMdDVlXmzBuGLvE5mFyVeLnQET2xn9Joia/Guh
/F6rQfYiQ8NWLwplKJx8waYESKUDqKHsIxjyzjo1iR3nz+2ktOpSg/VObO9ms1vL
l3zrWtyaj9Ex7wK75MnpIsuiK0CVR5wnQsPAp/b8+ofFLGS1qbx7nuisSg==
-----END CERTIFICATE-----
Generated at Thu May 16 02:09:51 2024 by rpki-client on console-fra.rpki-client.org