Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/E75E05A46D2111EE8C23411E4AD9E6FC.roa
File: E75E05A46D2111EE8C23411E4AD9E6FC.roa (raw, json)
Hash identifier: 0O/BSVMJx3QcGl9pStzGQl0Z9gUsbCg2cUHJG/Fu70k=
Subject key identifier: 68:E1:EE:EA:06:E6:96:F9:64:C2:70:14:7D:31:8F:1F:D5:F2:95:A4
Certificate issuer: /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial: 043C
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/E75E05A46D2111EE8C23411E4AD9E6FC.roa
Signing time: Tue 17 Oct 2023 19:18:08 +0000
ROA not before: Tue 17 Oct 2023 19:18:03 +0000
ROA not after: Tue 17 Oct 2028 19:18:03 +0000
asID: 37619
IP address blocks: 41.197.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Validity
Not Before: Oct 17 19:18:03 2023 GMT
Not After : Oct 17 19:18:03 2028 GMT
Subject: CN=652eddf0-b382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:85:99:76:81:38:9d:6c:18:86:91:e8:92:
da:38:08:99:86:71:5d:5a:27:54:72:db:f7:db:e7:
59:b8:dc:cb:55:d1:75:0f:93:32:c4:22:5b:f8:ce:
44:b1:b5:05:d3:9f:9f:18:65:8d:fd:ce:95:49:10:
6e:3e:f5:55:1c:41:9a:e9:a4:03:7a:90:80:77:74:
9a:45:87:d7:ee:89:82:43:cb:bf:a9:ff:52:61:3b:
f6:f9:c9:23:34:0a:d2:f8:9c:4c:ca:0c:ec:19:d3:
ae:70:21:51:64:a8:d8:90:30:09:b0:c8:28:c2:be:
35:aa:77:bd:50:8b:2f:08:95:e7:31:44:5d:13:c8:
6d:87:20:92:46:bb:20:f8:03:cc:fa:0b:a8:de:d4:
76:d9:bc:47:2d:d3:0f:32:84:30:95:79:06:28:66:
02:ba:fa:94:65:b8:e5:b2:0b:5d:f9:5b:3c:e2:8f:
52:aa:2d:82:cc:e0:ca:c0:8a:cc:f7:48:3f:ec:21:
ae:4c:b3:7b:e5:f9:5d:6d:df:e9:aa:78:e4:1a:2b:
7f:95:90:00:63:3d:18:85:1e:ab:83:8f:0e:ae:92:
44:3c:e6:b2:43:c6:c0:b8:d6:4e:ee:40:4d:06:e0:
97:26:5f:54:26:9c:40:a9:5e:e4:86:1a:93:e6:74:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:EE:EA:06:E6:96:F9:64:C2:70:14:7D:31:8F:1F:D5:F2:95:A4
X509v3 Authority Key Identifier:
keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/E75E05A46D2111EE8C23411E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.197.192.0/20
Signature Algorithm: sha256WithRSAEncryption
18:d9:a5:05:5f:22:7b:d8:d9:73:79:9d:fe:eb:65:a4:20:3d:
17:8d:39:ef:b4:90:cc:4e:dd:90:fc:dd:6f:a1:bd:29:5e:aa:
c9:e4:ed:48:01:2c:83:fd:ef:84:90:ba:91:b5:52:1d:9f:91:
b7:97:2f:52:7a:d4:23:fc:a9:84:0b:75:ad:6e:12:57:88:7c:
4b:6f:33:07:06:e3:eb:53:7f:a2:ab:f8:92:e2:49:de:a7:6f:
6d:bc:6c:9b:4d:af:65:ac:26:7d:5e:a6:7c:b9:c8:a2:ea:61:
22:40:3c:9c:82:b6:f2:a7:56:58:69:f0:d9:a0:af:d4:f6:a4:
5b:70:ef:0b:f0:b8:cd:c0:e6:db:e3:a6:e1:1f:d1:64:bf:75:
ec:cd:8a:8e:f2:93:d4:e3:a7:c5:8e:e7:9d:cf:c8:de:be:73:
4d:a5:e8:3b:bf:87:43:58:e8:5e:43:90:e4:fa:88:f5:ed:8e:
4c:18:5b:41:6f:87:b0:89:4c:f7:d5:8e:11:af:fb:7f:7c:5c:
f6:24:08:57:35:28:3d:72:a7:5c:8f:37:dc:9b:82:72:a6:aa:
3e:48:8b:9b:ad:fd:8d:56:29:b0:68:0c:05:d6:4e:2e:3a:ac:
9f:f2:4c:43:b3:c6:9d:41:40:e4:c4:f4:89:77:dc:2c:d3:5a:
e1:db:19:f4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
M0FERjdBRjExMC8GA1UEBRMoRTczRDMwMUY5MTBENTZFQkFCN0ExMTEwM0JFOEJF
Mjc1Mzg4QjcyQjAeFw0yMzEwMTcxOTE4MDNaFw0yODEwMTcxOTE4MDNaMBgxFjAU
BgNVBAMTDTY1MmVkZGYwLWIzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/JYWZdoE4nWwYhpHokto4CJmGcV1aJ1Ry2/fb51m43MtV0XUPkzLEIlv4
zkSxtQXTn58YZY39zpVJEG4+9VUcQZrppAN6kIB3dJpFh9fuiYJDy7+p/1JhO/b5
ySM0CtL4nEzKDOwZ065wIVFkqNiQMAmwyCjCvjWqd71Qiy8IlecxRF0TyG2HIJJG
uyD4A8z6C6je1HbZvEct0w8yhDCVeQYoZgK6+pRluOWyC135Wzzij1KqLYLM4MrA
isz3SD/sIa5Ms3vl+V1t3+mqeOQaK3+VkABjPRiFHquDjw6ukkQ85rJDxsC41k7u
QE0G4JcmX1QmnECpXuSGGpPmdBoNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUaOHu
6gbmlvlkwnAUfTGPH9XylaQwHwYDVR0jBBgwFoAU5z0wH5ENVuurehEQO+i+J1OI
tyswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNBREY3L0IzMTIzRjkwM0JCQTExRUJBOTRFOUIxRkY4QUVBMjI4LzV6MHdI
NUVOVnV1cmVoRVFPLWktSjFPSXR5cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzV6MHdINUVOVnV1cmVoRVFPLWktSjFPSXR5cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNBREY3L0IzMTIzRjkwM0JCQTExRUJBOTRFOUIxRkY4
QUVBMjI4L0U3NUUwNUE0NkQyMTExRUU4QzIzNDExRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQpxcAwDQYJKoZIhvcNAQEL
BQADggEBABjZpQVfInvY2XN5nf7rZaQgPReNOe+0kMxO3ZD83W+hvSleqsnk7UgB
LIP974SQupG1Uh2fkbeXL1J61CP8qYQLda1uEleIfEtvMwcG4+tTf6Kr+JLiSd6n
b228bJtNr2WsJn1epny5yKLqYSJAPJyCtvKnVlhp8Nmgr9T2pFtw7wvwuM3A5tvj
puEf0WS/dezNio7yk9Tjp8WO553PyN6+c02l6Du/h0NY6F5DkOT6iPXtjkwYW0Fv
h7CJTPfVjhGv+398XPYkCFc1KD1yp1yPN9ybgnKmqj5Ii5ut/Y1WKbBoDAXWTi46
rJ/yTEOzxp1BQOTE9Il33CzTWuHbGfQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org