Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/2AE6A618901511ED97E821A8F1222468.roa
File: 2AE6A618901511ED97E821A8F1222468.roa (raw, json)
Hash identifier: l6cBhURgmoDE6HHZxn6Sr3D0gRmA3gv1jsIUfHqy/fE=
Subject key identifier: F0:87:1D:1D:5B:6F:C6:C3:E1:D5:96:25:51:4C:6C:0B:B2:66:29:EB
Certificate issuer: /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial: D9
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/2AE6A618901511ED97E821A8F1222468.roa
Signing time: Mon 09 Jan 2023 12:00:11 +0000
ROA not before: Mon 09 Jan 2023 12:00:07 +0000
ROA not after: Thu 31 Jan 2041 12:00:07 +0000
asID: 36930
IP address blocks: 41.73.192.0/19 maxlen: 24
41.204.128.0/19 maxlen: 24
197.221.192.0/19 maxlen: 24
2c0f:f0c0::/31 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Validity
Not Before: Jan 9 12:00:07 2023 GMT
Not After : Jan 31 12:00:07 2041 GMT
Subject: CN=63bc01cb-7980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:ca:9a:9d:6e:90:f4:8a:57:ad:cb:9e:78:
63:cd:24:b0:8b:b2:39:39:78:55:d5:a3:88:45:2d:
59:6d:db:6d:a7:01:a4:b9:d4:a4:dd:81:86:75:ed:
a7:55:ae:ab:39:1a:40:0c:7b:75:7b:c7:1e:fa:ce:
e2:ec:9d:a4:c6:a9:18:79:2f:f0:91:6b:bf:3d:d3:
ae:41:cc:f5:bd:96:3c:f1:d9:59:f9:ec:7b:35:d5:
ef:5a:df:a5:24:e7:e2:14:8a:a2:e3:93:b0:0f:2e:
c4:e6:db:af:80:af:46:35:de:7e:91:3d:68:52:dd:
94:ac:c0:ce:3f:fe:3f:f6:d3:39:75:30:58:64:77:
42:35:4c:c0:ef:13:d9:99:d9:91:90:67:c9:9c:3c:
84:2d:a0:bf:b9:b5:83:70:08:43:ed:ff:5e:5b:fa:
3a:62:47:2f:41:d0:6c:23:4e:26:75:9e:52:57:54:
8f:5b:a2:e8:08:af:fe:12:84:a7:49:9d:4c:5a:1f:
38:b2:8e:70:37:a4:2b:13:bf:f8:4d:69:42:62:60:
18:25:f4:bc:f4:42:b3:29:bf:bd:6a:2f:13:87:6b:
b0:b4:34:c9:2c:63:76:ae:0a:61:56:fe:df:35:7a:
6c:58:e6:d2:12:69:e5:0a:2a:59:88:d8:24:20:37:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:1D:1D:5B:6F:C6:C3:E1:D5:96:25:51:4C:6C:0B:B2:66:29:EB
X509v3 Authority Key Identifier:
keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/2AE6A618901511ED97E821A8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.192.0/19
41.204.128.0/19
197.221.192.0/19
IPv6:
2c0f:f0c0::/31
Signature Algorithm: sha256WithRSAEncryption
1f:3d:e3:9c:93:cb:04:60:f1:cd:cf:ef:27:11:d0:45:69:41:
35:29:e4:11:97:de:97:ce:24:3b:62:b7:64:ab:d6:bc:13:3b:
e5:55:36:4f:4d:31:f5:ee:00:e1:40:dc:98:05:24:39:29:7c:
b7:44:13:0d:0b:31:31:43:26:93:22:c2:91:3a:37:15:2b:3b:
