Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8B3C3D7EF3B811ECBE4A52A2F1222468.roa
File: 8B3C3D7EF3B811ECBE4A52A2F1222468.roa (raw, json)
Hash identifier: El2NZiw9L1PK6tiooC3b5MGsn/kgXXCKQI59tsRuItc=
Subject key identifier: 5D:DE:09:58:15:88:8B:20:22:39:BC:68:44:2F:D6:71:96:93:60:75
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0501
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8B3C3D7EF3B811ECBE4A52A2F1222468.roa
Signing time: Fri 24 Jun 2022 12:24:08 +0000
ROA not before: Fri 24 Jun 2022 12:24:04 +0000
ROA not after: Wed 12 Jun 2030 12:24:04 +0000
asID: 36916
IP address blocks: 41.180.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 24 12:24:04 2022 GMT
Not After : Jun 12 12:24:04 2030 GMT
Subject: CN=62b5ace8-c15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:62:fd:60:b7:f4:26:73:9d:73:21:1e:fc:
c3:b9:be:aa:22:32:26:96:b1:1e:30:ac:e0:49:82:
00:99:5f:3f:b1:c6:4c:2a:fd:a0:33:90:28:48:54:
b0:57:99:fa:95:8e:f3:e2:0c:2d:e1:d5:56:22:9c:
03:c6:dc:30:a0:96:5e:0f:52:d0:7b:0d:41:bc:de:
58:8d:3f:a5:71:f4:61:1c:fc:12:78:fc:57:50:1d:
34:7a:0f:31:40:20:86:25:7d:9d:b2:2e:ac:7f:36:
38:b5:38:a2:7e:57:6e:1d:8e:0d:a5:45:ac:e5:31:
f3:d5:ac:24:a8:8c:46:b3:b9:79:0f:41:e1:b9:81:
2d:d1:bb:b0:87:7e:8b:d6:ac:f6:0f:0b:2a:69:0c:
3e:7b:ec:59:ee:da:4f:c3:90:58:29:80:57:fd:70:
35:6a:31:ac:62:db:7f:ef:30:fd:b5:58:ba:82:9f:
2c:ad:ee:e0:7b:a4:7c:b2:d4:4b:c0:65:30:27:e5:
97:26:52:b3:31:6d:14:d6:0b:37:9a:f4:eb:a5:c7:
38:64:98:65:0e:bf:01:77:0e:03:81:40:e6:26:af:
d0:79:f0:25:10:71:e5:a3:c7:33:6d:50:fd:63:23:
21:ef:49:25:b2:b5:bb:1a:cf:78:d6:f8:58:86:af:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:09:58:15:88:8B:20:22:39:BC:68:44:2F:D6:71:96:93:60:75
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8B3C3D7EF3B811ECBE4A52A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.46.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:87:ad:68:2d:bc:56:5a:62:71:1a:f4:24:a1:0e:e7:48:81:
24:4d:9e:b6:58:76:c9:ad:33:d8:ce:ee:bc:96:cb:fd:44:8f:
a8:0f:1a:28:90:81:79:3e:0a:ed:00:a9:23:1e:00:f9:ff:4e:
b1:28:cc:3c:bb:db:db:74:bd:6b:46:3b:54:ce:df:e8:66:fc:
da:69:a7:57:df:81:5f:43:91:a0:71:4b:7a:e7:c8:ee:df:a4:
f7:48:de:14:b4:91:1d:4b:d5:e5:a6:0f:ab:32:19:f0:b3:7d:
34:0e:af:32:58:d1:69:33:ec:ee:52:51:06:e6:50:5c:93:1e:
29:82:ad:51:1e:43:c2:63:e1:a6:90:36:e6:1f:3d:cd:1b:66:
60:ab:16:76:8c:1b:d3:e8:dc:e5:2f:4a:ce:49:fc:76:d0:7e:
86:23:31:b9:36:2d:f5:8e:dc:d8:6a:5e:15:6f:0c:b2:30:60:
a3:7a:76:55:aa:e6:8e:d3:a2:62:ec:40:dc:6a:4e:b2:20:33:
8c:f4:08:4b:2a:7a:ae:d0:62:cf:f9:03:79:90:1e:07:4c:34:
0f:ea:15:1b:86:ee:b0:c5:1a:33:db:11:18:5e:6d:61:98:ac:
0a:ff:36:41:86:e0:eb:4b:6d:0c:9c:53:4f:ff:b8:de:bb:dc:
c8:61:19:b2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yMjA2MjQxMjI0MDRaFw0zMDA2MTIxMjI0MDRaMBgxFjAU
BgNVBAMMDTYyYjVhY2U4LWMxNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIH2L9YLf0JnOdcyEe/MO5vqoiMiaWsR4wrOBJggCZXz+xxkwq/aAzkChI
VLBXmfqVjvPiDC3h1VYinAPG3DCgll4PUtB7DUG83liNP6Vx9GEc/BJ4/FdQHTR6
DzFAIIYlfZ2yLqx/Nji1OKJ+V24djg2lRazlMfPVrCSojEazuXkPQeG5gS3Ru7CH
fovWrPYPCyppDD577Fnu2k/DkFgpgFf9cDVqMaxi23/vMP21WLqCnyyt7uB7pHyy
1EvAZTAn5ZcmUrMxbRTWCzea9OulxzhkmGUOvwF3DgOBQOYmr9B58CUQceWjxzNt
UP1jIyHvSSWytbsaz3jW+FiGrzo7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXd4J
WBWIiyAiObxoRC/WcZaTYHUwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzhCM0MzRDdFRjNCODExRUNCRTRBNTJBMkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEptC4wDQYJKoZIhvcNAQEL
BQADggEBAGqHrWgtvFZaYnEa9CShDudIgSRNnrZYdsmtM9jO7ryWy/1Ej6gPGiiQ
gXk+Cu0AqSMeAPn/TrEozDy729t0vWtGO1TO3+hm/Nppp1ffgV9DkaBxS3rnyO7f
pPdI3hS0kR1L1eWmD6syGfCzfTQOrzJY0Wkz7O5SUQbmUFyTHimCrVEeQ8Jj4aaQ
NuYfPc0bZmCrFnaMG9Po3OUvSs5J/HbQfoYjMbk2LfWO3NhqXhVvDLIwYKN6dlWq
5o7TomLsQNxqTrIgM4z0CEsqeq7QYs/5A3mQHgdMNA/qFRuG7rDFGjPbERhebWGY
rAr/NkGG4OtLbQycU0//uN673MhhGbI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org