Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/60595D40BF2711EDBEAAF9B1F1222468.roa
File: 60595D40BF2711EDBEAAF9B1F1222468.roa (raw, json)
Hash identifier: 6yn5fJx3uERSOrSflyJLJNNOEVAFn+V73mUiJESHsRg=
Subject key identifier: DA:94:90:A3:B6:73:07:FE:B3:92:B5:9F:9E:8D:6F:11:8A:B9:E3:6D
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 53
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/60595D40BF2711EDBEAAF9B1F1222468.roa
Signing time: Fri 10 Mar 2023 09:38:56 +0000
ROA not before: Fri 10 Mar 2023 09:38:52 +0000
ROA not after: Thu 24 Mar 2033 09:38:52 +0000
asID: 37182
IP address blocks: 41.93.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 14 May 2024 00:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 10 09:38:52 2023 GMT
Not After : Mar 24 09:38:52 2033 GMT
Subject: CN=640afab0-f939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:f3:83:3e:e6:d5:da:d2:83:70:4b:8a:c1:
52:59:ce:28:b7:35:40:3d:3b:b3:1a:ea:cf:90:dd:
1d:b7:ed:ac:36:2a:13:95:05:4a:94:e7:14:14:3f:
e3:a4:6d:d2:51:29:e5:58:ee:79:4a:48:e9:d8:28:
32:36:6e:e4:b6:aa:e0:2b:e1:60:d5:8f:39:a3:d1:
85:3a:ab:18:c9:1e:8d:d4:fa:a2:97:8b:05:ed:51:
87:59:34:c0:df:06:4f:f5:e5:48:4e:5a:27:67:68:
14:5a:0f:90:c8:43:dd:65:20:54:b6:bd:5c:97:6c:
57:0e:16:c9:33:27:4a:f7:fd:8b:ca:43:1a:54:fb:
69:8b:5e:6f:56:3a:1d:1e:83:d3:a6:8c:f5:b8:63:
63:88:2d:c5:ec:7b:62:bd:e4:a0:35:e1:97:4c:2a:
20:8e:89:9d:82:2d:8f:8f:aa:b9:cb:02:30:6e:4e:
27:18:9c:e2:38:bd:3c:6c:b2:58:f3:26:bc:75:9f:
41:8e:65:35:ca:30:6a:82:46:d0:79:04:24:0b:99:
ae:b7:64:27:32:f8:8e:0e:a8:52:c3:aa:5c:15:fc:
43:cb:ba:d0:74:9d:a7:56:3c:1a:ad:8d:91:5d:00:
59:a9:66:86:ae:f0:55:68:b6:58:72:dc:68:2c:d8:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:94:90:A3:B6:73:07:FE:B3:92:B5:9F:9E:8D:6F:11:8A:B9:E3:6D
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/60595D40BF2711EDBEAAF9B1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.93.59.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d1:ca:c5:17:9b:6a:15:dd:4f:4a:e7:22:1b:c4:2a:0e:b4:
42:0d:fc:8c:f4:43:be:52:bd:fe:5e:98:34:46:f0:55:9d:19:
81:07:89:f9:77:54:6e:d4:38:6a:b5:8f:a2:e1:f7:ff:13:cf:
66:8a:e6:7b:60:c1:13:01:e2:44:de:c0:02:46:f7:ed:9d:09:
53:5a:5f:cd:3d:7c:39:10:22:a1:4d:ef:fd:81:bf:02:86:c3:
1f:57:3b:8b:ae:07:a5:ed:51:d1:43:87:8e:4b:22:08:23:07:
4a:53:fb:e3:c9:17:7d:e3:a7:f9:38:b8:52:b1:1c:db:dd:85:
9f:e7:74:b6:ab:4c:b1:42:80:eb:f1:eb:7d:d1:a0:e5:10:1c:
c4:c4:4f:ba:80:22:e1:17:a5:cf:7c:98:50:bd:b1:36:dd:04:
26:76:a0:68:2e:12:f3:a5:7f:f7:29:8c:cb:2e:8b:dd:67:84:
d3:31:13:56:ea:2e:60:06:40:2a:0a:ab:cc:6e:69:50:ab:33:
69:d1:f2:56:a8:87:ac:a7:06:95:8b:49:c2:93:30:1f:ad:10:
79:97:19:27:39:8f:37:ae:f5:1d:63:2b:f1:d0:25:97:fa:63:
66:97:cf:7e:23:ee:c4:b6:e8:d7:6e:21:53:e8:56:5e:f3:0b:
1a:58:87:d0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBUzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY2
QjBDOUFGMTEwLwYDVQQFEyhBMjBFMjA2N0YwREI3ODNERTM3MjNFMjMxNTE3REM3
RTlGRTVCQUQzMB4XDTIzMDMxMDA5Mzg1MloXDTMzMDMyNDA5Mzg1MlowGDEWMBQG
A1UEAwwNNjQwYWZhYjAtZjkzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIN84M+5tXa0oNwS4rBUlnOKLc1QD07sxrqz5DdHbftrDYqE5UFSpTnFBQ/
46Rt0lEp5VjueUpI6dgoMjZu5Laq4CvhYNWPOaPRhTqrGMkejdT6opeLBe1Rh1k0
wN8GT/XlSE5aJ2doFFoPkMhD3WUgVLa9XJdsVw4WyTMnSvf9i8pDGlT7aYteb1Y6
HR6D06aM9bhjY4gtxex7Yr3koDXhl0wqII6JnYItj4+qucsCMG5OJxic4ji9PGyy
WPMmvHWfQY5lNcowaoJG0HkEJAuZrrdkJzL4jg6oUsOqXBX8Q8u60HSdp1Y8Gq2N
kV0AWalmhq7wVWi2WHLcaCzYSwUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTalJCj
tnMH/rOStZ+ejW8RirnjbTAfBgNVHSMEGDAWgBSiDiBn8Nt4PeNyPiMVF9x+n+W6
0zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkIwQzkvRjEyNjUxOENCQzQwMTFFREFCNTk0RURDRjEyMjI0Njgvb2c0Z1pf
RGJlRDNqY2o0akZSZmNmcF9sdXRNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvb2c0Z1pfRGJlRDNqY2o0akZSZmNmcF9sdXRNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkIwQzkvRjEyNjUxOENCQzQwMTFFREFCNTk0RURDRjEy
MjI0NjgvNjA1OTVENDBCRjI3MTFFREJFQUFGOUIxRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACldOzANBgkqhkiG9w0BAQsF
AAOCAQEArtHKxRebahXdT0rnIhvEKg60Qg38jPRDvlK9/l6YNEbwVZ0ZgQeJ+XdU
btQ4arWPouH3/xPPZorme2DBEwHiRN7AAkb37Z0JU1pfzT18ORAioU3v/YG/AobD
H1c7i64Hpe1R0UOHjksiCCMHSlP748kXfeOn+Ti4UrEc292Fn+d0tqtMsUKA6/Hr
fdGg5RAcxMRPuoAi4Relz3yYUL2xNt0EJnagaC4S86V/9ymMyy6L3WeE0zETVuou
YAZAKgqrzG5pUKszadHyVqiHrKcGlYtJwpMwH60QeZcZJzmPN671HWMr8dAll/pj
ZpfPfiPuxLbo124hU+hWXvMLGliH0A==
-----END CERTIFICATE-----
Generated at Sun May 12 03:24:46 2024 by rpki-client on console-fra.rpki-client.org