e1:c5:a0:b0:83:49:9b:68:e2:eb:59:5e:49:c8:8c:68:5c:c4:
27:0a:59:d2:5b:04:41:43:48:e5:1e:1c:87:b7:b3:76:b2:00:
9b:1d:a0:45:61:f8:d1:6d:a2:9f:76:18:ee:59:98:c4:63:84:
a9:2e:1e:bb:dc:3e:26:c9:a8:c0:4d:7c:27:a1:0f:85:98:93:
f2:a9:26:30:28:f9:b7:32:f1:e9:ef:16:f7:f6:08:cf:3e:e9:
62:0d:27:a1:9c:9b:74:d7:a0:71:1f:80:d1:e5:0e:12:c8:c1:
5b:da:91:aa:ac:95:e2:08:3c:7b:ee:29:b5:ba:ba:7d:95:c5:
39:36:f6:cb:0a:b3:90:3c:c1:b1:a9:2b:3b:76:98:4f:d9:e6:
32:94:2e:56:63:4d:77:85:81:4b:2e:0d:0e:a6:a5:93:b5:d1:
68:9d:e3:ac:f0:26:e8:0a:b1:6b:9e:4e:56:96:54:77:86:76:
72:83:a8:4b
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICANkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NDM4NkJBRjExMC8GA1UEBRMoMjExRTVCOTg4NjMyRjUzRDRDQzEyMjBDRTI5MzBG
RUQ4MkQwNEM5QzAeFw0yMzAxMDkxMjAwMDdaFw00MTAxMzExMjAwMDdaMBgxFjAU
BgNVBAMMDTYzYmMwMWNiLTc5ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNYsqanW6Q9IpXrcueeGPNJLCLsjk5eFXVo4hFLVlt222nAaS51KTdgYZ1
7adVrqs5GkAMe3V7xx76zuLsnaTGqRh5L/CRa789065BzPW9ljzx2Vn57Hs11e9a
36Uk5+IUiqLjk7APLsTm26+Ar0Y13n6RPWhS3ZSswM4//j/20zl1MFhkd0I1TMDv
E9mZ2ZGQZ8mcPIQtoL+5tYNwCEPt/15b+jpiRy9B0GwjTiZ1nlJXVI9bougIr/4S
hKdJnUxaHziyjnA3pCsTv/hNaUJiYBgl9Lz0QrMpv71qLxOHa7C0NMksY3auCmFW
/t81emxY5tISaeUKKlmI2CQgN09pAgMBAAGjggLAMIICvDAdBgNVHQ4EFgQU8Icd
HVtvxsPh1ZYlUUxsC7JmKeswHwYDVR0jBBgwFoAUIR5bmIYy9T1MwSIM4pMP7YLQ
TJwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzODZCLzU4RDVCNzU2RUUwNTExRUM5OEVEQTM4OUYxMjIyNDY4L0lSNWJt
SVl5OVQxTXdTSU00cE1QN1lMUVRKdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lSNWJtSVl5OVQxTXdTSU00cE1QN1lMUVRKdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQzODZCLzU4RDVCNzU2RUUwNTExRUM5OEVEQTM4OUYx
MjIyNDY4LzJBRTZBNjE4OTAxNTExRUQ5N0U4MjFBOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAUpScADBAUpzIADBAXF3cAw
DQQCAAIwBwMFASwP8MAwDQYJKoZIhvcNAQELBQADggEBAB8945yTywRg8c3P7ycR
0EVpQTUp5BGX3pfOJDtit2Sr1rwTO+VVNk9NMfXuAOFA3JgFJDkpfLdEEw0LMTFD
JpMiwpE6NxUrO+HFoLCDSZto4utZXknIjGhcxCcKWdJbBEFDSOUeHIe3s3ayAJsd
oEVh+NFtop92GO5ZmMRjhKkuHrvcPibJqMBNfCehD4WYk/KpJjAo+bcy8envFvf2
CM8+6WINJ6Gcm3TXoHEfgNHlDhLIwVvakaqsleIIPHvuKbW6un2VxTk29ssKs5A8
wbGpKzt2mE/Z5jKULlZjTXeFgUsuDQ6mpZO10Wid46zwJugKsWueTlaWVHeGdnKD
qEs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:33 2024 by rpki-client on console-ams.rpki-client.org