Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/107A839AD49C11EE8138FA6E775412E6.roa
File: 107A839AD49C11EE8138FA6E775412E6.roa (raw, json)
Hash identifier: NbPQB72+8cMeXRD62I/wbwttaa2xbNKWZ7NyDUoCiQM=
Subject key identifier: B8:9E:09:6D:72:1E:96:17:56:2E:A4:94:FE:D0:9C:15:72:19:4F:6B
Certificate issuer: /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial: 02C3
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/107A839AD49C11EE8138FA6E775412E6.roa
Signing time: Mon 26 Feb 2024 11:42:05 +0000
ROA not before: Mon 26 Feb 2024 11:42:02 +0000
ROA not after: Fri 26 Feb 2027 11:42:02 +0000
asID: 37183
IP address blocks: 196.43.96.0/19 maxlen: 19
196.43.96.0/19 maxlen: 24
196.43.96.0/23 maxlen: 23
196.43.96.0/24 maxlen: 24
196.43.97.0/24 maxlen: 24
196.43.98.0/23 maxlen: 23
196.43.98.0/24 maxlen: 24
196.43.99.0/24 maxlen: 24
196.43.100.0/23 maxlen: 23
196.43.100.0/24 maxlen: 24
196.43.101.0/24 maxlen: 24
196.43.102.0/23 maxlen: 23
196.43.102.0/24 maxlen: 24
196.43.103.0/24 maxlen: 24
196.43.104.0/23 maxlen: 23
196.43.104.0/24 maxlen: 24
196.43.105.0/24 maxlen: 24
196.43.106.0/23 maxlen: 23
196.43.106.0/24 maxlen: 24
196.43.107.0/24 maxlen: 24
2001:42b0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Validity
Not Before: Feb 26 11:42:02 2024 GMT
Not After : Feb 26 11:42:02 2027 GMT
Subject: CN=65dc790d-dfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:52:fa:f2:61:4f:b4:9d:ff:48:ae:72:2f:
71:5d:55:94:2b:5b:b9:20:16:47:12:97:de:b5:5b:
16:3c:c1:61:e3:26:0d:96:28:eb:a3:32:31:41:63:
8e:3d:34:58:5a:d4:9c:f4:ac:a1:8f:4a:66:df:e7:
13:53:c4:ce:b7:56:9c:03:9f:97:b1:2e:a7:0b:01:
27:a3:d6:9c:95:bb:74:a5:d7:78:55:9c:f4:b0:e1:
a7:70:43:72:f8:65:1c:0f:1c:e6:79:ec:f5:58:de:
95:02:76:71:7f:e5:07:14:ba:07:2a:f9:66:53:1b:
9a:3a:d7:c9:64:44:dc:cc:87:09:e0:82:ba:de:78:
27:82:63:d8:28:84:34:4d:33:c7:d2:79:5b:be:5b:
c8:8c:29:50:b5:38:a0:af:bc:ad:e8:e3:37:16:84:
0d:c1:24:3e:e1:eb:e0:44:f2:c4:59:c1:f3:07:03:
f7:d5:cf:e2:7a:59:18:03:68:bc:cc:7b:86:1a:33:
7f:e3:5d:24:9e:2f:cb:83:c5:bf:90:15:50:38:d5:
35:3c:74:8f:bc:3d:12:c0:00:31:4b:f2:8b:64:42:
d9:54:92:74:7d:1c:78:12:a8:7e:0c:cc:ac:0a:6e:
0b:56:9e:5b:2d:eb:3a:d4:97:88:a3:c8:13:aa:6d:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9E:09:6D:72:1E:96:17:56:2E:A4:94:FE:D0:9C:15:72:19:4F:6B
X509v3 Authority Key Identifier:
keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/107A839AD49C11EE8138FA6E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.96.0/19
IPv6:
