Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/FE6D92CA5C0B11EB95157330F8AEA228.roa
File: FE6D92CA5C0B11EB95157330F8AEA228.roa (raw, json)
Hash identifier: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=
Subject key identifier: 72:6D:5D:F8:DB:48:1A:AB:9A:A9:26:59:49:E8:D9:D9:18:CF:11:2C
Certificate issuer: /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial: 39
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/FE6D92CA5C0B11EB95157330F8AEA228.roa
Signing time: Thu 21 Jan 2021 17:13:36 +0000
ROA not before: Thu 21 Jan 2021 17:13:28 +0000
ROA not after: Tue 21 Jan 2031 17:13:28 +0000
asID: 6453
IP address blocks: 41.206.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Validity
Not Before: Jan 21 17:13:28 2021 GMT
Not After : Jan 21 17:13:28 2031 GMT
Subject: CN=6009b63f-0c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:87:3f:60:b3:6e:f7:56:6a:f2:a2:c0:5b:
8e:4e:22:45:1b:90:f8:3d:5d:5e:38:06:2c:9e:e7:
0c:52:1d:bb:32:7c:52:ce:df:22:c4:a9:de:3a:92:
99:7f:c8:9d:b5:af:f4:d8:02:96:11:75:a8:8a:aa:
9e:99:45:44:b9:a9:7e:12:91:7e:ef:b9:a3:c1:b3:
6a:39:24:6d:4c:47:83:b0:2f:9c:ae:3b:a4:b9:77:
14:65:8d:8f:91:9c:af:ca:a0:fc:05:b2:c2:6a:43:
b5:dd:f5:12:a0:54:f7:94:04:36:5d:86:88:e5:2d:
18:6a:38:7b:12:0e:c8:10:36:d4:0f:b8:53:f1:aa:
3a:78:53:0a:db:5f:91:60:0c:01:ba:60:6f:4c:28:
a0:e1:3b:bb:dc:4f:1f:7c:94:87:3e:8d:14:b1:02:
a2:cf:e8:51:35:52:25:a4:c2:b2:21:0e:b6:09:05:
a7:e7:79:18:20:83:de:85:9d:97:0f:b3:f9:64:46:
58:2a:de:1b:8d:5f:b4:3e:15:b4:dd:fb:84:05:2c:
39:c1:10:a6:fa:0a:ac:2c:82:47:6b:7c:a7:6d:5e:
ab:5f:3e:0e:68:8d:6d:60:da:98:e6:33:49:e6:c1:
02:03:b9:12:3c:5e:68:db:40:0b:91:91:ba:f2:18:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6D:5D:F8:DB:48:1A:AB:9A:A9:26:59:49:E8:D9:D9:18:CF:11:2C
X509v3 Authority Key Identifier:
keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/FE6D92CA5C0B11EB95157330F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.206.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:73:33:9b:1a:07:62:e6:2e:9c:f7:0f:0d:5c:0c:1e:68:73:
1c:19:76:28:1d:82:a7:29:5a:ed:fe:f2:98:bb:e2:2a:38:52:
05:ce:b6:6c:49:ed:c8:a7:a8:88:3b:3c:7e:a0:43:ce:5c:d3:
ab:c8:39:ed:af:05:09:ca:8e:59:b5:1c:20:00:46:54:d7:7c:
34:e7:fa:ea:38:4b:e0:40:a0:23:0f:ac:fc:1d:3f:b8:e9:58:
b1:c4:1c:6e:a1:51:cd:d6:e3:e1:64:fe:fd:7c:34:34:07:58:
fd:eb:df:2b:1c:f3:da:75:56:3a:c9:8e:e4:33:78:ef:92:53:
26:83:c7:7a:c1:ca:26:b8:61:2b:e3:12:d9:5e:5a:33:be:d2:
ab:bf:5f:71:5e:3c:c6:f4:04:5a:3d:bf:ac:e0:27:75:58:a4:
b6:a0:01:ba:0f:d1:f7:8a:7b:01:91:ac:f8:99:0c:69:d4:bd:
35:73:85:3c:40:87:5b:ef:7b:93:e6:cd:88:a6:5e:ba:02:f1:
da:57:8f:ae:b4:f9:38:b7:d6:3b:64:51:02:44:b3:c8:7a:73:
c0:c5:85:3c:5d:69:1a:83:05:03:32:b4:7e:f3:27:32:27:63:
80:10:8e:9c:7e:db:64:51:98:a0:f6:38:c3:26:66:57:e9:b2:
c4:0d:6a:1b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBOTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RkYxN0FGMTEwLwYDVQQFEyg5Q0Q0MTM5NkFCQ0Y5QkI5RUZGNkUyNjg1NTMyNEY4
M0M1OURDNjlBMB4XDTIxMDEyMTE3MTMyOFoXDTMxMDEyMTE3MTMyOFowGDEWMBQG
A1UEAxMNNjAwOWI2M2YtMGM2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkmhz9gs273VmryosBbjk4iRRuQ+D1dXjgGLJ7nDFIduzJ8Us7fIsSp3jqS
mX/InbWv9NgClhF1qIqqnplFRLmpfhKRfu+5o8GzajkkbUxHg7AvnK47pLl3FGWN
j5Gcr8qg/AWywmpDtd31EqBU95QENl2GiOUtGGo4exIOyBA21A+4U/GqOnhTCttf
kWAMAbpgb0wooOE7u9xPH3yUhz6NFLECos/oUTVSJaTCsiEOtgkFp+d5GCCD3oWd
lw+z+WRGWCreG41ftD4VtN37hAUsOcEQpvoKrCyCR2t8p21eq18+DmiNbWDamOYz
SebBAgO5EjxeaNtAC5GRuvIYkOsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRybV34
20gaq5qpJllJ6NnZGM8RLDAfBgNVHSMEGDAWgBSc1BOWq8+bue/24mhVMk+DxZ3G
mjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkZGMTcvQTQ0Q0JDN0UzMzIyMTFFQjkzQTIxNTcxRjhBRUEyMjgvbk5RVGxx
dlBtN252OXVKb1ZUSlBnOFdkeHBvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbk5RVGxxdlBtN252OXVKb1ZUSlBnOFdkeHBvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkZGMTcvQTQ0Q0JDN0UzMzIyMTFFQjkzQTIxNTcxRjhB
RUEyMjgvRkU2RDkyQ0E1QzBCMTFFQjk1MTU3MzMwRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnOoDANBgkqhkiG9w0BAQsF
AAOCAQEAK3MzmxoHYuYunPcPDVwMHmhzHBl2KB2Cpyla7f7ymLviKjhSBc62bEnt
yKeoiDs8fqBDzlzTq8g57a8FCcqOWbUcIABGVNd8NOf66jhL4ECgIw+s/B0/uOlY
scQcbqFRzdbj4WT+/Xw0NAdY/evfKxzz2nVWOsmO5DN475JTJoPHesHKJrhhK+MS
2V5aM77Sq79fcV48xvQEWj2/rOAndViktqABug/R94p7AZGs+JkMadS9NXOFPECH
W+97k+bNiKZeugLx2lePrrT5OLfWO2RRAkSzyHpzwMWFPF1pGoMFAzK0fvMnMidj
gBCOnH7bZFGYoPY4wyZmV+myxA1qGw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org