Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/EA19B9687E3911EE8853E63E4AD9E6FC.roa
File: EA19B9687E3911EE8853E63E4AD9E6FC.roa (raw, json)
Hash identifier: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=
Subject key identifier: 9E:3B:9E:85:C6:B6:33:18:C7:B9:5F:17:4D:74:7E:DB:43:F2:65:0F
Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Certificate serial: 04
Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/EA19B9687E3911EE8853E63E4AD9E6FC.roa
Signing time: Wed 08 Nov 2023 13:22:50 +0000
ROA not before: Wed 08 Nov 2023 13:22:47 +0000
ROA not after: Sun 08 Nov 2043 13:22:47 +0000
asID: 36962
IP address blocks: 41.216.64.0/24 maxlen: 24
41.216.65.0/24 maxlen: 24
41.216.66.0/24 maxlen: 24
41.216.67.0/24 maxlen: 24
41.216.68.0/24 maxlen: 24
41.216.69.0/24 maxlen: 24
41.216.70.0/24 maxlen: 24
41.216.71.0/24 maxlen: 24
41.216.72.0/24 maxlen: 24
41.216.73.0/24 maxlen: 24
41.216.74.0/24 maxlen: 24
41.216.75.0/24 maxlen: 24
41.216.76.0/24 maxlen: 24
41.216.77.0/24 maxlen: 24
41.216.78.0/24 maxlen: 24
41.216.79.0/24 maxlen: 24
41.216.80.0/24 maxlen: 24
41.216.81.0/24 maxlen: 24
41.216.82.0/24 maxlen: 24
41.216.83.0/24 maxlen: 24
41.216.84.0/24 maxlen: 24
41.216.85.0/24 maxlen: 24
41.216.86.0/24 maxlen: 24
41.216.87.0/24 maxlen: 24
41.216.88.0/24 maxlen: 24
41.216.89.0/24 maxlen: 24
41.216.90.0/24 maxlen: 24
41.216.91.0/24 maxlen: 24
41.216.92.0/24 maxlen: 24
41.216.93.0/24 maxlen: 24
41.216.94.0/24 maxlen: 24
41.216.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Validity
Not Before: Nov 8 13:22:47 2023 GMT
Not After : Nov 8 13:22:47 2043 GMT
Subject: CN=654b8baa-f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:58:b9:10:e8:b4:cd:24:b6:65:08:f7:b6:
b2:8d:1f:ac:d2:6d:18:6b:39:37:61:ad:a5:aa:9e:
3f:a8:92:5a:c8:3e:5b:f9:5d:30:33:5d:de:e3:58:
c6:84:51:2d:b6:a1:9f:2c:66:89:0c:80:78:8e:59:
91:ca:76:05:6b:cd:33:46:7e:9c:77:a6:30:57:e5:
70:8e:e8:75:59:1f:29:9a:c4:fb:74:95:f3:82:78:
9e:4b:40:3a:a0:4d:59:c1:4c:b7:55:aa:c4:93:e1:
d7:27:9b:66:22:2b:34:c6:0c:91:c1:57:07:49:49:
0f:9c:23:46:7e:be:a2:73:37:c1:13:27:7c:c6:55:
11:6f:93:1b:af:f2:bb:5c:78:74:cc:8a:c1:fc:29:
d0:b3:d6:2b:57:51:08:c8:e6:e6:67:ee:b2:06:6a:
a4:e1:f5:f2:a3:2c:c5:73:0f:f1:b8:05:a4:6c:15:
6b:a8:7c:a6:f1:36:4c:32:bc:3b:c2:25:5c:02:35:
db:6d:9f:c7:d1:11:dd:55:ec:d2:0f:a9:26:21:cf:
b6:a5:23:b6:65:c4:a6:c2:5a:10:0e:c0:46:5b:b3:
06:f1:80:1a:b5:6e:72:87:dc:39:e3:d6:34:d1:f0:
ec:fd:5b:c5:8e:78:a1:5c:0d:43:4a:42:30:30:b7:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:9E:85:C6:B6:33:18:C7:B9:5F:17:4D:74:7E:DB:43:F2:65:0F
X509v3 Authority Key Identifier:
keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/EA19B9687E3911EE8853E63E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:33:20:c7:d1:6b:9a:db:19:ce:95:36:c3:17:9e:8a:5b:5b:
37:e4:47:b0:4f:c6:06:75:64:64:14:f1:a1:0a:89:db:81:6e:
23:32:59:d0:bc:f1:73:43:b7:e0:6c:b3:53:11:47:2a:bc:c7:
2c:6a:4e:71:cd:ae:e3:2f:61:2f:ed:e1:8b:10:b1:60:e8:76:
f7:a8:ac:30:19:5b:dd:9c:12:32:96:32:9a:b6:e1:83:26:f1:
61:6b:23:96:22:1e:90:8a:fa:9c:f3:26:53:83:a9:a2:b3:c0:
2b:70:0d:9d:9f:31:03:a7:91:e9:e9:4b:31:db:1f:2a:be:fe:
ac:d2:8e:98:4d:62:4e:5b:e9:a3:22:59:ea:f4:f0:f1:cb:80:
19:2f:ed:c6:74:ac:47:7e:f5:e9:b2:71:74:4f:b1:18:16:57:
53:8a:d0:8d:e6:0e:05:5d:3f:cb:94:e4:14:50:f7:b4:4c:2c:
c4:b1:2c:5a:62:43:38:48:33:52:22:64:b1:1a:d4:37:bd:f7:
93:39:1b:62:41:58:5f:c8:62:4f:c5:cf:74:34:71:92:dd:1d:
5f:9d:c8:63:16:6b:a2:65:df:a8:ea:56:d2:e0:8e:4a:e9:dd:
f0:d3:65:8d:98:2f:02:1d:5e:19:68:32:5e:88:50:a6:84:63:
5f:1b:87:f9
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NDEyRUFGMTEwLwYDVQQFEyhENjI4RTRDOTZBQkE5Q0ZCMTI0NDc3ODY3QkJERjFB
NDQzNUYwRjVCMB4XDTIzMTEwODEzMjI0N1oXDTQzMTEwODEzMjI0N1owGDEWMBQG
A1UEAxMNNjU0YjhiYWEtZjg1ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMW0WLkQ6LTNJLZlCPe2so0frNJtGGs5N2GtpaqeP6iSWsg+W/ldMDNd3uNY
xoRRLbahnyxmiQyAeI5Zkcp2BWvNM0Z+nHemMFflcI7odVkfKZrE+3SV84J4nktA
OqBNWcFMt1WqxJPh1yebZiIrNMYMkcFXB0lJD5wjRn6+onM3wRMnfMZVEW+TG6/y
u1x4dMyKwfwp0LPWK1dRCMjm5mfusgZqpOH18qMsxXMP8bgFpGwVa6h8pvE2TDK8
O8IlXAI1222fx9ER3VXs0g+pJiHPtqUjtmXEpsJaEA7ARluzBvGAGrVucofcOePW
NNHw7P1bxY54oVwNQ0pCMDC30GUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSeO56F
xrYzGMe5XxdNdH7bQ/JlDzAfBgNVHSMEGDAWgBTWKOTJarqc+xJEd4Z7vfGkQ18P
WzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjQxMkUvM0EyMzlBMjA3RTM4MTFFRTg1NEVFNDM5NEFEOUU2RkMvMWlqa3lX
cTZuUHNTUkhlR2U3M3hwRU5mRDFzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMWlqa3lXcTZuUHNTUkhlR2U3M3hwRU5mRDFzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQxMkUvM0EyMzlBMjA3RTM4MTFFRTg1NEVFNDM5NEFE
OUU2RkMvRUExOUI5Njg3RTM5MTFFRTg4NTNFNjNFNEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBSnYQDANBgkqhkiG9w0BAQsF
AAOCAQEAPDMgx9FrmtsZzpU2wxeeiltbN+RHsE/GBnVkZBTxoQqJ24FuIzJZ0Lzx
c0O34GyzUxFHKrzHLGpOcc2u4y9hL+3hixCxYOh296isMBlb3ZwSMpYymrbhgybx
YWsjliIekIr6nPMmU4OporPAK3ANnZ8xA6eR6elLMdsfKr7+rNKOmE1iTlvpoyJZ
6vTw8cuAGS/txnSsR3716bJxdE+xGBZXU4rQjeYOBV0/y5TkFFD3tEwsxLEsWmJD
OEgzUiJksRrUN733kzkbYkFYX8hiT8XPdDRxkt0dX53IYxZromXfqOpW0uCOSund
8NNljZgvAh1eGWgyXohQpoRjXxuH+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:32 2024 by rpki-client on console-fra.rpki-client.org