Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/474A0C00BF2711ED866BCDB1F1222468.roa
File: 474A0C00BF2711ED866BCDB1F1222468.roa (raw, json)
Hash identifier: vWhe+qpX7yO3zSQDfZFmM1NAveobUhjW5jaNbI8jeio=
Subject key identifier: 86:B0:0D:9C:4A:4F:05:30:17:C5:06:59:EF:7A:A0:35:40:CE:B8:9F
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 51
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/474A0C00BF2711ED866BCDB1F1222468.roa
Signing time: Fri 10 Mar 2023 09:38:14 +0000
ROA not before: Fri 10 Mar 2023 09:38:10 +0000
ROA not after: Thu 31 Mar 2033 09:38:10 +0000
asID: 37182
IP address blocks: 41.93.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 10 09:38:10 2023 GMT
Not After : Mar 31 09:38:10 2033 GMT
Subject: CN=640afa86-edb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:72:20:f9:61:5c:72:dd:13:f5:34:fe:04:
d4:e0:f7:39:3f:6e:12:4f:a7:d3:10:84:d8:9d:98:
02:de:cf:8f:71:ea:fb:a0:6f:4d:a8:fb:b6:de:23:
26:c4:1d:28:ff:95:d5:9e:f0:9f:f5:4c:46:87:db:
04:a4:bc:ac:98:36:af:06:08:dd:81:dd:04:72:dc:
40:f1:e1:28:0a:75:a9:0a:05:de:42:18:5d:4b:4d:
f7:38:3d:cf:08:e1:76:43:5b:28:0b:24:8d:7c:b8:
d6:26:e7:9f:8c:8e:34:65:f2:c4:6c:95:ba:bd:0c:
39:29:a2:54:e4:71:74:ea:a3:58:4d:01:25:df:da:
b4:e7:72:33:68:17:2c:f8:8e:30:32:cc:02:3c:a0:
42:b2:5c:57:c4:0f:89:27:36:04:52:ad:92:fe:a3:
8a:50:f7:63:4c:47:60:21:60:61:56:12:3e:ea:b7:
a4:d9:df:a6:18:a7:3d:6f:ec:9e:43:67:51:ac:53:
62:75:25:8a:1f:3f:b4:28:3c:f1:df:21:46:3f:e7:
3d:a7:3e:3b:20:13:df:b1:0b:98:e2:93:f5:9b:af:
6c:c7:37:4f:89:ee:4e:a9:1b:9b:b9:63:d5:2c:65:
e0:59:ce:fa:11:af:0c:47:a2:fe:c5:88:1b:7e:8d:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:0D:9C:4A:4F:05:30:17:C5:06:59:EF:7A:A0:35:40:CE:B8:9F
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/474A0C00BF2711ED866BCDB1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.93.58.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:27:7b:6d:b2:78:e1:5b:13:a2:f1:99:f6:0e:32:74:6a:e4:
d3:93:ab:d8:78:91:09:44:61:6f:d9:a2:56:dd:8a:5c:99:7d:
7e:fe:82:7a:69:41:b2:4d:4b:b1:c7:d0:a8:38:90:34:3f:da:
eb:61:d7:36:a1:57:3a:1c:b5:8e:b4:9f:3f:db:78:fe:f9:0e:
53:70:fd:59:ca:86:0d:1b:e6:15:f8:b3:0e:9c:3f:b3:9c:d2:
68:a5:d9:d3:a6:43:38:61:4c:9e:72:12:9e:13:81:c5:02:88:
37:8f:19:27:82:bb:d6:2e:34:60:4d:e5:cf:93:9f:5d:51:9e:
80:70:d1:32:69:a5:8c:e8:50:fd:8c:c6:07:e2:fd:f6:38:4f:
fe:54:96:0d:33:fa:39:c7:66:99:27:35:ed:c5:b0:59:4c:6b:
83:99:4c:c2:6a:96:ca:ed:54:28:4f:b1:91:86:5a:de:65:e4:
6e:7e:ec:c5:66:c7:ce:0f:de:b0:ce:67:6f:a2:c0:31:d9:a0:
2d:d9:9a:5b:81:da:a8:23:24:e4:22:16:ba:48:60:d1:44:dd:
76:c4:b1:a8:50:ff:4f:94:27:7a:11:d8:ab:57:e9:67:b4:99:
34:f9:9b:0a:a3:50:bd:63:ae:9d:3f:a1:28:3e:96:56:a4:ad:
a1:f5:91:6c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBUTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY2
QjBDOUFGMTEwLwYDVQQFEyhBMjBFMjA2N0YwREI3ODNERTM3MjNFMjMxNTE3REM3
RTlGRTVCQUQzMB4XDTIzMDMxMDA5MzgxMFoXDTMzMDMzMTA5MzgxMFowGDEWMBQG
A1UEAwwNNjQwYWZhODYtZWRiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKsVciD5YVxy3RP1NP4E1OD3OT9uEk+n0xCE2J2YAt7Pj3Hq+6BvTaj7tt4j
JsQdKP+V1Z7wn/VMRofbBKS8rJg2rwYI3YHdBHLcQPHhKAp1qQoF3kIYXUtN9zg9
zwjhdkNbKAskjXy41ibnn4yONGXyxGyVur0MOSmiVORxdOqjWE0BJd/atOdyM2gX
LPiOMDLMAjygQrJcV8QPiSc2BFKtkv6jilD3Y0xHYCFgYVYSPuq3pNnfphinPW/s
nkNnUaxTYnUlih8/tCg88d8hRj/nPac+OyAT37ELmOKT9ZuvbMc3T4nuTqkbm7lj
1Sxl4FnO+hGvDEei/sWIG36NwFMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSGsA2c
Sk8FMBfFBlnveqA1QM64nzAfBgNVHSMEGDAWgBSiDiBn8Nt4PeNyPiMVF9x+n+W6
0zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkIwQzkvRjEyNjUxOENCQzQwMTFFREFCNTk0RURDRjEyMjI0Njgvb2c0Z1pf
RGJlRDNqY2o0akZSZmNmcF9sdXRNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvb2c0Z1pfRGJlRDNqY2o0akZSZmNmcF9sdXRNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkIwQzkvRjEyNjUxOENCQzQwMTFFREFCNTk0RURDRjEy
MjI0NjgvNDc0QTBDMDBCRjI3MTFFRDg2NkJDREIxRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACldOjANBgkqhkiG9w0BAQsF
AAOCAQEAxSd7bbJ44VsTovGZ9g4ydGrk05Or2HiRCURhb9miVt2KXJl9fv6CemlB
sk1LscfQqDiQND/a62HXNqFXOhy1jrSfP9t4/vkOU3D9WcqGDRvmFfizDpw/s5zS
aKXZ06ZDOGFMnnISnhOBxQKIN48ZJ4K71i40YE3lz5OfXVGegHDRMmmljOhQ/YzG
B+L99jhP/lSWDTP6OcdmmSc17cWwWUxrg5lMwmqWyu1UKE+xkYZa3mXkbn7sxWbH
zg/esM5nb6LAMdmgLdmaW4HaqCMk5CIWukhg0UTddsSxqFD/T5QnehHYq1fpZ7SZ
NPmbCqNQvWOunT+hKD6WVqStofWRbA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:55 2024 by rpki-client on console-fra.rpki-client.org