Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3C8C9DE00BEB11EDA6B5D589F1222468.roa
File: 3C8C9DE00BEB11EDA6B5D589F1222468.roa (raw, json)
Hash identifier: iNhtLPRjSL5jJ7XH2AxtiGKKAgw2nhaGcdVWY2YZgMM=
Subject key identifier: 9A:AC:F6:B1:86:78:A4:D8:88:20:13:4F:8E:31:3A:54:6C:F9:A6:41
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 055A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3C8C9DE00BEB11EDA6B5D589F1222468.roa
Signing time: Mon 25 Jul 2022 07:27:28 +0000
ROA not before: Mon 25 Jul 2022 07:27:24 +0000
ROA not after: Wed 07 Jul 2032 07:27:24 +0000
asID: 36916
IP address blocks: 41.180.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 25 07:27:24 2022 GMT
Not After : Jul 7 07:27:24 2032 GMT
Subject: CN=62de45e0-ce45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:2e:cf:e1:1c:d1:43:7c:19:12:b1:11:9a:
d9:b3:13:49:ed:62:06:26:d0:0c:2c:b3:d0:57:95:
43:33:e4:77:9b:81:90:c9:8d:4c:0f:8d:e2:4a:7e:
56:cb:c8:4e:9a:16:9e:6b:06:6d:cb:15:86:59:b4:
a5:98:83:ea:8b:e7:39:3c:1f:39:5d:0a:67:18:a6:
93:29:23:7e:10:f9:64:77:d8:5e:1d:ea:7e:b1:33:
22:07:d8:a0:25:2f:80:45:0c:85:28:c6:ab:23:28:
b1:03:3b:a8:1c:81:32:25:21:55:79:44:e5:ab:3b:
c8:2c:d8:a8:dd:0a:6c:52:95:8c:0e:5b:9b:04:72:
95:d7:29:d9:51:04:b3:eb:8d:a5:1b:c7:c0:70:9f:
40:97:e5:62:18:e6:b3:76:10:ec:da:63:d9:8f:83:
81:14:04:6a:ef:b3:fd:88:45:42:06:38:83:a0:e9:
dd:67:88:87:b6:7f:74:de:93:5d:4e:dc:46:6b:1b:
90:67:39:d1:57:7f:aa:55:33:76:5b:a0:c1:ae:63:
74:f2:c9:64:d4:d8:10:04:e7:1e:9d:83:ab:26:fc:
9c:d5:ad:b5:33:09:4b:f5:36:66:6b:f5:13:fd:be:
4a:b3:7e:e4:ee:07:2b:cb:ff:0f:7c:88:be:15:6d:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:F6:B1:86:78:A4:D8:88:20:13:4F:8E:31:3A:54:6C:F9:A6:41
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3C8C9DE00BEB11EDA6B5D589F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.16.0/20
Signature Algorithm: sha256WithRSAEncryption
12:b1:30:5d:d5:38:d8:cc:f7:40:68:3a:97:a3:04:20:c6:0d:
84:5b:46:9e:93:18:b7:d9:ce:0d:10:9d:e4:f0:cf:0f:56:b8:
94:7a:3d:80:4f:fd:b0:23:4f:35:a8:bf:3e:a2:f8:af:15:d0:
3f:71:f1:17:ff:2d:77:d3:37:31:7f:29:1e:34:6c:3a:67:7f:
59:3b:62:ed:26:d4:f1:75:60:a8:d5:f1:dd:e7:80:f9:58:7b:
b1:b5:ab:ef:8a:b9:59:c0:11:6b:22:a7:1b:76:13:a9:f9:2f:
cd:c9:06:2b:4d:99:a3:d9:f6:d4:b6:34:81:4e:35:f5:b3:22:
19:a5:34:e1:f8:4e:f6:d4:85:9e:63:ad:4f:c1:53:f0:9c:c0:
12:e4:54:ba:85:3b:9f:13:aa:e6:49:38:7b:c7:ad:6e:54:99:
47:b1:43:ce:75:2c:c6:8c:0d:1a:f5:ba:6a:4a:a8:5b:ee:e2:
81:35:07:01:91:35:83:33:d4:39:ce:72:c2:90:6e:c6:78:e5:
35:29:79:27:2a:1e:e1:a1:50:de:19:97:11:02:80:17:e3:ad:
e4:69:9b:6f:e6:f9:ef:2d:24:f7:87:99:65:cd:12:81:fe:ab:
ef:c0:ba:13:50:a3:eb:5c:31:28:55:e5:24:1a:27:82:2e:04:
ec:66:61:46
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBVowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yMjA3MjUwNzI3MjRaFw0zMjA3MDcwNzI3MjRaMBgxFjAU
BgNVBAMMDTYyZGU0NWUwLWNlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDX7S7P4RzRQ3wZErERmtmzE0ntYgYm0Awss9BXlUMz5HebgZDJjUwPjeJK
flbLyE6aFp5rBm3LFYZZtKWYg+qL5zk8HzldCmcYppMpI34Q+WR32F4d6n6xMyIH
2KAlL4BFDIUoxqsjKLEDO6gcgTIlIVV5ROWrO8gs2KjdCmxSlYwOW5sEcpXXKdlR
BLPrjaUbx8Bwn0CX5WIY5rN2EOzaY9mPg4EUBGrvs/2IRUIGOIOg6d1niIe2f3Te
k11O3EZrG5BnOdFXf6pVM3ZboMGuY3TyyWTU2BAE5x6dg6sm/JzVrbUzCUv1NmZr
9RP9vkqzfuTuByvL/w98iL4VbSFtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmqz2
sYZ4pNiIIBNPjjE6VGz5pkEwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzNDOEM5REUwMEJFQjExRURBNkI1RDU4OUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQptBAwDQYJKoZIhvcNAQEL
BQADggEBABKxMF3VONjM90BoOpejBCDGDYRbRp6TGLfZzg0QneTwzw9WuJR6PYBP
/bAjTzWovz6i+K8V0D9x8Rf/LXfTNzF/KR40bDpnf1k7Yu0m1PF1YKjV8d3ngPlY
e7G1q++KuVnAEWsipxt2E6n5L83JBitNmaPZ9tS2NIFONfWzIhmlNOH4TvbUhZ5j
rU/BU/CcwBLkVLqFO58TquZJOHvHrW5UmUexQ851LMaMDRr1umpKqFvu4oE1BwGR
NYMz1DnOcsKQbsZ45TUpeScqHuGhUN4ZlxECgBfjreRpm2/m+e8tJPeHmWXNEoH+
q+/AuhNQo+tcMShV5SQaJ4IuBOxmYUY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org