Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/B2E0450EE3A911E99D048322F8AEA228.roa
File: B2E0450EE3A911E99D048322F8AEA228.roa (raw, json)
Hash identifier: 9hAcLh1dvKVs2136J7HCIPg/BmbZ3SUhxACWArab3Io=
Subject key identifier: D3:EC:E7:81:FB:00:35:8A:29:79:5A:FF:C4:10:41:02:41:38:92:BD
Certificate issuer: /CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Certificate serial: 02
Authority key identifier: 02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/B2E0450EE3A911E99D048322F8AEA228.roa
Signing time: Mon 30 Sep 2019 17:42:41 +0000
ROA not before: Mon 30 Sep 2019 17:42:36 +0000
ROA not after: Sun 30 Sep 2029 17:42:36 +0000
asID: 36985
IP address blocks: 41.77.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Validity
Not Before: Sep 30 17:42:36 2019 GMT
Not After : Sep 30 17:42:36 2029 GMT
Subject: CN=5d923e90-7fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:9e:99:ae:c5:8a:b9:3f:34:2d:2e:23:48:
6b:d1:a8:1a:fa:44:89:26:eb:39:3d:02:59:3f:9e:
92:5d:0c:1d:f9:1d:ee:38:6a:46:de:57:71:53:7c:
16:d9:d4:cb:9d:cd:4c:d3:7f:2c:40:06:2f:30:7d:
6a:b2:55:d1:9b:4c:3b:20:97:c4:69:72:12:7b:cc:
6e:c9:27:b6:f9:03:28:29:c7:bb:9c:45:f5:1b:dc:
d4:0a:24:e3:71:0c:7e:9c:d6:d5:b1:ea:3a:96:67:
73:40:98:bc:22:84:e1:9b:10:85:06:76:b2:4c:dd:
a9:35:33:11:87:0b:cb:a8:86:37:25:92:98:72:54:
bd:30:13:ab:c8:3a:45:8d:55:65:6a:bf:35:62:6d:
a4:81:6a:09:65:ca:c3:0a:74:fb:a3:23:4a:9a:ee:
4e:fc:17:c3:a2:9a:d3:11:18:e4:ea:9d:0c:a1:31:
88:39:30:d2:15:9d:7a:9a:52:d4:c6:b1:e1:3c:12:
1d:ec:b4:a6:df:03:3f:9f:bc:ea:8b:30:7c:ef:d5:
dd:98:1d:30:ad:b1:a7:18:33:75:45:76:a5:99:8f:
a0:97:75:e9:c1:5d:35:92:5c:61:73:56:08:36:10:
d7:77:ee:00:72:13:db:e8:f6:40:38:6e:de:19:79:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:E7:81:FB:00:35:8A:29:79:5A:FF:C4:10:41:02:41:38:92:BD
X509v3 Authority Key Identifier:
keyid:02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/B2E0450EE3A911E99D048322F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.77.56.0/21
Signature Algorithm: sha256WithRSAEncryption
96:dc:f3:d2:76:87:13:d4:94:23:02:cc:90:0b:6f:8b:f5:2f:
c6:c3:fc:fb:8a:6f:42:d5:ed:ab:25:61:9e:87:be:94:b4:66:
a0:96:af:d3:f8:ed:51:3d:27:3e:49:8f:03:b9:0e:37:6c:11:
20:91:be:f1:6c:8a:b7:d5:58:bd:10:ac:12:eb:68:47:c6:ff:
a9:ae:e7:e5:4c:73:94:a9:0e:35:50:25:b7:c3:59:37:fe:df:
46:e6:7c:aa:de:0e:1b:42:5c:bb:25:27:a0:33:07:7d:e5:f4:
71:a5:49:62:7b:2e:52:bb:b3:5b:4e:06:16:ec:bd:32:c5:1b:
17:7f:80:38:30:6e:96:61:bd:4c:27:2e:1d:ce:f1:39:f5:57:
80:ad:c0:77:9c:b9:40:0f:11:2e:39:dd:fc:73:d9:3d:d9:2e:
03:5e:f0:2b:9c:b9:6d:14:ef:1b:47:36:61:fb:4b:8f:18:21:
08:2e:bd:13:28:05:de:17:12:4d:9a:85:6f:ed:49:83:85:3d:
9b:d9:b9:73:45:b1:1f:23:cb:78:1f:fc:c6:07:62:77:13:ff:
3a:4d:66:e7:f1:5c:f8:f0:bd:1c:10:c1:39:ba:6d:ba:b0:e1:
0d:32:cd:c1:5f:6c:6a:8b:16:b1:12:cf:bc:fd:89:c2:58:3e:
bd:f3:1d:dd
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NTJBN0FGMTEwLwYDVQQFEygwMjdFMUE0NDYzQzY4NUZCRDYzODYzRjlEM0IyM0JB
QzJEOTNCMTY4MB4XDTE5MDkzMDE3NDIzNloXDTI5MDkzMDE3NDIzNlowGDEWMBQG
A1UEAxMNNWQ5MjNlOTAtN2ZlNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALu1npmuxYq5PzQtLiNIa9GoGvpEiSbrOT0CWT+ekl0MHfkd7jhqRt5XcVN8
FtnUy53NTNN/LEAGLzB9arJV0ZtMOyCXxGlyEnvMbskntvkDKCnHu5xF9Rvc1Aok
43EMfpzW1bHqOpZnc0CYvCKE4ZsQhQZ2skzdqTUzEYcLy6iGNyWSmHJUvTATq8g6
RY1VZWq/NWJtpIFqCWXKwwp0+6MjSpruTvwXw6Ka0xEY5OqdDKExiDkw0hWdeppS
1Max4TwSHey0pt8DP5+86oswfO/V3ZgdMK2xpxgzdUV2pZmPoJd16cFdNZJcYXNW
CDYQ13fuAHIT2+j2QDhu3hl5nkkCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBTT7OeB
+wA1iil5Wv/EEEECQTiSvTAfBgNVHSMEGDAWgBQCfhpEY8aF+9Y4Y/nTsjusLZOx
aDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjUyQTcvODk0OTdBNjBFMzgzMTFFOTlFNTVGNTg1RjhBRUEyMjgvQW40YVJH
UEdoZnZXT0dQNTA3STdyQzJUc1dnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQW40YVJHUEdoZnZXT0dQNTA3STdyQzJUc1dnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjUyQTcvODk0OTdBNjBFMzgzMTFFOTlFNTVGNTg1RjhB
RUEyMjgvQjJFMDQ1MEVFM0E5MTFFOTlEMDQ4MzIyRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKU04MA0GCSqGSIb3DQEBCwUAA4IBAQCW
3PPSdocT1JQjAsyQC2+L9S/Gw/z7im9C1e2rJWGeh76UtGaglq/T+O1RPSc+SY8D
uQ43bBEgkb7xbIq31Vi9EKwS62hHxv+pruflTHOUqQ41UCW3w1k3/t9G5nyq3g4b
Qly7JSegMwd95fRxpUliey5Su7NbTgYW7L0yxRsXf4A4MG6WYb1MJy4dzvE59VeA
rcB3nLlADxEuOd38c9k92S4DXvArnLltFO8bRzZh+0uPGCEILr0TKAXeFxJNmoVv
7UmDhT2b2blzRbEfI8t4H/zGB2J3E/86TWbn8Vz48L0cEME5um26sOENMs3BX2xq
ixaxEs+8/YnCWD698x3d
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:51 2024 by rpki-client on console-fra.rpki-client.org