Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7F9A1668BE8711EDBAFEFBCAF1222468.roa
File: 7F9A1668BE8711EDBAFEFBCAF1222468.roa (raw, json)
Hash identifier: 5dFGMa7/6esrJ53Kn7fi7bpzInE0CY3e3GTq+mzsp7A=
Subject key identifier: 94:4A:F7:53:D7:E3:CE:19:AE:84:D0:30:98:0D:33:20:53:CC:73:DA
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 11
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7F9A1668BE8711EDBAFEFBCAF1222468.roa
Signing time: Thu 09 Mar 2023 14:34:29 +0000
ROA not before: Thu 09 Mar 2023 14:34:25 +0000
ROA not after: Thu 31 Mar 2033 14:34:25 +0000
asID: 37182
IP address blocks: 41.93.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 May 2024 00:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 9 14:34:25 2023 GMT
Not After : Mar 31 14:34:25 2033 GMT
Subject: CN=6409ee75-1144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:66:a9:7c:e4:8e:51:eb:e4:69:38:1b:92:
22:f6:7f:c9:42:f0:5e:5d:a9:62:b8:06:a2:1a:66:
b3:c7:a1:62:21:f1:80:9d:0b:9e:4d:16:a3:35:a1:
ee:42:d7:ea:0a:33:75:83:b3:e7:31:63:b4:cd:f7:
6a:1e:fd:17:11:a7:9b:d4:96:93:e2:8f:fe:25:45:
21:9f:44:53:45:28:a3:c8:ce:88:8e:f8:5c:d2:ab:
14:ed:d1:8b:4b:cb:b7:e1:6e:63:7d:52:43:4c:23:
b5:c1:2f:d3:93:2a:c4:ef:95:73:e3:6e:dd:80:80:
17:a6:67:4e:d7:bf:cd:4d:32:19:bd:88:bb:c2:49:
cb:2b:40:48:1f:49:25:da:d6:35:56:79:30:bb:e5:
b6:c7:ef:db:06:e5:55:e1:e3:66:f1:49:bc:24:c7:
4c:ea:85:2d:74:82:65:6f:ca:a7:d5:f3:f1:f8:45:
b0:15:d0:7a:1d:8d:fc:3a:21:43:66:ec:34:bb:2f:
bb:c1:2e:bd:74:31:45:a8:f2:d3:a7:3d:ad:c9:32:
31:cd:2d:f5:13:91:18:ce:d2:1e:e0:e6:9a:a9:dd:
d8:b9:7e:e0:25:f0:eb:e2:81:8a:39:19:14:2f:f2:
ab:52:6a:b3:67:33:0f:8c:5e:22:f1:2a:26:9e:cf:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:F7:53:D7:E3:CE:19:AE:84:D0:30:98:0D:33:20:53:CC:73:DA
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7F9A1668BE8711EDBAFEFBCAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.93.0.0/17
Signature Algorithm: sha256WithRSAEncryption
76:17:eb:e0:1a:c7:c6:ae:50:49:78:80:ca:71:f7:da:82:77:
59:9f:4f:a7:4e:7d:e9:3a:35:8f:bc:c3:b2:e5:5d:33:ee:62:
be:89:5d:2d:80:58:87:9d:07:6a:78:7d:93:0f:06:8b:8c:fe:
b6:8e:f0:cf:4b:2b:45:83:a9:57:eb:3a:92:b7:f3:6c:45:69:
f6:7d:8d:1d:a8:82:29:8f:77:b5:1a:e4:ef:3d:61:14:ba:fd:
a8:bf:bf:76:31:21:44:33:a2:fa:26:b3:33:19:bb:c3:29:36:
7b:39:9b:71:c4:f2:06:d2:cc:b6:1c:82:b1:0b:11:70:bc:e9:
ff:11:06:3d:1f:72:4b:01:11:60:1c:e6:4a:38:94:b9:8d:c3:
08:05:67:66:43:c1:49:49:8e:ec:32:7f:e3:07:79:d7:20:91:
44:93:e9:a4:3e:f2:23:6b:75:6d:b2:5f:10:dc:85:62:e6:62:
62:70:3a:19:e0:a3:14:1b:19:2c:d2:0f:ce:d6:59:11:18:64:
c4:3a:9c:1c:73:df:8e:69:36:ee:74:ef:8a:90:5c:c4:92:bb:
9e:25:84:ff:8a:17:67:99:95:d8:a3:64:c2:1f:10:ae:f6:9e:
e7:c0:4a:bc:75:c8:68:2f:c3:e3:0b:1c:cf:17:05:d0:97:73:
54:7a:49:fb
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBETANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY2
QjBDOUFGMTEwLwYDVQQFEyhBMjBFMjA2N0YwREI3ODNERTM3MjNFMjMxNTE3REM3
RTlGRTVCQUQzMB4XDTIzMDMwOTE0MzQyNVoXDTMzMDMzMTE0MzQyNVowGDEWMBQG
A1UEAwwNNjQwOWVlNzUtMTE0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkTZql85I5R6+RpOBuSIvZ/yULwXl2pYrgGohpms8ehYiHxgJ0Lnk0WozWh
7kLX6gozdYOz5zFjtM33ah79FxGnm9SWk+KP/iVFIZ9EU0Uoo8jOiI74XNKrFO3R
i0vLt+FuY31SQ0wjtcEv05MqxO+Vc+Nu3YCAF6ZnTte/zU0yGb2Iu8JJyytASB9J
JdrWNVZ5MLvltsfv2wblVeHjZvFJvCTHTOqFLXSCZW/Kp9Xz8fhFsBXQeh2N/Doh
Q2bsNLsvu8EuvXQxRajy06c9rckyMc0t9RORGM7SHuDmmqnd2Ll+4CXw6+KBijkZ
FC/yq1Jqs2czD4xeIvEqJp7PET8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSUSvdT
1+POGa6E0DCYDTMgU8xz2jAfBgNVHSMEGDAWgBSiDiBn8Nt4PeNyPiMVF9x+n+W6
0zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkIwQzkvRjEyNjUxOENCQzQwMTFFREFCNTk0RURDRjEyMjI0Njgvb2c0Z1pf
RGJlRDNqY2o0akZSZmNmcF9sdXRNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvb2c0Z1pfRGJlRDNqY2o0akZSZmNmcF9sdXRNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkIwQzkvRjEyNjUxOENCQzQwMTFFREFCNTk0RURDRjEy
MjI0NjgvN0Y5QTE2NjhCRTg3MTFFREJBRkVGQkNBRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEByldADANBgkqhkiG9w0BAQsF
AAOCAQEAdhfr4BrHxq5QSXiAynH32oJ3WZ9Pp0596To1j7zDsuVdM+5ivoldLYBY
h50Hanh9kw8Gi4z+to7wz0srRYOpV+s6krfzbEVp9n2NHaiCKY93tRrk7z1hFLr9
qL+/djEhRDOi+iazMxm7wyk2ezmbccTyBtLMthyCsQsRcLzp/xEGPR9ySwERYBzm
SjiUuY3DCAVnZkPBSUmO7DJ/4wd51yCRRJPppD7yI2t1bbJfENyFYuZiYnA6GeCj
FBsZLNIPztZZERhkxDqcHHPfjmk27nTvipBcxJK7niWE/4oXZ5mV2KNkwh8Qrvae
58BKvHXIaC/D4wsczxcF0JdzVHpJ+w==
-----END CERTIFICATE-----
Generated at Mon May 13 03:36:37 2024 by rpki-client on console-ams.rpki-client.org