Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/2D02ECFAEC9011ECA21225E7F1222468.roa
File: 2D02ECFAEC9011ECA21225E7F1222468.roa (raw, json)
Hash identifier: Su2nwyM2I6TnHRkVRChy1NOHi0zsNQpRG+EZEGULugY=
Subject key identifier: 8F:DD:21:80:67:00:EA:F1:CB:ED:9A:FD:53:A9:45:53:AF:4F:69:39
Certificate issuer: /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial: 01A4
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/2D02ECFAEC9011ECA21225E7F1222468.roa
Signing time: Wed 15 Jun 2022 09:47:32 +0000
ROA not before: Wed 15 Jun 2022 09:47:27 +0000
ROA not after: Mon 30 Jun 2025 09:47:27 +0000
asID: 36925
IP address blocks: 41.87.128.0/19 maxlen: 24
41.92.0.0/17 maxlen: 24
41.205.192.0/19 maxlen: 24
41.214.128.0/17 maxlen: 24
102.96.0.0/13 maxlen: 24
102.216.12.0/22 maxlen: 24
105.188.0.0/14 maxlen: 24
196.112.0.0/12 maxlen: 24
197.153.0.0/16 maxlen: 24
197.230.0.0/16 maxlen: 24
197.247.0.0/16 maxlen: 24
197.253.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Validity
Not Before: Jun 15 09:47:27 2022 GMT
Not After : Jun 30 09:47:27 2025 GMT
Subject: CN=62a9aab4-08af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:13:f5:62:20:d7:bb:c3:3b:c6:cf:80:a4:
a7:28:47:2f:a2:18:92:a3:37:63:f8:0b:34:9c:47:
92:55:22:ea:f8:9c:a9:51:60:a6:3d:e2:3b:05:bb:
6c:cf:1c:c9:27:f4:ad:2c:c7:9d:95:19:f7:be:38:
1d:6d:26:c5:7b:64:13:8f:34:8e:a7:5e:ba:c4:74:
97:db:55:be:eb:4a:55:30:a1:08:2f:87:35:4e:e4:
2e:a5:6c:3f:21:a9:3d:7c:ab:c0:77:69:0a:80:75:
55:30:b8:e6:2a:c9:e4:25:86:8c:9c:e4:c2:e9:85:
9d:30:4a:77:2f:8b:26:e5:e3:17:5a:22:20:a9:d9:
1b:71:d5:30:28:a6:8f:f4:0e:32:e0:19:71:61:d0:
d0:01:17:22:15:bc:02:b1:69:13:8a:22:f8:f4:6c:
c5:88:df:96:f5:47:9b:81:95:10:12:46:bc:8e:d6:
17:27:a4:8a:bd:af:a9:67:62:94:0d:41:63:57:46:
c0:6a:e4:3f:e2:80:b3:0b:60:3d:04:e1:d2:03:a4:
c9:9a:0a:bb:aa:57:57:c9:37:d0:5a:d3:c7:62:f7:
c4:3d:b8:21:a6:a7:17:b6:2c:97:b0:2c:6f:7a:bb:
ca:2a:27:a3:36:00:a5:9e:26:e5:5d:ce:5f:63:fd:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DD:21:80:67:00:EA:F1:CB:ED:9A:FD:53:A9:45:53:AF:4F:69:39
X509v3 Authority Key Identifier:
keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/2D02ECFAEC9011ECA21225E7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.87.128.0/19
41.92.0.0/17
41.205.192.0/19
41.214.128.0/17
102.96.0.0/13
102.216.12.0/22
105.188.0.0/14
196.112.0.0/12
197.153.0.0/16
197.230.0.0/16
197.247.0.0/16
197.253.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4e:f3:9f:ef:47:e2:9c:38:c4:b5:ff:d5:f8:58:c5:c8:9f:37:
