Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/66D788525C0C11EB89D7F330F8AEA228.roa
File: 66D788525C0C11EB89D7F330F8AEA228.roa (raw, json)
Hash identifier: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=
Subject key identifier: EC:A9:2C:F1:BF:65:71:66:2D:35:AC:35:DE:17:A9:CC:7A:B1:B8:DF
Certificate issuer: /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial: 3F
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/66D788525C0C11EB89D7F330F8AEA228.roa
Signing time: Thu 21 Jan 2021 17:16:30 +0000
ROA not before: Thu 21 Jan 2021 17:16:25 +0000
ROA not after: Tue 21 Jan 2031 17:16:25 +0000
asID: 6453
IP address blocks: 41.206.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Validity
Not Before: Jan 21 17:16:25 2021 GMT
Not After : Jan 21 17:16:25 2031 GMT
Subject: CN=6009b6ee-e7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:e1:00:33:f4:d9:d3:af:06:19:df:ba:e6:
c6:8a:77:99:fc:24:51:d0:bd:87:03:da:f4:9c:25:
37:dd:b3:04:38:17:86:d8:e3:91:c6:b0:d1:64:3b:
50:cf:99:2a:af:70:a1:c8:ed:2d:e4:71:5b:02:b0:
08:81:a1:b1:ab:be:0d:13:c3:3a:fb:73:79:91:ce:
34:1e:d8:2d:a7:36:8a:5c:9d:66:a1:ad:db:11:19:
0a:19:3f:2b:ea:47:fb:ee:f8:51:7b:b9:a6:15:56:
cd:3e:02:bf:cc:06:3a:93:16:8a:96:82:83:fb:44:
ac:85:ec:9c:95:7a:2d:3c:2c:ce:3b:4a:74:c5:c9:
eb:13:45:15:35:bf:90:a6:ff:52:63:22:d0:58:03:
18:11:00:aa:d0:9a:ad:a8:94:0e:67:b7:59:3d:9e:
f3:42:61:97:f5:3a:8f:d9:cf:52:e3:89:50:29:65:
47:c2:3f:28:5e:cc:b8:1f:4e:46:45:7a:67:48:0c:
f0:2e:43:7f:86:62:98:2a:e2:a0:d3:bf:ed:98:57:
2e:80:43:cd:e3:01:7a:1c:47:39:2b:da:0b:1b:c7:
97:ed:ab:69:ba:a8:27:63:cc:4d:b4:9d:a4:76:0e:
73:33:bd:2d:ea:6c:b4:9d:c9:f5:68:37:af:6a:91:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A9:2C:F1:BF:65:71:66:2D:35:AC:35:DE:17:A9:CC:7A:B1:B8:DF
X509v3 Authority Key Identifier:
keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/66D788525C0C11EB89D7F330F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.206.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:06:94:a3:d5:f8:d0:b6:b5:72:ce:a3:ee:99:7f:16:20:2a:
aa:d4:48:10:29:f6:19:94:5f:e1:29:59:71:1d:4d:8b:f1:e5:
6c:56:12:07:2e:d6:2d:e6:84:6f:3b:32:22:28:15:fd:84:53:
2d:46:bc:18:27:e2:47:32:f7:d8:cd:b8:36:20:f6:a1:1d:c7:
9d:25:24:69:51:4f:a3:97:52:a6:26:69:c0:c9:43:35:fd:16:
64:1b:34:fb:e2:85:10:ec:87:e8:52:ce:2d:65:ec:a4:5d:75:
3e:95:93:29:c7:b4:cd:6d:2b:58:f5:69:33:f0:f9:95:ef:d3:
48:46:a7:77:03:62:a7:74:22:79:96:42:10:1b:66:aa:c8:58:
e2:5e:c9:11:2b:b7:b6:fa:4b:5c:b0:2f:bf:4d:87:9d:79:ac:
06:9a:bb:96:f1:03:eb:4d:3b:13:45:72:89:31:e9:f4:07:4e:
ea:53:2a:0d:d6:60:fc:43:29:01:c0:a6:cf:2a:12:92:cf:ff:
f1:34:9a:99:45:dc:6a:8e:12:b6:99:f2:fb:0d:0e:dd:cc:4d:
7d:8e:61:2a:2f:b8:f6:b2:0e:c8:c7:dd:a0:87:dd:a5:b3:80:
7b:06:aa:19:12:13:1f:5f:04:87:01:6b:c4:a9:c1:22:8f:9b:
c2:5d:07:25
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBPzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RkYxN0FGMTEwLwYDVQQFEyg5Q0Q0MTM5NkFCQ0Y5QkI5RUZGNkUyNjg1NTMyNEY4
M0M1OURDNjlBMB4XDTIxMDEyMTE3MTYyNVoXDTMxMDEyMTE3MTYyNVowGDEWMBQG
A1UEAxMNNjAwOWI2ZWUtZTdmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOOB4QAz9NnTrwYZ37rmxop3mfwkUdC9hwPa9JwlN92zBDgXhtjjkcaw0WQ7
UM+ZKq9wocjtLeRxWwKwCIGhsau+DRPDOvtzeZHONB7YLac2ilydZqGt2xEZChk/
K+pH++74UXu5phVWzT4Cv8wGOpMWipaCg/tErIXsnJV6LTwszjtKdMXJ6xNFFTW/
kKb/UmMi0FgDGBEAqtCaraiUDme3WT2e80Jhl/U6j9nPUuOJUCllR8I/KF7MuB9O
RkV6Z0gM8C5Df4ZimCrioNO/7ZhXLoBDzeMBehxHOSvaCxvHl+2rabqoJ2PMTbSd
pHYOczO9LepstJ3J9Wg3r2qRzEMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTsqSzx
v2VxZi01rDXeF6nMerG43zAfBgNVHSMEGDAWgBSc1BOWq8+bue/24mhVMk+DxZ3G
mjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkZGMTcvQTQ0Q0JDN0UzMzIyMTFFQjkzQTIxNTcxRjhBRUEyMjgvbk5RVGxx
dlBtN252OXVKb1ZUSlBnOFdkeHBvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbk5RVGxxdlBtN252OXVKb1ZUSlBnOFdkeHBvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkZGMTcvQTQ0Q0JDN0UzMzIyMTFFQjkzQTIxNTcxRjhB
RUEyMjgvNjZENzg4NTI1QzBDMTFFQjg5RDdGMzMwRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASnOvDANBgkqhkiG9w0BAQsF
AAOCAQEAoAaUo9X40La1cs6j7pl/FiAqqtRIECn2GZRf4SlZcR1Ni/HlbFYSBy7W
LeaEbzsyIigV/YRTLUa8GCfiRzL32M24NiD2oR3HnSUkaVFPo5dSpiZpwMlDNf0W
ZBs0++KFEOyH6FLOLWXspF11PpWTKce0zW0rWPVpM/D5le/TSEandwNip3QieZZC
EBtmqshY4l7JESu3tvpLXLAvv02HnXmsBpq7lvED6007E0VyiTHp9AdO6lMqDdZg
/EMpAcCmzyoSks//8TSamUXcao4Stpny+w0O3cxNfY5hKi+49rIOyMfdoIfdpbOA
ewaqGRITH18EhwFrxKnBIo+bwl0HJQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org