Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/EF92EAC6969011E9A4280D31F8AEA228.roa
File: EF92EAC6969011E9A4280D31F8AEA228.roa (raw, json)
Hash identifier: 0a9ry7ZLBGBSaODuOljud7Umzq6/+ULq8KkP/gJoptA=
Subject key identifier: 75:5F:54:A7:ED:76:D0:2D:36:86:60:3E:B3:0B:9E:E4:DC:E8:38:4A
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 12
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/EF92EAC6969011E9A4280D31F8AEA228.roa
Signing time: Mon 24 Jun 2019 15:01:25 +0000
ROA not before: Mon 24 Jun 2019 15:01:18 +0000
ROA not after: Mon 25 Jun 2029 15:01:18 +0000
asID: 37049
IP address blocks: 41.242.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 24 15:01:18 2019 GMT
Not After : Jun 25 15:01:18 2029 GMT
Subject: CN=5d10e5c5-32d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:7c:7d:72:ba:37:63:1d:6a:63:51:0a:a0:
78:4f:a2:30:1b:38:f7:46:56:ea:15:cb:d0:5e:22:
1d:32:68:e0:59:39:37:a0:ff:55:e0:ca:34:23:30:
00:d4:d2:d6:c9:99:29:76:8a:cd:76:d2:4a:ac:3f:
9d:f4:85:e7:9e:8d:37:06:8d:45:9f:62:e2:04:02:
a7:38:ba:0d:b9:96:bf:93:1b:f9:86:04:0b:f3:3f:
23:10:2a:ec:df:10:47:a6:93:78:58:a2:ca:74:aa:
a3:be:3f:4a:ac:d1:80:1b:00:6e:bd:96:71:94:09:
ed:d4:64:e5:92:b8:5e:45:cf:9e:4e:bd:b9:9e:1a:
52:3f:a0:a0:7c:e7:24:ce:94:15:cf:03:c5:fd:5d:
a4:33:79:90:80:88:70:8d:de:47:3b:77:7e:08:74:
3c:ff:00:4c:c9:af:fe:9f:98:10:0a:03:75:9b:3b:
6b:7e:cf:4b:67:26:96:c4:cc:0d:41:2e:5c:ab:b6:
d4:c7:cb:e3:40:73:4f:5d:6a:e9:fc:39:60:e1:44:
5f:6a:49:9b:ad:70:4c:9b:af:45:f2:9b:f8:86:2d:
92:a8:b0:52:95:3d:74:66:c6:78:60:0f:e0:fb:99:
83:4c:19:4c:aa:a2:d4:2d:a4:35:b9:0d:10:7f:1f:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:54:A7:ED:76:D0:2D:36:86:60:3E:B3:0B:9E:E4:DC:E8:38:4A
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/EF92EAC6969011E9A4280D31F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.242.168.0/23
Signature Algorithm: sha256WithRSAEncryption
60:8b:25:1d:54:a8:af:4d:8a:16:1a:d3:a7:13:fc:f6:08:a3:
8f:55:d6:6c:4d:8b:9d:24:23:c8:21:84:86:60:f2:85:97:63:
e6:e2:c6:00:43:ff:6e:8e:50:fc:7d:9a:e3:9a:8f:65:43:b4:
3e:5c:b8:b0:1f:8f:76:1d:f4:c7:3c:5f:96:3e:63:7e:2b:02:
b5:5e:6b:e7:50:f9:e0:e3:1f:36:ee:73:ee:67:ef:47:9f:c4:
c9:06:79:e4:b0:a7:b3:98:73:3b:bf:2d:3a:a7:7b:b9:e4:be:
01:52:2c:fe:95:40:d1:c5:a9:b4:74:ff:83:9a:a7:52:f6:21:
c2:50:49:e2:9c:5e:aa:fb:48:bd:a7:68:c2:7b:32:d4:95:8b:
26:01:14:7e:2d:dd:a5:8a:e5:0c:64:22:ad:6d:24:64:e9:35:
a2:3f:12:51:54:4f:81:17:22:b9:95:3a:c3:17:2a:f9:af:60:
2b:d8:db:e6:4f:14:c1:a0:c8:b5:83:2a:aa:c0:ea:e1:3e:cd:
f1:4e:86:3f:3e:49:6b:5a:69:f3:80:7a:d3:29:90:6d:d6:5b:
cc:77:9a:0d:ff:67:06:7e:13:ac:e5:d2:8b:cf:7b:28:25:7c:
68:18:b0:ed:e1:8e:c8:bc:32:b4:7c:cd:30:e6:bc:7f:b5:ba:
df:48:2c:28
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
QkYyN0FGMTEwLwYDVQQFEyg2MDU3RjQ4OUY1QURDNEU5MjY5QzI2MEQ3MDJDODFB
QUI2QUEyRTZEMB4XDTE5MDYyNDE1MDExOFoXDTI5MDYyNTE1MDExOFowGDEWMBQG
A1UEAxMNNWQxMGU1YzUtMzJkNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALKPfH1yujdjHWpjUQqgeE+iMBs490ZW6hXL0F4iHTJo4Fk5N6D/VeDKNCMw
ANTS1smZKXaKzXbSSqw/nfSF556NNwaNRZ9i4gQCpzi6DbmWv5Mb+YYEC/M/IxAq
7N8QR6aTeFiiynSqo74/SqzRgBsAbr2WcZQJ7dRk5ZK4XkXPnk69uZ4aUj+goHzn
JM6UFc8Dxf1dpDN5kICIcI3eRzt3fgh0PP8ATMmv/p+YEAoDdZs7a37PS2cmlsTM
DUEuXKu21MfL40BzT11q6fw5YOFEX2pJm61wTJuvRfKb+IYtkqiwUpU9dGbGeGAP
4PuZg0wZTKqi1C2kNbkNEH8f2rECAwEAAaOCAm4wggJqMB0GA1UdDgQWBBR1X1Sn
7XbQLTaGYD6zC57k3Og4SjAfBgNVHSMEGDAWgBRgV/SJ9a3E6SacJg1wLIGqtqou
bTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUJGMjcvNDUxMjQ4REE5MUVBMTFFOUJBOTI4NDdBRjhBRUEyMjgvWUZmMGlm
V3R4T2ttbkNZTmNDeUJxcmFxTG0wLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWUZmMGlmV3R4T2ttbkNZTmNDeUJxcmFxTG0wLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUJGMjcvNDUxMjQ4REE5MUVBMTFFOUJBOTI4NDdBRjhB
RUEyMjgvRUY5MkVBQzY5NjkwMTFFOUE0MjgwRDMxRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKfKoMA0GCSqGSIb3DQEBCwUAA4IBAQBg
iyUdVKivTYoWGtOnE/z2CKOPVdZsTYudJCPIIYSGYPKFl2Pm4sYAQ/9ujlD8fZrj
mo9lQ7Q+XLiwH492HfTHPF+WPmN+KwK1XmvnUPng4x827nPuZ+9Hn8TJBnnksKez
mHM7vy06p3u55L4BUiz+lUDRxam0dP+DmqdS9iHCUEninF6q+0i9p2jCezLUlYsm
ARR+Ld2liuUMZCKtbSRk6TWiPxJRVE+BFyK5lTrDFyr5r2Ar2NvmTxTBoMi1gyqq
wOrhPs3xToY/PklrWmnzgHrTKZBt1lvMd5oN/2cGfhOs5dKLz3soJXxoGLDt4Y7I
vDK0fM0w5rx/tbrfSCwo
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org