0d:7e:f4:56:f2:aa:f7:5f:c6:80:cb:ff:05:9f:a4:cd:d3:28:
40:24:15:fa:af:a8:34:16:fe:4a:a4:cb:78:12:ce:59:33:b0:
19:36:18:b2:59:74:26:02:90:fb:cc:16:48:ae:b8:87:32:df:
5a:62:7e:64:8b:31:0a:9c:e5:49:bc:3d:ef:32:83:5a:17:41:
0e:c6:8b:08:02:44:ef:bf:5d:2a:31:ef:71:5c:4b:f0:20:41:
2e:ea:f4:c0:be:f4:83:b0:7f:a5:1a:4c:1a:73:eb:a5:56:fe:
25:69:b0:fa:9b:b9:b9:c0:68:a2:14:e1:66:b3:58:4a:20:bc:
86:bc:c6:7a:fd:38:d8:e3:65:c3:c4:3c:23:8b:68:62:37:05:
fc:9e:04:52:53:98:4d:5a:b2:e6:9b:d2:f5:df:a1:ce:12:02:
11:87:52:44:43:c1:33:8c:af:4a:ec:72:cb:13:82:79:eb:32:
35:05:ff:b6:a1:f5:6b:2a:e3:89:13:f6:07:58:fb:c7:8e:76:
79:10:0b:40:30:1a:21:f1:f9:db:d2:f8:21:22:86:ae:83:d0:
de:d6:13:b8:22:d8:d3:5c:75:89:ae:1f:95:22:cd:70:87:12:
cf:37:e3:d0
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NEFFNDRBRjExMC8GA1UEBRMoOEY1MDNCRDU3M0NFMTEzNTE3Q0Q2QjRDRkEzNzRB
NjJGMTVFMTJDMTAeFw0yMjA2MTUwOTQ3MjdaFw0yNTA2MzAwOTQ3MjdaMBgxFjAU
BgNVBAMMDTYyYTlhYWI0LTA4YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmHhP1YiDXu8M7xs+ApKcoRy+iGJKjN2P4CzScR5JVIur4nKlRYKY94jsF
u2zPHMkn9K0sx52VGfe+OB1tJsV7ZBOPNI6nXrrEdJfbVb7rSlUwoQgvhzVO5C6l
bD8hqT18q8B3aQqAdVUwuOYqyeQlhoyc5MLphZ0wSncviybl4xdaIiCp2Rtx1TAo
po/0DjLgGXFh0NABFyIVvAKxaROKIvj0bMWI35b1R5uBlRASRryO1hcnpIq9r6ln
YpQNQWNXRsBq5D/igLMLYD0E4dIDpMmaCruqV1fJN9Ba08di98Q9uCGmpxe2LJew
LG96u8oqJ6M2AKWeJuVdzl9j/fTFAgMBAAGjggLhMIIC3TAdBgNVHQ4EFgQUj90h
gGcA6vHL7Zr9U6lFU69PaTkwHwYDVR0jBBgwFoAUj1A71XPOETUXzWtM+jdKYvFe
EsEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBRTQ0LzIyMjcwRUZFQUY0NDExRUI4QzI1NzY4NkY4QUVBMjI4L2oxQTcx
WFBPRVRVWHpXdE0tamRLWXZGZUVzRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2oxQTcxWFBPRVRVWHpXdE0tamRLWXZGZUVzRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjRBRTQ0LzIyMjcwRUZFQUY0NDExRUI4QzI1NzY4NkY4
QUVBMjI4LzJEMDJFQ0ZBRUM5MDExRUNBMjEyMjVFN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwWwYIKwYBBQUHAQcBAf8ETDBKMEgEAgABMEIDBAUpV4ADBAcpXAADBAUpzcAD
BAcp1oADAwNmYAMEAmbYDAMDAmm8AwMExHADAwDFmQMDAMXmAwMAxfcDBAfF/YAw
DQYJKoZIhvcNAQELBQADggEBAE7zn+9H4pw4xLX/1fhYxcifNw1+9FbyqvdfxoDL
/wWfpM3TKEAkFfqvqDQW/kqky3gSzlkzsBk2GLJZdCYCkPvMFkiuuIcy31pifmSL
MQqc5Um8Pe8yg1oXQQ7GiwgCRO+/XSox73FcS/AgQS7q9MC+9IOwf6UaTBpz66VW
/iVpsPqbubnAaKIU4WazWEogvIa8xnr9ONjjZcPEPCOLaGI3BfyeBFJTmE1asuab
0vXfoc4SAhGHUkRDwTOMr0rscssTgnnrMjUF/7ah9Wsq44kT9gdY+8eOdnkQC0Aw
GiHx+dvS+CEihq6D0N7WE7gi2NNcdYmuH5UizXCHEs8349A=
-----END CERTIFICATE-----
Generated at Sat May 18 04:03:36 2024 by rpki-client on console-ams.rpki-client.org