Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/E33731DE901411ED873666A7F1222468.roa
File: E33731DE901411ED873666A7F1222468.roa (raw, json)
Hash identifier: DQCVLS0+9ICNcSNGa3FetGyRMxihYZeODa4YHrZFCDo=
Subject key identifier: 4E:71:66:6F:EC:65:2F:BE:4E:4B:AC:EF:4D:3A:9A:A3:BB:C6:7B:C8
Certificate issuer: /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial: D7
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/E33731DE901411ED873666A7F1222468.roa
Signing time: Mon 09 Jan 2023 11:58:10 +0000
ROA not before: Tue 10 Jan 2023 11:58:06 +0000
ROA not after: Wed 29 Jan 2042 11:58:06 +0000
asID: 37035
IP address blocks: 41.73.192.0/19 maxlen: 24
41.204.128.0/19 maxlen: 24
197.221.192.0/19 maxlen: 24
2c0f:f0c0::/31 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Validity
Not Before: Jan 10 11:58:06 2023 GMT
Not After : Jan 29 11:58:06 2042 GMT
Subject: CN=63bc0152-26e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:ff:89:35:fd:25:17:a1:8b:b1:a9:12:49:
0c:10:42:20:c3:05:04:13:37:61:11:7e:6b:3e:f0:
51:29:3a:09:47:eb:0a:7d:91:d0:de:c8:cb:db:77:
50:6e:44:f2:a7:3e:0d:34:ee:09:31:69:b4:3f:5a:
42:3f:83:f1:e2:5b:41:01:e3:9f:ae:4c:ba:99:ae:
4c:a9:db:1b:b6:dd:8e:d5:8c:45:30:1e:20:d5:0a:
65:bd:e6:d6:c0:f1:32:25:15:9e:f2:98:39:36:12:
3e:22:ae:ac:b8:0b:9d:70:2c:be:8d:a3:7c:c7:2b:
45:8c:bc:90:6f:0d:72:a3:ab:fa:cc:25:aa:4b:c2:
9d:19:4b:44:86:53:0b:97:b6:44:e5:ce:a3:9b:bd:
18:db:a8:3f:8b:5e:e4:b7:4f:02:34:b0:c0:7d:aa:
29:d6:41:fa:ca:1c:3c:58:a7:4b:19:c9:13:31:eb:
38:18:89:83:e5:f0:ba:d7:67:2f:77:3d:d3:42:11:
6e:a2:bc:15:b0:b6:38:f7:a9:f6:06:17:95:61:04:
a4:42:1b:da:73:05:25:85:96:39:fb:20:49:8c:34:
8c:eb:8b:6b:39:76:2c:72:52:e6:af:64:c5:9f:a0:
9a:a0:33:a9:3a:01:d5:f8:d6:c5:60:65:de:8e:1c:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:66:6F:EC:65:2F:BE:4E:4B:AC:EF:4D:3A:9A:A3:BB:C6:7B:C8
X509v3 Authority Key Identifier:
keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/E33731DE901411ED873666A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.192.0/19
41.204.128.0/19
197.221.192.0/19
IPv6:
2c0f:f0c0::/31
Signature Algorithm: sha256WithRSAEncryption
19:e6:26:c1:87:c6:9b:ef:f3:6e:64:7f:5d:f8:d1:e2:ae:1f:
07:bf:d1:06:61:5d:1c:d9:0e:c9:af:e7:bd:ff:da:1e:b1:f0:
2e:c6:e8:ac:43:68:5b:53:cb:68:24:10:c3:8d:9c:49:ea:d7:
99:ee:f0:2c:ab:b4:d3:c6:1d:53:c1:bd:5e:37:a8:6b:1d:bb:
