Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/321DCA6CBF2011EDA6A7F59BF1222468.roa
File: 321DCA6CBF2011EDA6A7F59BF1222468.roa (raw, json)
Hash identifier: LTL2TvxmoxA7p1rtrYPP3CFhwYPQKQnOjJOxijet+qw=
Subject key identifier: B2:AA:A0:17:50:53:75:7B:32:D1:D8:3D:FA:90:93:07:23:80:3E:5F
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 27
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/321DCA6CBF2011EDA6A7F59BF1222468.roa
Signing time: Fri 10 Mar 2023 08:47:32 +0000
ROA not before: Fri 10 Mar 2023 08:47:28 +0000
ROA not after: Thu 10 Mar 2033 08:47:28 +0000
asID: 37182
IP address blocks: 41.93.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 May 2024 00:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 10 08:47:28 2023 GMT
Not After : Mar 10 08:47:28 2033 GMT
Subject: CN=640aeea4-6799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:ca:d5:a5:c7:cc:4a:a0:23:46:ff:32:40:
58:61:73:52:ea:d2:e4:c8:cd:59:bb:6e:7f:a7:ba:
0d:c6:3c:4c:e7:f3:98:2e:ac:c9:c8:84:20:34:e5:
0c:09:20:05:47:40:4a:4a:97:88:c8:ab:ff:94:3b:
9e:19:61:db:cb:76:a6:59:79:fe:8f:82:fc:71:6f:
4a:8b:c9:e5:3a:14:90:6f:4e:88:b6:9a:33:3e:f1:
2f:d0:45:0d:02:96:bb:bc:fe:90:73:bc:ee:44:07:
90:c9:52:da:66:a5:1b:f3:b0:d7:a8:ae:f1:1b:ed:
b8:1d:ca:2b:30:07:5c:02:06:7f:4c:e7:99:49:a6:
85:b0:95:54:48:76:73:56:f9:8e:84:e2:1e:91:a4:
f3:00:6e:d4:2e:b5:23:15:0c:c1:77:5a:68:dd:a3:
05:79:6d:66:09:59:00:73:42:2d:33:cf:6f:2e:b3:
2a:89:5d:cd:9e:e9:d9:70:3f:3a:f4:ec:33:f5:c0:
44:8b:56:ad:18:b5:7b:2d:fb:90:3e:02:8e:eb:8e:
50:ca:8b:29:af:e5:42:d8:fa:61:1e:50:b1:f0:5c:
6c:dc:6f:f9:9e:ee:6a:45:bc:f8:3b:9f:63:65:35:
e9:84:6b:98:46:ec:8d:95:04:d9:52:0a:9a:83:f9:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AA:A0:17:50:53:75:7B:32:D1:D8:3D:FA:90:93:07:23:80:3E:5F
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/321DCA6CBF2011EDA6A7F59BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.93.68.0/24
Signature Algorithm: sha256WithRSAEncryption
91:10:c0:8d:a2:25:88:52:a1:33:9b:16:39:05:88:41:7f:6d:
92:3a:19:45:bf:b1:f9:08:9a:2a:a2:fc:2b:3c:3d:25:de:1e:
78:61:67:60:52:bc:44:57:33:3c:3a:b2:75:64:5d:72:e1:a7:
c1:b3:0b:b0:c8:e2:1b:99:99:4d:d3:95:f8:35:68:25:e4:fc:
e1:6e:86:92:93:84:98:b7:fe:40:2f:2c:a5:5e:07:41:42:11:
be:c5:70:e9:0d:7e:ab:4f:b8:f1:bd:23:92:33:d3:9d:28:01:
cf:79:3c:3a:84:5c:09:76:12:07:16:86:e7:71:0c:ec:45:4c:
e8:1b:9c:81:cd:e2:ae:b6:43:28:7a:2b:ec:49:b6:87:31:27:
db:f6:3b:26:c1:ba:1b:02:35:7a:cf:aa:ca:28:a1:ea:84:ce:
09:8e:29:6b:eb:0b:30:bd:f2:e2:9b:45:50:4a:28:ac:82:d0:
2d:74:01:92:8d:db:3b:c9:11:03:7b:e0:a4:5a:27:b0:c4:49:
ac:3c:83:72:4f:7f:3c:5e:48:45:f5:c8:81:01:47:54:ab:74:
09:e1:90:12:59:99:3b:5e:cc:f2:38:76:3e:0a:98:2e:79:8d:
b1:77:b1:8d:46:3c:90:3b:2e:81:12:75:51:d5:3d:7e:61:ca:
a1:fd:8c:16
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBJzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY2
QjBDOUFGMTEwLwYDVQQFEyhBMjBFMjA2N0YwREI3ODNERTM3MjNFMjMxNTE3REM3
RTlGRTVCQUQzMB4XDTIzMDMxMDA4NDcyOFoXDTMzMDMxMDA4NDcyOFowGDEWMBQG
A1UEAwwNNjQwYWVlYTQtNjc5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALQ+ytWlx8xKoCNG/zJAWGFzUurS5MjNWbtuf6e6DcY8TOfzmC6syciEIDTl
DAkgBUdASkqXiMir/5Q7nhlh28t2pll5/o+C/HFvSovJ5ToUkG9OiLaaMz7xL9BF
DQKWu7z+kHO87kQHkMlS2malG/Ow16iu8RvtuB3KKzAHXAIGf0znmUmmhbCVVEh2
c1b5joTiHpGk8wBu1C61IxUMwXdaaN2jBXltZglZAHNCLTPPby6zKoldzZ7p2XA/
OvTsM/XARItWrRi1ey37kD4CjuuOUMqLKa/lQtj6YR5QsfBcbNxv+Z7uakW8+Duf
Y2U16YRrmEbsjZUE2VIKmoP54+kCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSyqqAX
UFN1ezLR2D36kJMHI4A+XzAfBgNVHSMEGDAWgBSiDiBn8Nt4PeNyPiMVF9x+n+W6
0zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkIwQzkvRjEyNjUxOENCQzQwMTFFREFCNTk0RURDRjEyMjI0Njgvb2c0Z1pf
RGJlRDNqY2o0akZSZmNmcF9sdXRNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvb2c0Z1pfRGJlRDNqY2o0akZSZmNmcF9sdXRNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkIwQzkvRjEyNjUxOENCQzQwMTFFREFCNTk0RURDRjEy
MjI0NjgvMzIxRENBNkNCRjIwMTFFREE2QTdGNTlCRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACldRDANBgkqhkiG9w0BAQsF
AAOCAQEAkRDAjaIliFKhM5sWOQWIQX9tkjoZRb+x+QiaKqL8Kzw9Jd4eeGFnYFK8
RFczPDqydWRdcuGnwbMLsMjiG5mZTdOV+DVoJeT84W6GkpOEmLf+QC8spV4HQUIR
vsVw6Q1+q0+48b0jkjPTnSgBz3k8OoRcCXYSBxaG53EM7EVM6Bucgc3irrZDKHor
7Em2hzEn2/Y7JsG6GwI1es+qyiih6oTOCY4pa+sLML3y4ptFUEoorILQLXQBko3b
O8kRA3vgpFonsMRJrDyDck9/PF5IRfXIgQFHVKt0CeGQElmZO17M8jh2PgqYLnmN
sXexjUY8kDsugRJ1UdU9fmHKof2MFg==
-----END CERTIFICATE-----
Generated at Mon May 13 02:51:16 2024 by rpki-client on console-fra.rpki-client.org