Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/AD72D8203AC511EF8BAB4075762E951A.roa
File: AD72D8203AC511EF8BAB4075762E951A.roa (raw, json)
Hash identifier: uGjLeTcQtjvoi+G1lNbi/6hF5oa6IK/lI55KybZViDM=
Subject key identifier: 82:EF:12:B3:32:CB:27:F6:A5:F1:53:39:0B:4D:F1:27:79:C4:DF:77
Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial: 02B4
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/AD72D8203AC511EF8BAB4075762E951A.roa
Signing time: Fri 05 Jul 2024 11:56:56 +0000
ROA not before: Fri 05 Jul 2024 11:56:53 +0000
ROA not after: Fri 30 Jun 2034 11:56:53 +0000
asID: 37406
IP address blocks: 41.79.25.0/24 maxlen: 24
41.79.26.0/23 maxlen: 24
105.235.208.0/22 maxlen: 23
105.235.212.0/23 maxlen: 24
154.73.88.0/22 maxlen: 23
196.201.8.0/23 maxlen: 23
2c0f:f690::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Validity
Not Before: Jul 5 11:56:53 2024 GMT
Not After : Jun 30 11:56:53 2034 GMT
Subject: CN=6687df88-dde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:83:41:19:b6:f2:47:d1:b5:7d:e8:1c:65:96:
84:5a:db:30:a5:7f:03:2b:f9:7a:e0:81:8b:79:76:
78:de:ed:9b:0e:98:b8:df:1b:32:be:0c:ed:9d:42:
a4:f4:ed:0e:c2:11:3a:47:57:50:85:10:b4:81:7e:
ac:b9:2f:e0:77:d6:33:c3:0b:7f:7e:1c:c1:b6:e6:
9f:18:b1:aa:8e:17:6e:4b:79:1a:eb:cf:ac:d3:d5:
35:c6:d6:dc:81:2a:e0:9d:79:85:c2:65:89:98:8d:
b9:7a:8b:d5:90:f5:39:f0:30:ff:36:9c:95:77:6e:
72:45:9c:61:c9:be:90:3c:54:ba:6b:18:11:58:e9:
d0:7d:44:80:85:77:62:7e:ce:56:aa:7a:fb:75:b1:
d0:73:6c:2e:32:85:03:d1:32:54:48:b8:f4:c6:b0:
dd:34:18:75:98:9b:5e:9c:86:0e:6c:ed:2a:a2:21:
ed:5d:9e:af:08:af:f0:ba:b3:2a:3d:d2:f3:75:50:
c8:cd:0c:7f:4d:06:f6:d3:f2:54:24:5b:b7:da:74:
9c:24:3e:6b:6b:8d:01:c5:48:74:62:4c:6a:1c:f3:
09:63:84:a6:d0:15:85:1b:b8:e8:52:0e:40:84:40:
9a:82:9c:f2:2e:0c:58:0d:50:c8:2b:53:a2:08:b0:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EF:12:B3:32:CB:27:F6:A5:F1:53:39:0B:4D:F1:27:79:C4:DF:77
X509v3 Authority Key Identifier:
keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/AD72D8203AC511EF8BAB4075762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.25.0-41.79.27.255
105.235.208.0-105.235.213.255
154.73.88.0/22
196.201.8.0/23
IPv6:
2c0f:f690::/32
Signature Algorithm: sha256WithRSAEncryption
06:14:4a:de:0a:34:d1:36:ae:59:8f:1c:7c:27:2f:eb:15:6e:
5a:e2:18:d3:58:5e:9a:9b:28:15:59:78:4a:84:35:28:e9:6d:
