Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D2BC02EAEBE511EC855C7AC7F1222468.roa
File: D2BC02EAEBE511EC855C7AC7F1222468.roa (raw, json)
Hash identifier: LEbFwLGGNAPIlQ8QPFjNCY1yp5S4q+v6931Rr6Nm/to=
Subject key identifier: D8:95:2F:4F:6F:AA:7F:1B:8E:E7:49:0D:97:DE:81:9A:9E:77:DB:B1
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 04D7
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D2BC02EAEBE511EC855C7AC7F1222468.roa
Signing time: Tue 14 Jun 2022 13:28:06 +0000
ROA not before: Tue 14 Jun 2022 13:28:00 +0000
ROA not after: Wed 16 Jun 2027 13:28:00 +0000
asID: 6977
IP address blocks: 41.180.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 14 13:28:00 2022 GMT
Not After : Jun 16 13:28:00 2027 GMT
Subject: CN=62a88ce6-0404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:bd:be:ab:ba:24:0c:8b:b7:ee:b1:a0:5d:
9e:4d:b4:7c:45:d1:e7:4d:63:89:0f:ab:70:f4:a7:
41:9d:45:1e:11:41:1b:61:db:21:21:39:4b:9b:08:
44:5c:e8:bf:d0:d7:e1:4c:f0:38:27:9f:de:db:64:
1f:92:ff:ad:33:b0:e2:d7:23:b9:3d:19:97:29:9c:
8b:1e:67:6f:c5:ef:88:49:82:d4:c8:93:62:8c:83:
ac:3a:6e:78:6a:c6:0e:e7:2c:4a:f6:de:4d:6f:eb:
2d:e3:51:50:27:b1:b9:b1:8d:e6:a6:6a:a6:37:48:
8d:11:7b:94:d8:61:ef:32:5a:61:fd:5d:01:48:fd:
17:11:c3:72:5c:33:0e:56:73:b0:3c:47:35:cf:3f:
ea:cd:e8:72:cb:18:ee:8b:98:bf:fb:11:99:50:eb:
da:70:13:7c:a3:19:65:c7:bb:10:81:0b:67:44:b9:
10:b9:4b:d7:a4:93:e3:50:2b:ce:33:fd:08:b8:59:
3c:23:e7:2e:99:15:8a:e0:4b:9a:ed:6e:69:a5:6f:
0f:1e:1f:64:46:2b:67:77:3f:60:ac:ec:46:f3:36:
1a:4a:2d:2b:78:f0:ba:3c:4f:1d:79:75:8d:87:97:
86:eb:65:88:24:8a:95:c1:7d:66:75:e2:05:11:56:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:95:2F:4F:6F:AA:7F:1B:8E:E7:49:0D:97:DE:81:9A:9E:77:DB:B1
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D2BC02EAEBE511EC855C7AC7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:a8:79:7c:a1:b9:c8:f7:51:2a:9a:7a:ea:a9:c4:fe:b9:52:
b0:e1:39:e8:40:27:2a:25:e9:21:3f:7b:c0:a9:0c:73:65:19:
de:f9:40:0e:81:f8:70:1c:db:59:3c:3b:67:45:c5:c4:cd:c6:
d4:50:12:f3:ea:6e:66:1c:ef:6a:61:0d:06:ec:86:f3:3a:8e:
75:e5:fa:a0:43:43:4c:5b:74:de:a8:5e:5f:c0:fc:3a:05:20:
64:18:93:46:e6:ad:6e:4c:83:f4:2c:6d:07:9f:7d:59:56:03:
38:61:95:dc:df:80:c3:04:ce:20:f9:75:c2:73:64:78:34:72:
90:e0:24:e7:11:7a:29:75:34:87:0f:3c:6e:53:80:0b:51:ff:
88:8c:d6:a0:e0:5a:d5:8c:54:02:76:97:f8:26:04:89:ae:be:
b3:87:cd:6d:ac:9d:e7:44:3b:d5:63:93:62:ef:ae:47:6c:b3:
75:d0:1b:61:11:70:d1:2f:f3:cf:cb:a0:34:b0:de:33:31:ee:
49:e0:71:d0:e9:aa:28:27:af:58:b8:75:b5:1d:74:cd:e5:bd:
b7:63:b6:08:5c:9b:32:d2:ef:f1:68:20:fd:26:ea:62:b9:f6:
dd:ce:4d:e5:7b:3f:a0:27:f8:17:5b:87:02:c5:13:32:6d:dc:
12:dd:97:b5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yMjA2MTQxMzI4MDBaFw0yNzA2MTYxMzI4MDBaMBgxFjAU
BgNVBAMMDTYyYTg4Y2U2LTA0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcj72+q7okDIu37rGgXZ5NtHxF0edNY4kPq3D0p0GdRR4RQRth2yEhOUub
CERc6L/Q1+FM8Dgnn97bZB+S/60zsOLXI7k9GZcpnIseZ2/F74hJgtTIk2KMg6w6
bnhqxg7nLEr23k1v6y3jUVAnsbmxjeamaqY3SI0Re5TYYe8yWmH9XQFI/RcRw3Jc
Mw5Wc7A8RzXPP+rN6HLLGO6LmL/7EZlQ69pwE3yjGWXHuxCBC2dEuRC5S9ekk+NQ
K84z/Qi4WTwj5y6ZFYrgS5rtbmmlbw8eH2RGK2d3P2Cs7EbzNhpKLSt48Lo8Tx15
dY2Hl4brZYgkipXBfWZ14gURVt9lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2JUv
T2+qfxuO50kNl96Bmp5327EwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0QyQkMwMkVBRUJFNTExRUM4NTVDN0FDN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQptIAwDQYJKoZIhvcNAQEL
BQADggEBAA2oeXyhucj3USqaeuqpxP65UrDhOehAJyol6SE/e8CpDHNlGd75QA6B
+HAc21k8O2dFxcTNxtRQEvPqbmYc72phDQbshvM6jnXl+qBDQ0xbdN6oXl/A/DoF
IGQYk0bmrW5Mg/QsbQeffVlWAzhhldzfgMMEziD5dcJzZHg0cpDgJOcReil1NIcP
PG5TgAtR/4iM1qDgWtWMVAJ2l/gmBImuvrOHzW2snedEO9Vjk2Lvrkdss3XQG2ER
cNEv88/LoDSw3jMx7kngcdDpqignr1i4dbUddM3lvbdjtghcmzLS7/FoIP0m6mK5
9t3OTeV7P6An+BdbhwLFEzJt3BLdl7U=
-----END CERTIFICATE-----
Generated at Sun May 19 01:46:46 2024 by rpki-client on console-fra.rpki-client.org