Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/0647F062E81011ECB21C3D97F1222468.roa
File: 0647F062E81011ECB21C3D97F1222468.roa (raw, json)
Hash identifier: 2Aw5cusD/e8+4Q7UEVwavTN78x74T6NZidZElJIWccM=
Subject key identifier: 90:AD:20:7B:40:82:2E:9C:7A:04:8E:F1:88:7F:3F:0D:70:C8:91:9A
Certificate issuer: /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial: 0A
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/0647F062E81011ECB21C3D97F1222468.roa
Signing time: Thu 09 Jun 2022 16:20:06 +0000
ROA not before: Thu 09 Jun 2022 16:20:03 +0000
ROA not after: Wed 09 Jun 2032 16:20:03 +0000
asID: 37280
IP address blocks: 41.76.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Validity
Not Before: Jun 9 16:20:03 2022 GMT
Not After : Jun 9 16:20:03 2032 GMT
Subject: CN=62a21db6-62fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:95:4d:35:95:a0:22:23:c6:9d:59:cd:fe:
80:c9:56:86:69:46:c3:d1:e6:d4:c6:6e:a2:2f:93:
a0:a4:71:5e:65:f8:40:01:77:80:81:97:51:f9:e1:
e9:7c:1f:a2:3d:f3:e1:98:9f:f5:0e:3d:01:bb:db:
0d:10:df:d9:91:a0:30:d6:6f:82:74:6c:2d:51:ad:
f3:ac:ca:b7:85:ac:29:3d:45:8e:06:d9:cc:9c:0f:
b0:84:b3:7e:a6:b9:2d:20:35:79:db:d0:c6:74:39:
76:3e:88:d6:a8:7f:51:47:56:35:c2:f6:9f:0a:29:
13:5f:c5:bd:ed:b8:3d:08:bc:e0:47:75:ac:70:5f:
f9:96:53:e7:45:31:33:0f:b2:71:14:46:ed:52:ce:
af:22:da:62:d7:26:d9:e7:db:a9:4c:82:36:8f:4e:
62:73:f9:ff:52:d1:18:e4:02:35:ba:b1:ef:8c:0b:
0d:78:b7:51:00:aa:84:a2:02:38:c1:d7:e4:0a:64:
ec:11:1c:54:c0:6d:7d:47:69:5e:66:14:11:1f:48:
31:8a:15:7e:c8:87:a7:54:9a:eb:64:e1:9a:db:86:
20:e0:f3:af:a2:f1:db:6d:0c:cc:3a:6a:28:ce:36:
6d:9c:db:73:f7:ca:c8:58:6a:37:28:25:b4:40:df:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:20:7B:40:82:2E:9C:7A:04:8E:F1:88:7F:3F:0D:70:C8:91:9A
X509v3 Authority Key Identifier:
keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/0647F062E81011ECB21C3D97F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:77:06:26:8f:4e:40:65:cc:1a:9d:19:d0:91:30:73:86:bf:
9f:1c:b3:24:d5:44:be:dd:f6:e8:27:2d:20:67:e8:a7:98:5b:
fc:e2:d1:8f:07:2d:b4:43:c3:35:8d:5b:e5:3f:cb:55:a6:dc:
ff:1f:31:96:13:f4:8b:74:a1:69:8f:88:0b:70:aa:bf:bd:8f:
b6:d7:79:24:ff:f9:15:0c:3a:a2:15:08:e5:ef:cd:bd:8e:08:
ab:0f:b0:e0:06:7e:de:ff:2a:bd:9e:d9:fd:54:dc:2d:67:15:
96:4a:8f:57:fe:c0:78:cc:e3:da:e4:24:02:0a:c7:a2:0c:61:
ef:49:19:dd:89:a7:82:83:f8:b7:12:2c:5b:4e:af:14:21:bf:
31:b0:86:76:f5:e8:32:07:e9:3c:dd:c0:7f:fa:76:c5:dc:ff:
74:f9:eb:18:29:97:cf:52:7e:36:e3:3d:17:0a:63:85:7f:f2:
16:25:45:47:c6:1b:45:42:24:ca:b9:51:ff:b2:e1:76:83:a8:
28:40:e2:d8:d7:36:24:16:46:b7:3e:db:b3:d3:39:d1:17:9b:
8a:01:8e:6d:68:c7:b3:43:9b:bf:57:9f:23:d3:1e:32:70:8a:
44:6a:99:fd:ae:b7:b8:37:82:ad:6c:7d:83:6c:2e:d0:9f:47:
10:4e:b4:3a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
Qzk0RUFGMTEwLwYDVQQFEyg4MjcyQzJCOEIzQjM4OUVFMkI3QkJENEZCRDU1MDk2
NzZGMzI3OUJCMB4XDTIyMDYwOTE2MjAwM1oXDTMyMDYwOTE2MjAwM1owGDEWMBQG
A1UEAwwNNjJhMjFkYjYtNjJmZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbFlU01laAiI8adWc3+gMlWhmlGw9Hm1MZuoi+ToKRxXmX4QAF3gIGXUfnh
6Xwfoj3z4Zif9Q49AbvbDRDf2ZGgMNZvgnRsLVGt86zKt4WsKT1FjgbZzJwPsISz
fqa5LSA1edvQxnQ5dj6I1qh/UUdWNcL2nwopE1/Fve24PQi84Ed1rHBf+ZZT50Ux
Mw+ycRRG7VLOryLaYtcm2efbqUyCNo9OYnP5/1LRGOQCNbqx74wLDXi3UQCqhKIC
OMHX5Apk7BEcVMBtfUdpXmYUER9IMYoVfsiHp1Sa62ThmtuGIODzr6Lx220MzDpq
KM42bZzbc/fKyFhqNygltEDfGzcCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSQrSB7
QIIunHoEjvGIfz8NcMiRmjAfBgNVHSMEGDAWgBSCcsK4s7OJ7it7vU+9VQlnbzJ5
uzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUM5NEUvRTlEN0Q4QUVFODBEMTFFQzk3N0M5NjkwRjEyMjI0NjgvZ25MQ3VM
T3ppZTRyZTcxUHZWVUpaMjh5ZWJzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZ25MQ3VMT3ppZTRyZTcxUHZWVUpaMjh5ZWJzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUM5NEUvRTlEN0Q4QUVFODBEMTFFQzk3N0M5NjkwRjEy
MjI0NjgvMDY0N0YwNjJFODEwMTFFQ0IyMUMzRDk3RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAClMxDANBgkqhkiG9w0BAQsF
AAOCAQEAGncGJo9OQGXMGp0Z0JEwc4a/nxyzJNVEvt326CctIGfop5hb/OLRjwct
tEPDNY1b5T/LVabc/x8xlhP0i3ShaY+IC3Cqv72Pttd5JP/5FQw6ohUI5e/NvY4I
qw+w4AZ+3v8qvZ7Z/VTcLWcVlkqPV/7AeMzj2uQkAgrHogxh70kZ3YmngoP4txIs
W06vFCG/MbCGdvXoMgfpPN3Af/p2xdz/dPnrGCmXz1J+NuM9FwpjhX/yFiVFR8Yb
RUIkyrlR/7LhdoOoKEDi2Nc2JBZGtz7bs9M50RebigGObWjHs0Obv1efI9MeMnCK
RGqZ/a63uDeCrWx9g2wu0J9HEE60Og==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org