54:0e:9b:4a:e5:56:28:25:ed:17:8f:62:78:4d:3b:43:e9:ef:
13:5e:c4:2c:76:9d:45:4d:6f:07:b4:74:72:e9:5a:1a:23:08:
d0:a5:fe:78:9d:31:c1:de:81:c1:79:d3:f2:67:86:60:ff:8c:
b1:ca:32:f0:f1:32:96:9f:37:95:b4:dd:1f:95:87:3c:2d:e9:
26:d0:d3:2c:8f:bd:85:60:ca:fe:9f:00:96:44:ad:7d:c5:3b:
dc:c4:86:4b:ab:e4:40:bf:24:13:e1:0e:6c:0f:32:fe:63:79:
e4:4c:30:86:0c:d7:c9:8a:54:3e:cd:36:15:c5:4e:66:e2:7c:
15:7e:48:e6:cd:52:a8:e4:9e:2d:fa:8f:c3:93:3a:68:a1:b9:
83:ce:cf:dd:22:ea:b1:c8:87:2f:7b:14:b0:63:ef:95:ad:2c:
21:18:6d:1b:57:fa:b5:60:1f:78:f9:d2:a4:ce:e1:fb:78:b2:
69:16:40:5b:db:6d:a7:f9:43:cb:72:08:2a:f9:e8:ff:86:08:
b2:58:e4:1e:1e:57:4f:5d:74:a9:9e:9b:14:b4:56:bd:60:e0:
1d:42:fe:72
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDdGRjBBRjExMC8GA1UEBRMoOTIwNDQxMkExRjEyQkNENUQyQjNDRTM5OTFBQ0VG
Njk3NkM4ODY1RTAeFw0yNDA3MDUxMTU2NTNaFw0zNDA2MzAxMTU2NTNaMBgxFjAU
BgNVBAMTDTY2ODdkZjg4LWRkZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzg0EZtvJH0bV96BxlloRa2zClfwMr+XrggYt5dnje7ZsOmLjfGzK+DO2d
QqT07Q7CETpHV1CFELSBfqy5L+B31jPDC39+HMG25p8YsaqOF25LeRrrz6zT1TXG
1tyBKuCdeYXCZYmYjbl6i9WQ9TnwMP82nJV3bnJFnGHJvpA8VLprGBFY6dB9RICF
d2J+zlaqevt1sdBzbC4yhQPRMlRIuPTGsN00GHWYm16chg5s7SqiIe1dnq8Ir/C6
syo90vN1UMjNDH9NBvbT8lQkW7fadJwkPmtrjQHFSHRiTGoc8wljhKbQFYUbuOhS
DkCEQJqCnPIuDFgNUMgrU6IIsBk9AgMBAAGjggLWMIIC0jAdBgNVHQ4EFgQUgu8S
szLLJ/al8VM5C03xJ3nE33cwHwYDVR0jBBgwFoAUkgRBKh8SvNXSs845kazvaXbI
hl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3RkYwL0EyOEFDMTBBMzJBOTExRURBNEU1QzlEQ0YxMjIyNDY4L2tnUkJL
aDhTdk5YU3M4NDVrYXp2YVhiSWhsNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tnUkJLaDhTdk5YU3M4NDVrYXp2YVhiSWhsNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3RkYwL0EyOEFDMTBBMzJBOTExRURBNEU1QzlEQ0Yx
MjIyNDY4L0FENzJEODIwM0FDNTExRUY4QkFCNDA3NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwUAYIKwYBBQUHAQcBAf8EQTA/MC4EAgABMCgwDAMEAClPGQMEAilPGDAMAwQE
aevQAwQBaevUAwQCmklYAwQBxMkIMA0EAgACMAcDBQAsD/aQMA0GCSqGSIb3DQEB
CwUAA4IBAQAGFEreCjTRNq5Zjxx8Jy/rFW5a4hjTWF6amygVWXhKhDUo6W1UDptK
5VYoJe0Xj2J4TTtD6e8TXsQsdp1FTW8HtHRy6VoaIwjQpf54nTHB3oHBedPyZ4Zg
/4yxyjLw8TKWnzeVtN0flYc8Lekm0NMsj72FYMr+nwCWRK19xTvcxIZLq+RAvyQT
4Q5sDzL+Y3nkTDCGDNfJilQ+zTYVxU5m4nwVfkjmzVKo5J4t+o/DkzpoobmDzs/d
IuqxyIcvexSwY++VrSwhGG0bV/q1YB94+dKkzuH7eLJpFkBb222n+UPLcggq+ej/
hgiyWOQeHldPXXSpnpsUtFa9YOAdQv5y
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org