Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/44276DB4463911EC8EA8D613D8A014CE.roa
File: 44276DB4463911EC8EA8D613D8A014CE.roa (raw, json)
Hash identifier: 4eP0uQUhgh8UojN9cwAJrEyBjLKtzCe+6TB80lYgykw=
Subject key identifier: D4:B3:E9:C6:14:4C:19:03:1E:36:2B:81:25:1E:2F:3E:0B:FA:A9:BF
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: F6
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/44276DB4463911EC8EA8D613D8A014CE.roa
Signing time: Mon 15 Nov 2021 17:27:11 +0000
ROA not before: Mon 15 Nov 2021 17:27:07 +0000
ROA not after: Sat 15 Nov 2031 17:27:07 +0000
asID: 36994
IP address blocks: 41.21.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 01:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF
Validity
Not Before: Nov 15 17:27:07 2021 GMT
Not After : Nov 15 17:27:07 2031 GMT
Subject: CN=6192986f-1082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:94:0a:3a:f4:95:b9:71:f1:e0:10:3e:22:
36:9f:72:aa:fa:d8:92:b3:52:13:53:41:af:eb:47:
ee:35:37:13:45:ad:8f:ed:80:82:27:ef:ab:cd:3c:
12:99:08:aa:b4:d3:90:c1:5c:7d:1e:7c:e1:2c:bf:
66:7d:78:37:5d:1e:cc:72:f3:56:43:4c:c8:68:76:
f6:7b:3f:2e:45:1b:19:2f:3f:c6:6d:5a:06:0b:e6:
1d:ef:f8:5d:22:78:be:c8:f5:34:61:ab:44:81:cf:
07:37:b0:0c:fc:a9:8d:48:eb:ee:15:c6:2b:e4:e0:
24:87:16:21:b1:c4:8c:f1:80:58:1d:bb:98:cd:b9:
f8:4b:60:0b:f5:db:84:ad:03:24:6f:ad:6b:3a:af:
c5:42:38:28:67:d4:41:17:8c:a2:dc:1a:06:c7:ac:
8a:ac:53:49:d0:47:75:d7:b3:2b:cd:75:94:5a:ab:
95:5b:d1:3d:be:ab:c8:4d:25:21:50:27:50:0f:de:
6a:aa:c5:09:44:19:99:97:75:2b:b0:6e:23:da:07:
7e:ba:32:09:d9:8f:3d:24:0a:72:b7:5f:db:8f:d1:
2d:b0:e2:4a:e1:c7:26:6a:2a:fb:70:db:22:ee:e2:
fa:d5:fa:7a:04:3f:05:da:da:f7:0f:f1:3b:7f:52:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:E9:C6:14:4C:19:03:1E:36:2B:81:25:1E:2F:3E:0B:FA:A9:BF
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/44276DB4463911EC8EA8D613D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.21.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1e:0c:d8:5e:d8:a8:7b:d9:28:d1:37:be:0d:f2:19:10:92:65:
29:97:cb:7a:04:c6:e0:6c:ca:88:16:27:86:8c:55:5d:9f:f0:
a2:29:f4:d6:d9:a8:c8:12:38:bc:c0:fc:71:ad:8b:56:c5:c7:
8e:29:1f:4a:39:90:0a:d8:3e:cb:b9:07:71:54:01:09:2a:df:
48:d1:af:8c:df:87:3e:ea:bb:ad:5b:f9:16:35:de:de:2e:b6:
e7:67:c6:07:b5:57:e6:77:d7:7d:e8:ad:9d:65:3c:4a:3b:72:
89:05:4b:de:b6:af:30:41:3e:8f:bf:94:d8:fb:1a:aa:d8:15:
1c:ed:86:6d:20:e5:df:69:a9:64:95:32:28:07:03:e7:22:e3:
05:89:f9:d9:f8:40:a0:a9:f0:c1:31:b6:fd:c9:68:3d:9c:91:
75:97:e1:a5:45:5e:63:2b:17:a9:fb:b8:aa:cf:f9:ab:b0:13:
5c:35:10:a2:03:28:10:f4:1e:26:ac:a2:7f:19:e0:bd:b7:96:
2c:41:84:b3:67:5a:90:25:22:98:7f:3a:73:5c:93:fe:80:05:
f4:53:3c:24:4c:ba:c1:fa:f5:e4:d2:84:6b:a1:ca:37:bc:86:
83:dc:8f:42:b6:12:ca:b2:25:18:2f:95:9e:00:a1:d0:df:8e:
37:ad:13:d4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yMTExMTUxNzI3MDdaFw0zMTExMTUxNzI3MDdaMBgxFjAU
BgNVBAMMDTYxOTI5ODZmLTEwODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVGpQKOvSVuXHx4BA+Ijafcqr62JKzUhNTQa/rR+41NxNFrY/tgIIn76vN
PBKZCKq005DBXH0efOEsv2Z9eDddHsxy81ZDTMhodvZ7Py5FGxkvP8ZtWgYL5h3v
+F0ieL7I9TRhq0SBzwc3sAz8qY1I6+4Vxivk4CSHFiGxxIzxgFgdu5jNufhLYAv1
24StAyRvrWs6r8VCOChn1EEXjKLcGgbHrIqsU0nQR3XXsyvNdZRaq5Vb0T2+q8hN
JSFQJ1AP3mqqxQlEGZmXdSuwbiPaB366MgnZjz0kCnK3X9uP0S2w4krhxyZqKvtw
2yLu4vrV+noEPwXa2vcP8Tt/Urz3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1LPp
xhRMGQMeNiuBJR4vPgv6qb8wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzQ0Mjc2REI0NDYzOTExRUM4RUE4RDYxM0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcpFYAwDQYJKoZIhvcNAQEL
BQADggEBAB4M2F7YqHvZKNE3vg3yGRCSZSmXy3oExuBsyogWJ4aMVV2f8KIp9NbZ
qMgSOLzA/HGti1bFx44pH0o5kArYPsu5B3FUAQkq30jRr4zfhz7qu61b+RY13t4u
tudnxge1V+Z3133orZ1lPEo7cokFS962rzBBPo+/lNj7GqrYFRzthm0g5d9pqWSV
MigHA+ci4wWJ+dn4QKCp8MExtv3JaD2ckXWX4aVFXmMrF6n7uKrP+auwE1w1EKID
KBD0Hiason8Z4L23lixBhLNnWpAlIph/OnNck/6ABfRTPCRMusH69eTShGuhyje8
hoPcj0K2EsqyJRgvlZ4AodDfjjetE9Q=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:32 2025 by rpki-client