Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/93B50CB27C2811ED81D30EDDF1222468.roa
File: 93B50CB27C2811ED81D30EDDF1222468.roa (raw, json)
Hash identifier: gp/99soeditLcJO0T5hekMas/YIo6afkCzb5ekN/BCo=
Subject key identifier: 5B:45:6A:70:FC:1F:81:94:B0:5B:FF:05:74:C9:E9:8D:A3:A3:BD:15
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 060F
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/93B50CB27C2811ED81D30EDDF1222468.roa
Signing time: Thu 15 Dec 2022 03:28:44 +0000
ROA not before: Thu 15 Dec 2022 03:28:38 +0000
ROA not after: Wed 15 Dec 2032 03:28:38 +0000
asID: 36915
IP address blocks: 41.207.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF
Validity
Not Before: Dec 15 03:28:38 2022 GMT
Not After : Dec 15 03:28:38 2032 GMT
Subject: CN=639a946c-e14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:fc:2f:a1:d8:e2:f2:97:b7:a0:c7:78:45:
d7:35:3f:07:69:ef:87:49:3e:e3:45:56:1d:78:7c:
ab:09:a4:1a:f5:6c:ab:5b:4c:f0:9a:bf:9b:b5:2d:
d7:3b:e7:24:89:8c:80:d6:76:46:c1:fd:b1:b5:23:
fc:06:24:8b:f8:cc:48:a2:a4:d4:b3:02:12:a3:20:
bf:fb:1f:79:ed:35:34:40:e5:a8:c5:ea:cd:f3:3f:
9f:81:32:d1:1d:19:85:0d:08:44:8c:07:a6:cc:09:
f0:dd:70:18:d2:cf:7a:8e:63:dd:cb:66:44:de:2d:
04:5f:e5:a9:7e:9e:6f:d5:c1:10:76:3f:e8:91:39:
30:c8:4a:14:6a:a3:b1:7f:8c:27:3c:50:e8:ec:ef:
43:3a:02:99:73:ea:e7:b0:02:e2:45:92:ac:ee:e3:
43:14:1b:aa:fd:03:6f:67:1c:a8:b7:99:04:8e:fb:
29:13:ee:ad:1e:ae:73:a0:ae:cd:a0:20:f6:b7:55:
08:79:16:53:99:c7:3f:b8:44:9e:32:e4:41:fa:c3:
6e:b5:45:1c:d8:1b:82:76:71:2e:e1:b7:2e:7e:c9:
b9:c6:e7:11:09:df:d3:6e:b2:f5:63:66:26:2b:46:
25:e2:fa:63:82:2f:16:e4:70:5e:b3:b9:22:70:4b:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:45:6A:70:FC:1F:81:94:B0:5B:FF:05:74:C9:E9:8D:A3:A3:BD:15
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/93B50CB27C2811ED81D30EDDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.207.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:5c:bc:43:d4:57:af:16:bf:fd:7f:d6:ac:df:56:c3:56:af:
16:79:de:39:bf:db:99:d7:e3:0a:71:47:b7:0f:12:15:3a:a8:
ce:42:b6:e9:92:22:26:c7:a4:96:00:19:80:3f:be:65:5e:fb:
55:27:44:4a:61:70:ad:fa:3e:5b:77:98:58:64:f8:7f:04:02:
63:4e:37:fd:91:05:2a:fb:75:40:d4:f2:92:bb:29:00:18:0a:
55:b3:02:57:03:1d:69:c3:28:80:72:dc:3f:1a:54:c0:74:4c:
9b:76:b8:22:2b:5d:65:0d:4f:ef:d6:9a:03:94:ac:f3:27:e7:
f2:f9:2f:1a:9a:39:3f:79:e0:e0:0f:e4:4f:a5:4b:16:b8:0b:
9e:fa:6a:05:9e:70:fc:8f:53:9f:ac:98:21:02:48:c2:30:02:
2e:26:7e:82:7b:46:17:37:20:ba:63:53:8d:54:fe:7b:34:da:
d9:3c:cf:d5:f2:23:76:a5:56:a2:94:8f:c2:4c:ba:2c:be:ff:
a4:c0:14:d4:a4:24:c7:4d:cf:58:9e:a6:b7:80:15:6d:50:de:
05:b8:b3:67:03:74:9f:b8:3a:d5:87:24:e4:01:8f:c3:8a:b8:
13:a1:ed:fa:f8:be:31:64:bd:f6:d1:9f:f3:70:5d:b5:01:81:
88:c5:3a:4a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MUMzQTFBRjExMC8GA1UEBRMoOTBFOTg4Nzc5MUNGMkQ5NjA1MDFGOEFFREUyNEEy
MzM0QUJBNTQwMzAeFw0yMjEyMTUwMzI4MzhaFw0zMjEyMTUwMzI4MzhaMBgxFjAU
BgNVBAMMDTYzOWE5NDZjLWUxNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsgvwvodji8pe3oMd4Rdc1Pwdp74dJPuNFVh14fKsJpBr1bKtbTPCav5u1
Ldc75ySJjIDWdkbB/bG1I/wGJIv4zEiipNSzAhKjIL/7H3ntNTRA5ajF6s3zP5+B
MtEdGYUNCESMB6bMCfDdcBjSz3qOY93LZkTeLQRf5al+nm/VwRB2P+iROTDIShRq
o7F/jCc8UOjs70M6Aplz6uewAuJFkqzu40MUG6r9A29nHKi3mQSO+ykT7q0ernOg
rs2gIPa3VQh5FlOZxz+4RJ4y5EH6w261RRzYG4J2cS7hty5+ybnG5xEJ39NusvVj
ZiYrRiXi+mOCLxbkcF6zuSJwS271AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUW0Vq
cPwfgZSwW/8FdMnpjaOjvRUwHwYDVR0jBBgwFoAUkOmId5HPLZYFAfiu3iSiM0q6
VAMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFDM0ExLzJEOTY3NzJFRTBEMDExRTg4QUU2MDcxQ0Y4QUVBMjI4L2tPbUlk
NUhQTFpZRkFmaXUzaVNpTTBxNlZBTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tPbUlkNUhQTFpZRkFmaXUzaVNpTTBxNlZBTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjFDM0ExLzJEOTY3NzJFRTBEMDExRTg4QUU2MDcxQ0Y4
QUVBMjI4LzkzQjUwQ0IyN0MyODExRUQ4MUQzMEVEREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUpz0AwDQYJKoZIhvcNAQEL
BQADggEBAB5cvEPUV68Wv/1/1qzfVsNWrxZ53jm/25nX4wpxR7cPEhU6qM5CtumS
IibHpJYAGYA/vmVe+1UnREphcK36Plt3mFhk+H8EAmNON/2RBSr7dUDU8pK7KQAY
ClWzAlcDHWnDKIBy3D8aVMB0TJt2uCIrXWUNT+/WmgOUrPMn5/L5LxqaOT954OAP
5E+lSxa4C576agWecPyPU5+smCECSMIwAi4mfoJ7Rhc3ILpjU41U/ns02tk8z9Xy
I3alVqKUj8JMuiy+/6TAFNSkJMdNz1iepreAFW1Q3gW4s2cDdJ+4OtWHJOQBj8OK
uBOh7fr4vjFkvfbRn/NwXbUBgYjFOko=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:51:32 2025 by rpki-client