Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CB98CEA6AB0211EAA6F7361FF8AEA228.roa
File: CB98CEA6AB0211EAA6F7361FF8AEA228.roa (raw, json)
Hash identifier: ZSYd6jvBelLZFAaYVZgMWbWwLloGNnY8ZF/wD9hbGBg=
Subject key identifier: 2E:B3:A0:0D:BE:D9:35:BC:35:3A:70:F9:68:5B:1A:D0:6F:F0:10:A6
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 26
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CB98CEA6AB0211EAA6F7361FF8AEA228.roa
Signing time: Wed 10 Jun 2020 10:11:49 +0000
ROA not before: Wed 10 Jun 2020 10:11:43 +0000
ROA not after: Tue 31 Dec 2030 10:11:43 +0000
asID: 37061
IP address blocks: 41.203.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jun 10 10:11:43 2020 GMT
Not After : Dec 31 10:11:43 2030 GMT
Subject: CN=5ee0b1e4-9493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:bc:b6:f7:75:4a:e2:f9:4d:e9:51:a6:40:
2a:10:aa:17:7b:41:03:39:f7:e2:3b:e0:59:12:c4:
3c:0f:eb:81:e0:df:bb:5f:dc:a8:05:05:c7:79:2c:
a9:be:01:cf:3e:54:50:64:25:7a:6c:1e:2e:29:c6:
d5:83:85:5c:f7:b8:b8:f1:dd:59:2f:84:2c:47:65:
ab:4e:43:0e:e3:48:bd:56:6e:12:49:2b:f1:db:80:
6f:44:91:b6:e1:0e:b3:4e:6f:fa:82:24:39:16:63:
bc:03:b9:55:cb:64:22:5b:9b:4f:ca:14:7c:92:4c:
74:bd:08:12:cd:37:50:22:0b:1f:17:d2:1c:60:d9:
24:76:ec:b2:4a:6f:aa:46:75:ae:d7:ce:ac:63:af:
f9:1f:a2:9d:32:e4:4a:df:15:42:55:b2:74:69:2d:
31:c9:fe:5f:86:64:42:ef:a5:30:70:c9:f4:36:de:
50:ca:6f:ae:d9:3c:b8:df:9a:0c:7b:2e:b8:ae:e9:
c4:3f:e9:e8:30:b0:37:37:06:c7:38:e8:78:db:a1:
ed:b9:07:6b:20:c1:cc:a1:e0:6a:cb:e0:30:3f:4b:
fc:68:72:d6:c3:7e:bb:97:34:2c:76:d7:cd:df:21:
ae:81:31:07:d0:ca:9f:66:43:9e:af:29:3f:fb:17:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B3:A0:0D:BE:D9:35:BC:35:3A:70:F9:68:5B:1A:D0:6F:F0:10:A6
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CB98CEA6AB0211EAA6F7361FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.203.208.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:e5:f3:2d:e2:18:8a:9c:96:30:1c:5f:d9:f4:23:f2:66:29:
73:60:2d:81:28:ca:ad:a6:71:ad:97:14:d8:3b:71:5c:1b:58:
f1:38:d2:33:70:61:3d:b6:66:db:b5:34:77:62:4a:b1:34:00:
d8:02:ef:37:8b:73:75:de:6e:45:82:6c:b0:14:f6:e2:6e:fb:
9e:7c:3d:c6:46:40:8d:79:b8:56:39:90:65:4b:ce:d3:0c:74:
03:2d:75:fc:85:3c:4c:f2:42:c8:63:88:40:c3:a3:7f:90:14:
7a:ac:8b:29:9e:41:dd:cc:5e:4a:9d:3d:4b:d0:b4:32:5c:c4:
55:75:1d:c1:43:bd:d8:12:a0:b1:62:a9:d1:25:b0:b3:73:fc:
60:ad:07:d9:94:e0:74:33:5c:58:49:9d:db:ee:d4:03:05:65:
50:73:81:bf:57:9d:17:e1:59:c4:9a:34:8e:b5:12:ed:5d:27:
67:8f:9b:3c:fd:27:4e:0c:4e:75:87:da:f3:55:cf:c4:39:a5:
82:62:5c:47:9b:0f:2d:b2:19:1f:ae:d1:3e:e0:35:6a:ab:8b:
1d:f2:a2:2c:e9:41:72:c3:07:c3:2f:02:2b:92:1e:b2:c3:2b:
51:31:5a:62:80:8e:4b:e7:af:fb:79:a4:10:10:9e:87:5e:22:
eb:aa:18:66
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBJjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
MjEwNEFGMTEwLwYDVQQFEyg4QjEwMjY5NTNFQ0Y3QzRDRTEzOUZFOUE1OUJERDcy
MjhBMTUzNTQ0MB4XDTIwMDYxMDEwMTE0M1oXDTMwMTIzMTEwMTE0M1owGDEWMBQG
A1UEAxMNNWVlMGIxZTQtOTQ5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdgvLb3dUri+U3pUaZAKhCqF3tBAzn34jvgWRLEPA/rgeDfu1/cqAUFx3ks
qb4Bzz5UUGQlemweLinG1YOFXPe4uPHdWS+ELEdlq05DDuNIvVZuEkkr8duAb0SR
tuEOs05v+oIkORZjvAO5VctkIlubT8oUfJJMdL0IEs03UCILHxfSHGDZJHbsskpv
qkZ1rtfOrGOv+R+inTLkSt8VQlWydGktMcn+X4ZkQu+lMHDJ9DbeUMpvrtk8uN+a
DHsuuK7pxD/p6DCwNzcGxzjoeNuh7bkHayDBzKHgasvgMD9L/Ghy1sN+u5c0LHbX
zd8hroExB9DKn2ZDnq8pP/sXe1MCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQus6AN
vtk1vDU6cPloWxrQb/AQpjAfBgNVHSMEGDAWgBSLECaVPs98TOE5/ppZvdciihU1
RDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODIxMDQvMDlDQ0I5NENBNzYzMTFFQUJCQzE5MTFDRjhBRUEyMjgvaXhBbWxU
N1BmRXpoT2Y2YVdiM1hJb29WTlVRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvaXhBbWxUN1BmRXpoT2Y2YVdiM1hJb29WTlVRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODIxMDQvMDlDQ0I5NENBNzYzMTFFQUJCQzE5MTFDRjhB
RUEyMjgvQ0I5OENFQTZBQjAyMTFFQUE2RjczNjFGRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnL0DANBgkqhkiG9w0BAQsF
AAOCAQEAq+XzLeIYipyWMBxf2fQj8mYpc2AtgSjKraZxrZcU2DtxXBtY8TjSM3Bh
PbZm27U0d2JKsTQA2ALvN4tzdd5uRYJssBT24m77nnw9xkZAjXm4VjmQZUvO0wx0
Ay11/IU8TPJCyGOIQMOjf5AUeqyLKZ5B3cxeSp09S9C0MlzEVXUdwUO92BKgsWKp
0SWws3P8YK0H2ZTgdDNcWEmd2+7UAwVlUHOBv1edF+FZxJo0jrUS7V0nZ4+bPP0n
TgxOdYfa81XPxDmlgmJcR5sPLbIZH67RPuA1aquLHfKiLOlBcsMHwy8CK5IessMr
UTFaYoCOS+ev+3mkEBCeh14i66oYZg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:55 2024 by rpki-client on console-fra.rpki-client.org