73:ce:c3:56:d1:3a:78:8c:36:6f:e6:b2:57:ef:24:88:af:47:
e7:f8:95:04:c5:d6:e4:e7:75:b4:8c:c9:0e:6a:fd:75:1b:1f:
9b:f1:8c:ae:ae:93:17:cf:24:3e:7b:66:b2:d5:82:e0:5a:68:
cf:8e:39:78:82:c0:0a:98:ce:7a:28:45:0c:2c:da:63:02:3e:
af:73:91:7c:1d:19:dd:55:c5:1b:2f:27:55:d4:a8:10:52:f1:
93:00:5c:ab:79:43:c8:df:e2:4f:36:50:f6:f1:82:c2:81:6e:
ab:27:cb:38:35:9a:c1:32:37:bf:de:16:9e:60:2e:67:e0:d9:
f7:97:4c:9d:e7:33:a5:8b:98:3d:6a:53:9a:08:47:62:ba:5d:
26:18:09:9d:21:e2:6c:b7:3f:e2:fb:bd:be:86:34:b7:f1:d6:
3e:b9:39:8d:bc:d0:4c:13:c9:ba:a7:59:5a:24:74:bb:5d:fc:
4f:0f:df:d4
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICANcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NDM4NkJBRjExMC8GA1UEBRMoMjExRTVCOTg4NjMyRjUzRDRDQzEyMjBDRTI5MzBG
RUQ4MkQwNEM5QzAeFw0yMzAxMTAxMTU4MDZaFw00MjAxMjkxMTU4MDZaMBgxFjAU
BgNVBAMMDTYzYmMwMTUyLTI2ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzYv+JNf0lF6GLsakSSQwQQiDDBQQTN2ERfms+8FEpOglH6wp9kdDeyMvb
d1BuRPKnPg007gkxabQ/WkI/g/HiW0EB45+uTLqZrkyp2xu23Y7VjEUwHiDVCmW9
5tbA8TIlFZ7ymDk2Ej4irqy4C51wLL6No3zHK0WMvJBvDXKjq/rMJapLwp0ZS0SG
UwuXtkTlzqObvRjbqD+LXuS3TwI0sMB9qinWQfrKHDxYp0sZyRMx6zgYiYPl8LrX
Zy93PdNCEW6ivBWwtjj3qfYGF5VhBKRCG9pzBSWFljn7IEmMNIzri2s5dixyUuav
ZMWfoJqgM6k6AdX41sVgZd6OHBBVAgMBAAGjggLAMIICvDAdBgNVHQ4EFgQUTnFm
b+xlL75OS6zvTTqao7vGe8gwHwYDVR0jBBgwFoAUIR5bmIYy9T1MwSIM4pMP7YLQ
TJwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzODZCLzU4RDVCNzU2RUUwNTExRUM5OEVEQTM4OUYxMjIyNDY4L0lSNWJt
SVl5OVQxTXdTSU00cE1QN1lMUVRKdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lSNWJtSVl5OVQxTXdTSU00cE1QN1lMUVRKdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQzODZCLzU4RDVCNzU2RUUwNTExRUM5OEVEQTM4OUYx
MjIyNDY4L0UzMzczMURFOTAxNDExRUQ4NzM2NjZBN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAUpScADBAUpzIADBAXF3cAw
DQQCAAIwBwMFASwP8MAwDQYJKoZIhvcNAQELBQADggEBABnmJsGHxpvv825kf134
0eKuHwe/0QZhXRzZDsmv573/2h6x8C7G6KxDaFtTy2gkEMONnEnq15nu8CyrtNPG
HVPBvV43qGsdu3POw1bROniMNm/mslfvJIivR+f4lQTF1uTndbSMyQ5q/XUbH5vx
jK6ukxfPJD57ZrLVguBaaM+OOXiCwAqYznooRQws2mMCPq9zkXwdGd1VxRsvJ1XU
qBBS8ZMAXKt5Q8jf4k82UPbxgsKBbqsnyzg1msEyN7/eFp5gLmfg2feXTJ3nM6WL
mD1qU5oIR2K6XSYYCZ0h4my3P+L7vb6GNLfx1j65OY280EwTybqnWVokdLtd/E8P
39Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:33 2024 by rpki-client on console-ams.rpki-client.org