Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/B6E64FA46D8E11EEBD3D23814AD9E6FC.roa
File: B6E64FA46D8E11EEBD3D23814AD9E6FC.roa (raw, json)
Hash identifier: wHxuyQF4+uvgcTMqcLwiE3OPhD9sKRldqLMBbm9GZAk=
Subject key identifier: 79:4D:EA:D9:B3:B2:3E:23:A9:EC:79:01:75:04:03:4E:0E:E9:99:DE
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: FC
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/B6E64FA46D8E11EEBD3D23814AD9E6FC.roa
Signing time: Wed 18 Oct 2023 08:17:02 +0000
ROA not before: Wed 18 Oct 2023 08:16:58 +0000
ROA not after: Sat 18 Oct 2025 08:16:58 +0000
asID: 15964
IP address blocks: 41.204.64.0/21 maxlen: 21
41.204.67.0/24 maxlen: 24
41.204.68.0/24 maxlen: 24
41.204.69.0/24 maxlen: 24
41.204.75.0/24 maxlen: 24
41.204.80.0/20 maxlen: 20
41.204.80.0/21 maxlen: 21
41.204.81.0/24 maxlen: 24
41.204.86.0/24 maxlen: 24
41.204.88.0/21 maxlen: 21
41.204.88.0/22 maxlen: 22
41.204.89.0/24 maxlen: 24
41.204.92.0/22 maxlen: 22
41.204.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 18 08:16:58 2023 GMT
Not After : Oct 18 08:16:58 2025 GMT
Subject: CN=652f947e-3497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:80:47:7a:8a:73:b0:01:f1:16:90:27:ff:
69:4e:c0:50:38:46:dc:8f:92:bd:02:ab:50:db:8b:
8f:ec:71:74:a3:35:f8:f7:19:c8:41:11:be:92:89:
92:af:0f:ac:45:bf:75:d4:55:6b:3a:5b:fd:40:da:
76:f0:64:5e:c8:54:9c:42:fd:ab:2c:b9:a0:f9:21:
a4:11:89:6b:26:40:12:99:fd:7d:f7:5c:2b:ae:b6:
c1:ee:78:f9:45:93:e5:86:cc:8b:12:57:b0:88:fd:
c2:48:ec:92:d9:14:0e:96:b8:55:ed:5a:a6:d6:16:
72:6d:4c:31:da:73:9e:c4:bb:43:c1:94:1a:35:3f:
d7:dd:ee:5d:7d:98:f6:c0:33:69:45:aa:2e:40:4c:
99:71:95:24:fa:2a:c9:bc:e6:08:94:a4:cf:51:8a:
7f:a6:ee:d0:06:2b:b2:6c:fd:ca:07:89:92:7a:30:
29:4f:30:8e:9e:a7:8f:66:31:5f:b2:e1:1e:87:1d:
fe:84:6e:3d:7f:b7:4e:e0:40:0b:08:2b:6e:ad:ea:
3b:47:6a:d6:10:79:ab:82:49:fa:2f:55:a0:2f:d3:
9f:cd:17:52:3f:b5:d3:d7:6e:6d:65:71:0e:48:a0:
b3:ae:ca:bf:84:fe:28:69:ab:e2:d0:98:3d:b6:c0:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:EA:D9:B3:B2:3E:23:A9:EC:79:01:75:04:03:4E:0E:E9:99:DE
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/B6E64FA46D8E11EEBD3D23814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.64.0/21
41.204.75.0/24
41.204.80.0/20
Signature Algorithm: sha256WithRSAEncryption
55:b1:cf:99:11:d7:d7:84:6e:13:90:06:7f:c5:06:4b:f9:ad:
