Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/2ACB0B7EB90511EDA3D72E9DF1222468.roa
File: 2ACB0B7EB90511EDA3D72E9DF1222468.roa (raw, json)
Hash identifier: Y26Di5Mtx4+qnesb2dE9YlwXzFR6VIjMiaa+c4P6/vM=
Subject key identifier: EC:E3:DD:88:61:EA:00:4E:A6:F2:42:E6:ED:5A:DF:30:70:5E:BE:9D
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 12
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/2ACB0B7EB90511EDA3D72E9DF1222468.roa
Signing time: Thu 02 Mar 2023 14:18:56 +0000
ROA not before: Thu 02 Mar 2023 14:18:53 +0000
ROA not after: Mon 02 Mar 2026 14:18:53 +0000
asID: 33763
IP address blocks: 41.218.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 14:18:53 2023 GMT
Not After : Mar 2 14:18:53 2026 GMT
Subject: CN=6400b050-99bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:68:00:5b:70:1f:e4:bf:a9:18:62:b1:f9:98:
db:b1:9c:3f:a4:96:05:e5:c6:d1:c2:5c:94:5c:a4:
9c:ba:55:bd:37:fe:79:aa:ca:36:b5:c3:a0:3d:66:
b9:34:40:82:22:9e:d5:a3:e0:80:29:47:a8:f2:3f:
8f:d9:35:b6:f3:ba:c1:e4:45:2a:7c:69:b3:f4:ca:
25:05:90:e9:8a:f3:39:93:11:b2:ee:af:ff:0d:73:
54:17:d6:68:f5:ca:b4:05:cc:c2:dc:02:f3:55:2c:
15:bf:6a:82:77:1d:bd:6a:8b:9e:6c:02:55:3a:1f:
8b:a1:4a:00:13:84:f1:33:ae:46:95:55:6c:c7:53:
10:7d:22:05:53:ed:56:a4:5a:ec:96:42:9b:37:5d:
82:dc:64:5f:75:61:dc:b9:d4:0a:71:4f:3b:ff:f4:
a7:29:df:91:f8:a9:7f:58:1c:7a:b7:0e:a6:eb:3b:
15:d8:68:49:f6:65:a0:78:33:79:6e:04:cc:84:b4:
6b:21:2b:88:33:42:cf:af:93:12:dc:49:8c:ee:11:
47:88:53:3c:0b:2d:84:80:ab:2a:14:3d:77:f0:bb:
42:1b:f0:57:de:90:6c:e9:c6:d0:eb:e1:6e:59:1f:
dc:9a:c6:e9:fb:86:4a:86:b1:2f:db:bc:b7:d5:05:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E3:DD:88:61:EA:00:4E:A6:F2:42:E6:ED:5A:DF:30:70:5E:BE:9D
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/2ACB0B7EB90511EDA3D72E9DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.218.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:78:f2:2d:7e:fe:87:20:97:14:f7:9d:f0:d3:69:58:d6:f5:
4a:6a:f4:f8:0d:80:9c:c0:61:d7:e0:c5:b9:1a:55:c2:2c:3d:
45:16:d0:5e:75:ee:9d:e2:6c:69:e5:f6:42:b2:f3:91:35:4d:
65:2b:dc:20:d9:5c:5f:4f:3e:d9:fa:72:3e:98:dc:a8:63:d3:
b9:72:72:20:18:9d:88:35:02:a2:18:b8:a2:b9:cc:f2:a1:c5:
ac:9f:af:97:71:35:6a:91:ee:de:c4:6f:28:d7:81:ec:25:95:
0c:04:5b:12:a3:c1:b4:a9:28:62:6e:dd:be:d4:94:5a:95:1f:
56:27:f5:05:6a:09:9c:f4:70:09:b9:b5:48:e8:06:d2:31:3f:
8f:e7:44:60:13:01:be:e9:cb:0a:c6:d8:91:9b:71:ae:85:ae:
04:17:4c:63:a2:27:36:b9:5e:93:f5:7a:e9:68:01:be:d5:01:
53:27:a2:65:f5:81:2f:6c:b0:53:7b:a9:9a:f3:6e:1f:8f:b5:
65:f7:5d:25:c2:9b:2d:e4:7b:34:82:92:d8:c4:86:5e:e4:29:
a0:26:f2:df:57:c9:3a:65:cc:ad:8a:76:c8:fb:23:28:2d:e4:
3e:e5:ba:12:e4:e6:8e:f3:8f:53:1a:eb:a1:b5:db:44:a4:c7:
f6:62:98:3c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY4
ODZCM0FGMTEwLwYDVQQFEygzRDZFRDkwNTAzN0M4M0M1NzM3ODBCMENDREM3MEQ1
RDhDRUYwMzhCMB4XDTIzMDMwMjE0MTg1M1oXDTI2MDMwMjE0MTg1M1owGDEWMBQG
A1UEAwwNNjQwMGIwNTAtOTliYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOVoAFtwH+S/qRhisfmY27GcP6SWBeXG0cJclFyknLpVvTf+earKNrXDoD1m
uTRAgiKe1aPggClHqPI/j9k1tvO6weRFKnxps/TKJQWQ6YrzOZMRsu6v/w1zVBfW
aPXKtAXMwtwC81UsFb9qgncdvWqLnmwCVTofi6FKABOE8TOuRpVVbMdTEH0iBVPt
VqRa7JZCmzddgtxkX3Vh3LnUCnFPO//0pynfkfipf1gcercOpus7FdhoSfZloHgz
eW4EzIS0ayEriDNCz6+TEtxJjO4RR4hTPAsthICrKhQ9d/C7QhvwV96QbOnG0Ovh
blkf3JrG6fuGSoaxL9u8t9UFXmkCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTs492I
YeoATqbyQubtWt8wcF6+nTAfBgNVHSMEGDAWgBQ9btkFA3yDxXN4CwzNxw1djO8D
izAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODg2QjMvMzUzNUNBMUFCOEVGMTFFREE5QjM0MURBRjEyMjI0NjgvUFc3WkJR
TjhnOFZ6ZUFzTXpjY05YWXp2QTRzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUFc3WkJRTjhnOFZ6ZUFzTXpjY05YWXp2QTRzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODg2QjMvMzUzNUNBMUFCOEVGMTFFREE5QjM0MURBRjEy
MjI0NjgvMkFDQjBCN0VCOTA1MTFFREEzRDcyRTlERjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnaYDANBgkqhkiG9w0BAQsF
AAOCAQEAG3jyLX7+hyCXFPed8NNpWNb1Smr0+A2AnMBh1+DFuRpVwiw9RRbQXnXu
neJsaeX2QrLzkTVNZSvcINlcX08+2fpyPpjcqGPTuXJyIBidiDUCohi4ornM8qHF
rJ+vl3E1apHu3sRvKNeB7CWVDARbEqPBtKkoYm7dvtSUWpUfVif1BWoJnPRwCbm1
SOgG0jE/j+dEYBMBvunLCsbYkZtxroWuBBdMY6InNrlek/V66WgBvtUBUyeiZfWB
L2ywU3upmvNuH4+1ZfddJcKbLeR7NIKS2MSGXuQpoCby31fJOmXMrYp2yPsjKC3k
PuW6EuTmjvOPUxrrobXbRKTH9mKYPA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:46 2024 by rpki-client on console-ams.rpki-client.org