Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/880847F2325311EFAA2C1666762E951A.roa
File: 880847F2325311EFAA2C1666762E951A.roa (raw, json)
Hash identifier: Wluds4MwrpwwEfBvwaxH1Q9uLDWNvfUcuMAqtTfYhng=
Subject key identifier: 36:1D:80:E5:A1:11:64:EC:C9:04:F7:FF:37:C6:8C:BE:90:EE:61:06
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 6D
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/880847F2325311EFAA2C1666762E951A.roa
Signing time: Mon 24 Jun 2024 17:59:42 +0000
ROA not before: Mon 24 Jun 2024 17:59:37 +0000
ROA not after: Sat 24 Jun 2034 17:59:37 +0000
asID: 328866
IP address blocks: 41.92.152.0/21 maxlen: 30
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Jun 24 17:59:37 2024 GMT
Not After : Jun 24 17:59:37 2034 GMT
Subject: CN=6679b40e-635c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:8b:9f:60:00:f6:4e:42:ec:58:cd:5f:df:
27:5d:51:4d:0f:54:85:96:83:9f:68:c1:07:da:ad:
c0:88:87:72:30:5f:af:dc:05:8c:38:1d:06:3e:65:
a6:de:30:7f:31:6e:6d:d3:52:ec:b2:2f:b8:d8:91:
8f:77:25:61:47:bc:a6:ef:bf:c6:b6:11:67:71:08:
be:fd:bd:05:1a:2e:e4:67:4a:55:e6:7a:c2:39:54:
0f:12:87:2a:d4:43:f3:dd:e1:d6:a0:d8:5b:ad:8a:
bd:28:70:3c:16:2f:68:f0:20:64:e6:56:49:84:8d:
ea:ae:5a:94:18:6a:e4:aa:8a:41:5a:91:9c:c0:87:
db:0a:01:13:bb:01:81:46:55:95:0a:97:8e:45:7b:
27:e9:5f:1e:82:7e:1b:41:02:75:ea:51:b0:5a:68:
cb:5f:82:2e:cb:02:bc:e5:73:05:c0:f9:71:a1:3f:
e9:6b:f4:94:b9:10:16:94:92:f8:14:ce:36:aa:f7:
e2:c8:c0:c5:26:ce:a9:75:ec:23:1c:02:ca:5d:b6:
62:05:28:41:11:4b:f5:5e:84:d5:c3:59:79:c7:0f:
e3:63:7e:79:d4:f1:bd:95:76:52:6a:13:cc:50:48:
01:5b:dc:e1:6c:f3:a3:00:b4:7f:b7:37:6c:8a:24:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:80:E5:A1:11:64:EC:C9:04:F7:FF:37:C6:8C:BE:90:EE:61:06
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/880847F2325311EFAA2C1666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.152.0/21
Signature Algorithm: sha256WithRSAEncryption
51:1a:e2:b5:50:3c:d8:8c:51:26:ce:84:bf:13:69:03:12:ef:
81:ac:94:0d:fe:fe:b6:a4:63:8e:32:3e:7a:13:32:c4:c0:25:
d0:ec:e2:18:e9:8b:a0:f9:dd:e7:a5:95:e0:ef:ce:af:7f:ae:
15:22:87:e6:a7:12:b2:23:43:46:69:ed:db:33:e6:1c:da:55:
76:2f:81:81:e7:b6:ba:39:61:ba:39:8e:55:76:3a:45:b9:24:
e4:19:a3:e8:3a:1b:5d:60:b0:2f:d3:b2:a8:8d:d4:7a:1e:19:
27:4d:a6:19:30:ef:0b:72:15:6f:1d:8f:53:0a:ed:70:24:9a:
f0:16:8c:ad:69:27:73:8a:ea:ee:8c:18:b8:2d:dd:55:88:aa:
f6:8d:35:32:27:55:6f:1d:ab:38:b2:53:78:12:e5:c3:74:8e:
56:90:90:00:50:bd:c8:d9:8c:c7:09:3e:bc:64:d6:eb:25:f1:
ea:85:c6:5d:19:9a:a0:b9:eb:a5:2a:97:f6:92:61:75:c5:8d:
28:3e:6f:41:d3:ed:11:58:63:cf:bd:5b:c1:d0:d7:b3:d7:7b:
70:6e:6d:9a:99:f9:3f:cc:79:58:5f:3e:6a:04:9a:c3:db:58:
e8:22:2a:26:81:d5:d9:40:83:0d:a9:92:3d:cf:7d:d3:0f:dc:
8f:3a:63:d7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBbTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
QkE2QUFGMTEwLwYDVQQFEyg0RjQ4RTdFQTMwQzk4OUIxNUQzNjM5Mzc3NjM1NTNB
MDdFMTZDRDhFMB4XDTI0MDYyNDE3NTkzN1oXDTM0MDYyNDE3NTkzN1owGDEWMBQG
A1UEAxMNNjY3OWI0MGUtNjM1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK1Si59gAPZOQuxYzV/fJ11RTQ9UhZaDn2jBB9qtwIiHcjBfr9wFjDgdBj5l
pt4wfzFubdNS7LIvuNiRj3clYUe8pu+/xrYRZ3EIvv29BRou5GdKVeZ6wjlUDxKH
KtRD893h1qDYW62KvShwPBYvaPAgZOZWSYSN6q5alBhq5KqKQVqRnMCH2woBE7sB
gUZVlQqXjkV7J+lfHoJ+G0ECdepRsFpoy1+CLssCvOVzBcD5caE/6Wv0lLkQFpSS
+BTONqr34sjAxSbOqXXsIxwCyl22YgUoQRFL9V6E1cNZeccP42N+edTxvZV2UmoT
zFBIAVvc4WzzowC0f7c3bIokXOMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQ2HYDl
oRFk7MkE9/83xoy+kO5hBjAfBgNVHSMEGDAWgBRPSOfqMMmJsV02OTd2NVOgfhbN
jjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0JBNkEvMEY0QTM3RjRFQ0Q5MTFFRTlGNzMyQzY3Nzc1NDEyRTYvVDBqbjZq
REppYkZkTmprM2RqVlRvSDRXelk0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVDBqbjZqREppYkZkTmprM2RqVlRvSDRXelk0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0JBNkEvMEY0QTM3RjRFQ0Q5MTFFRTlGNzMyQzY3Nzc1
NDEyRTYvODgwODQ3RjIzMjUzMTFFRkFBMkMxNjY2NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAylcmDANBgkqhkiG9w0BAQsF
AAOCAQEAURritVA82IxRJs6EvxNpAxLvgayUDf7+tqRjjjI+ehMyxMAl0OziGOmL
oPnd56WV4O/Or3+uFSKH5qcSsiNDRmnt2zPmHNpVdi+Bgee2ujlhujmOVXY6Rbkk
5Bmj6DobXWCwL9OyqI3Ueh4ZJ02mGTDvC3IVbx2PUwrtcCSa8BaMrWknc4rq7owY
uC3dVYiq9o01MidVbx2rOLJTeBLlw3SOVpCQAFC9yNmMxwk+vGTW6yXx6oXGXRma
oLnrpSqX9pJhdcWNKD5vQdPtEVhjz71bwdDXs9d7cG5tmpn5P8x5WF8+agSaw9tY
6CIqJoHV2UCDDamSPc990w/cjzpj1w==
-----END CERTIFICATE-----
Generated at Sat Sep 28 06:36:06 2024 by rpki-client on console-ams.rpki-client.org