37:9b:94:5c:8e:d2:5b:2f:1a:ae:23:fc:ea:fb:c7:f4:46:79:
a9:af:db:05:43:82:14:9c:e9:c4:76:7c:19:fe:4e:d2:5c:7b:
e1:de:3e:f6:45:6d:26:da:4c:49:8f:77:f8:0d:d2:69:f7:cd:
1a:ca:a9:27:6b:cf:2a:72:e2:04:ce:84:0f:b4:2d:ef:b8:ae:
f8:7d:53:b5:f9:a7:8b:3d:45:95:72:16:80:b1:95:a6:b9:d5:
48:85:a6:1c:9e:9b:66:e9:10:80:4f:f3:fb:b0:d4:33:d4:22:
67:37:eb:60:1e:a0:35:b9:da:ab:d8:2c:01:63:3d:69:25:b1:
d5:f6:fa:fb:1a:b6:4a:2e:14:e0:1e:77:23:7a:d6:9e:47:13:
52:86:5f:1e:8f:57:ba:23:16:01:48:05:53:de:5d:3b:d3:58:
d0:3e:b4:5d:3d:a3:d2:2b:4f:b8:60:fc:67:3d:41:d5:c0:db:
e0:f1:bc:76:76:a1:8a:a6:34:7b:74:32:fd:3d:8d:cb:3b:5e:
a1:b5:c1:3c:c4:05:cc:81:ab:74:e1:6d:8a:f7:30:07:26:4f:
cb:04:38:fb:78:e6:ff:0b:05:fa:b4:2d:a5:4f:a2:c3:02:41:
1c:9a:3d:ea
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OTU5MUNBRjExMC8GA1UEBRMoQzEwOTBEMzdEQTlGRkVFRTFBOUMyMjlCQUZGMTE5
MEJEMjJFODkzNDAeFw0yMzEwMTgwODE2NThaFw0yNTEwMTgwODE2NThaMBgxFjAU
BgNVBAMTDTY1MmY5NDdlLTM0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDV/4BHeopzsAHxFpAn/2lOwFA4RtyPkr0Cq1Dbi4/scXSjNfj3GchBEb6S
iZKvD6xFv3XUVWs6W/1A2nbwZF7IVJxC/assuaD5IaQRiWsmQBKZ/X33XCuutsHu
ePlFk+WGzIsSV7CI/cJI7JLZFA6WuFXtWqbWFnJtTDHac57Eu0PBlBo1P9fd7l19
mPbAM2lFqi5ATJlxlST6Ksm85giUpM9Rin+m7tAGK7Js/coHiZJ6MClPMI6ep49m
MV+y4R6HHf6Ebj1/t07gQAsIK26t6jtHatYQeauCSfovVaAv05/NF1I/tdPXbm1l
cQ5IoLOuyr+E/ihpq+LQmD22wJJ1AgMBAAGjggKxMIICrTAdBgNVHQ4EFgQUeU3q
2bOyPiOp7HkBdQQDTg7pmd4wHwYDVR0jBBgwFoAUwQkNN9qf/u4anCKbr/EZC9Iu
iTQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzM0NzQwMzJFQzI0NzExRURBRkE2Qzc5RkYxMjIyNDY4L3dRa05O
OXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dRa05OOXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk1OTFDLzM0NzQwMzJFQzI0NzExRURBRkE2Qzc5RkYx
MjIyNDY4L0I2RTY0RkE0NkQ4RTExRUVCRDNEMjM4MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAMpzEADBAApzEsDBAQpzFAw
DQYJKoZIhvcNAQELBQADggEBAFWxz5kR19eEbhOQBn/FBkv5rTeblFyO0lsvGq4j
/Or7x/RGeamv2wVDghSc6cR2fBn+TtJce+HePvZFbSbaTEmPd/gN0mn3zRrKqSdr
zypy4gTOhA+0Le+4rvh9U7X5p4s9RZVyFoCxlaa51UiFphyem2bpEIBP8/uw1DPU
Imc362AeoDW52qvYLAFjPWklsdX2+vsatkouFOAedyN61p5HE1KGXx6PV7ojFgFI
BVPeXTvTWNA+tF09o9IrT7hg/Gc9QdXA2+DxvHZ2oYqmNHt0Mv09jcs7XqG1wTzE
BcyBq3ThbYr3MAcmT8sEOPt45v8LBfq0LaVPosMCQRyaPeo=
-----END CERTIFICATE-----
Generated at Fri May 10 02:53:49 2024 by rpki-client on console-ams.rpki-client.org