Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/A9A46126E81A11EEAA8ECCC1775412E6.roa
File: A9A46126E81A11EEAA8ECCC1775412E6.roa (raw, json)
Hash identifier: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=
Subject key identifier: 76:74:09:DB:9C:91:FB:32:B2:03:51:2F:D0:94:04:E9:DB:C9:E7:2D
Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Certificate serial: 99
Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/A9A46126E81A11EEAA8ECCC1775412E6.roa
Signing time: Fri 22 Mar 2024 07:06:11 +0000
ROA not before: Fri 22 Mar 2024 07:06:07 +0000
ROA not after: Tue 22 Mar 2044 07:06:07 +0000
asID: 36962
IP address blocks: 41.216.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Validity
Not Before: Mar 22 07:06:07 2024 GMT
Not After : Mar 22 07:06:07 2044 GMT
Subject: CN=65fd2de3-6a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:a0:a6:3f:48:0c:0f:b7:fc:bc:ff:d8:9f:
3e:ec:65:ef:4b:df:15:31:64:17:9e:e9:f2:7b:6e:
69:56:b8:c6:c0:3b:78:d3:da:b2:58:f2:3a:fe:b2:
c2:17:97:ea:ce:e4:7d:57:5a:e2:d3:2d:29:65:4b:
51:ed:54:48:3a:6e:b0:83:7a:31:8c:91:1b:77:3c:
49:7a:9f:8e:45:c2:ac:7d:0f:db:41:ef:67:79:16:
64:1b:33:f4:08:4b:44:52:8d:87:ad:6e:6b:b3:99:
80:18:93:88:06:11:7f:2e:22:fe:b2:69:0a:f4:af:
7d:32:b1:32:ef:85:4f:9c:e9:7d:55:dc:a3:64:70:
d8:ea:ed:53:a4:ba:e4:16:75:94:e0:20:ea:7c:31:
93:6a:cd:7f:ac:9f:5f:81:b3:97:3f:ae:72:f7:cd:
6e:e7:e0:e1:04:eb:5d:d3:2b:1c:d8:fc:4c:dd:9a:
27:83:e1:4b:57:ba:34:c6:b2:0d:79:7e:ac:96:ba:
bc:68:40:86:4f:77:70:e9:96:d9:02:cb:ba:41:e6:
d8:9d:a2:05:4f:4b:28:fb:fa:fe:c6:58:58:2a:ee:
99:5e:a7:af:de:2f:51:21:12:5f:cd:70:f4:23:e5:
b0:73:be:45:f6:50:fa:56:2f:b9:e2:cb:ba:b3:24:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:74:09:DB:9C:91:FB:32:B2:03:51:2F:D0:94:04:E9:DB:C9:E7:2D
X509v3 Authority Key Identifier:
keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/A9A46126E81A11EEAA8ECCC1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:7f:c0:ff:00:9b:45:71:3a:66:4c:c9:23:66:31:a8:5b:ef:
45:87:4b:bf:9b:8b:00:a4:4f:e5:95:fb:39:a5:80:3e:e5:04:
5c:4e:7a:33:fa:d3:7c:a9:09:9d:e7:5d:68:b3:2a:62:f1:2b:
6c:5c:2f:8e:2e:aa:e9:14:a4:0e:40:d0:28:c2:ba:fa:d1:83:
28:fd:c9:62:ca:85:aa:4d:3e:ea:13:45:75:37:cb:fc:21:3a:
04:37:55:b3:d8:6a:62:a4:3a:8c:79:36:f0:62:ab:72:35:9b:
f7:da:db:ba:b1:17:6b:61:73:7d:af:be:49:48:08:5b:56:b1:
c8:90:4f:f6:98:d6:4b:63:5d:91:eb:e4:d7:84:6d:91:b3:63:
aa:1d:a0:b5:41:6e:db:17:41:a5:9a:1a:bf:40:84:85:90:2d:
4a:19:cf:05:c3:0b:e2:9a:18:e3:58:7b:e7:28:df:85:b2:0e:
c0:fc:3a:bd:18:c8:29:c3:34:47:e6:34:df:52:0d:e4:6e:59:
ec:50:d3:50:af:4d:2e:d1:fb:b8:67:88:dc:13:6c:4a:5b:88:
21:83:e5:e6:77:6a:6c:c1:df:6d:62:12:e8:1a:3f:f5:6c:3e:
20:ae:eb:9c:0d:8c:5c:dd:ed:60:96:ff:f2:73:1d:44:e0:b8:
84:23:7c:f6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQxMkVBRjExMC8GA1UEBRMoRDYyOEU0Qzk2QUJBOUNGQjEyNDQ3Nzg2N0JCREYx
QTQ0MzVGMEY1QjAeFw0yNDAzMjIwNzA2MDdaFw00NDAzMjIwNzA2MDdaMBgxFjAU
BgNVBAMTDTY1ZmQyZGUzLTZhMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5HqCmP0gMD7f8vP/Ynz7sZe9L3xUxZBee6fJ7bmlWuMbAO3jT2rJY8jr+
ssIXl+rO5H1XWuLTLSllS1HtVEg6brCDejGMkRt3PEl6n45Fwqx9D9tB72d5FmQb
M/QIS0RSjYetbmuzmYAYk4gGEX8uIv6yaQr0r30ysTLvhU+c6X1V3KNkcNjq7VOk
uuQWdZTgIOp8MZNqzX+sn1+Bs5c/rnL3zW7n4OEE613TKxzY/EzdmieD4UtXujTG
sg15fqyWurxoQIZPd3DpltkCy7pB5tidogVPSyj7+v7GWFgq7plep6/eL1EhEl/N
cPQj5bBzvkX2UPpWL7niy7qzJEjDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdnQJ
25yR+zKyA1Ev0JQE6dvJ5y0wHwYDVR0jBBgwFoAU1ijkyWq6nPsSRHeGe73xpENf
D1swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0MTJFLzNBMjM5QTIwN0UzODExRUU4NTRFRTQzOTRBRDlFNkZDLzFpamt5
V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFpamt5V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI0MTJFLzNBMjM5QTIwN0UzODExRUU4NTRFRTQzOTRB
RDlFNkZDL0E5QTQ2MTI2RTgxQTExRUVBQThFQ0NDMTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUp2EAwDQYJKoZIhvcNAQEL
BQADggEBAI1/wP8Am0VxOmZMySNmMahb70WHS7+biwCkT+WV+zmlgD7lBFxOejP6
03ypCZ3nXWizKmLxK2xcL44uqukUpA5A0CjCuvrRgyj9yWLKhapNPuoTRXU3y/wh
OgQ3VbPYamKkOox5NvBiq3I1m/fa27qxF2thc32vvklICFtWsciQT/aY1ktjXZHr
5NeEbZGzY6odoLVBbtsXQaWaGr9AhIWQLUoZzwXDC+KaGONYe+co34WyDsD8Or0Y
yCnDNEfmNN9SDeRuWexQ01CvTS7R+7hniNwTbEpbiCGD5eZ3amzB321iEugaP/Vs
PiCu65wNjFzd7WCW//JzHUTguIQjfPY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org