2001:42b0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:10:be:59:55:65:ca:41:29:a0:eb:ac:13:65:97:f2:17:4c:
fc:18:fe:39:ec:12:19:69:7e:b4:93:19:2e:40:53:94:77:f6:
49:35:c8:75:4b:90:d0:c5:6f:6c:c3:ca:c2:79:1c:77:8f:e0:
b6:de:42:00:00:b9:b4:92:81:95:e7:71:4d:6c:d9:6a:58:54:
9b:c0:89:66:c4:7f:91:7c:62:28:a7:84:71:2e:bc:50:23:3c:
bf:07:0a:f1:48:c7:54:d6:92:c0:88:1c:a8:43:2d:af:ea:b1:
6e:8c:9b:16:ef:bb:e0:9a:08:07:83:08:60:ab:3d:a9:c8:38:
c2:d9:9f:d8:2d:d0:4d:b5:27:63:a2:82:7d:1a:49:22:f6:10:
48:0f:9b:0a:c9:52:f7:89:33:52:39:bd:b7:89:a0:34:e5:38:
18:f3:38:fb:2b:42:0e:f6:2a:96:0b:2c:cf:12:cb:6c:f6:4c:
bf:58:3d:0e:17:9b:4e:85:2a:3b:59:d4:26:c9:68:4d:a0:f6:
5c:34:69:38:8c:44:b1:5c:40:b0:71:18:33:37:ac:d4:9f:1b:
83:a3:86:5d:75:42:2c:56:70:33:5c:42:7c:4c:db:a4:6e:86:
68:5c:6e:f1:87:4b:1f:20:93:3e:e3:f5:f0:e7:6f:a4:3b:ee:
39:17:e4:65
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjYzQzJBRjExMC8GA1UEBRMoRTAyMTlENUE0Q0Q4NTgyQzRGMzdFMkQwRERENzA2
Qjc3RUJEOUY2QzAeFw0yNDAyMjYxMTQyMDJaFw0yNzAyMjYxMTQyMDJaMBgxFjAU
BgNVBAMTDTY1ZGM3OTBkLWRmYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMHFL68mFPtJ3/SK5yL3FdVZQrW7kgFkcSl961WxY8wWHjJg2WKOujMjFB
Y449NFha1Jz0rKGPSmbf5xNTxM63VpwDn5exLqcLASej1pyVu3Sl13hVnPSw4adw
Q3L4ZRwPHOZ57PVY3pUCdnF/5QcUugcq+WZTG5o618lkRNzMhwnggrreeCeCY9go
hDRNM8fSeVu+W8iMKVC1OKCvvK3o4zcWhA3BJD7h6+BE8sRZwfMHA/fVz+J6WRgD
aLzMe4YaM3/jXSSeL8uDxb+QFVA41TU8dI+8PRLAADFL8otkQtlUknR9HHgSqH4M
zKwKbgtWnlst6zrUl4ijyBOqbUabAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUuJ4J
bXIelhdWLqSU/tCcFXIZT2swHwYDVR0jBBgwFoAU4CGdWkzYWCxPN+LQ3dcGt369
n2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2M0MyL0IzOTBFOUU4Qzc4MzExRUNCMTk4Mjg5NEYxMjIyNDY4LzRDR2RX
a3pZV0N4UE4tTFEzZGNHdDM2OW4ydy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRDR2RXa3pZV0N4UE4tTFEzZGNHdDM2OW4ydy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY2M0MyL0IzOTBFOUU4Qzc4MzExRUNCMTk4Mjg5NEYx
MjIyNDY4LzEwN0E4MzlBRDQ5QzExRUU4MTM4RkE2RTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAXEK2AwDQQCAAIwBwMFACAB
QrAwDQYJKoZIhvcNAQELBQADggEBAIoQvllVZcpBKaDrrBNll/IXTPwY/jnsEhlp
frSTGS5AU5R39kk1yHVLkNDFb2zDysJ5HHeP4LbeQgAAubSSgZXncU1s2WpYVJvA
iWbEf5F8YiinhHEuvFAjPL8HCvFIx1TWksCIHKhDLa/qsW6Mmxbvu+CaCAeDCGCr
PanIOMLZn9gt0E21J2Oign0aSSL2EEgPmwrJUveJM1I5vbeJoDTlOBjzOPsrQg72
KpYLLM8Sy2z2TL9YPQ4Xm06FKjtZ1CbJaE2g9lw0aTiMRLFcQLBxGDM3rNSfG4Oj
hl11QixWcDNcQnxM26RuhmhcbvGHSx8gkz7j9fDnb6Q77jkX5GU=
-----END CERTIFICATE-----
Generated at Fri May 17 03:06:26 2024 by rpki-client on console-ams.rpki-client.org