Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/97582C76E80F11EC9BB9BF95F1222468.roa
File: 97582C76E80F11EC9BB9BF95F1222468.roa (raw, json)
Hash identifier: ovWnmZ6T7Elu3SEjEp/mK7ACnyOGELPDamR6lMczoGE=
Subject key identifier: 2A:BE:18:A1:2C:81:82:58:9A:9C:05:1B:CE:F2:94:E7:BE:51:85:55
Certificate issuer: /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial: 06
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/97582C76E80F11EC9BB9BF95F1222468.roa
Signing time: Thu 09 Jun 2022 16:17:00 +0000
ROA not before: Thu 09 Jun 2022 16:16:57 +0000
ROA not after: Wed 09 Jun 2032 16:16:57 +0000
asID: 37280
IP address blocks: 41.76.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Validity
Not Before: Jun 9 16:16:57 2022 GMT
Not After : Jun 9 16:16:57 2032 GMT
Subject: CN=62a21cfc-bc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:b8:8e:86:fd:34:63:b2:66:6d:6e:25:cd:
5d:34:6c:47:a7:69:46:37:00:9f:48:0f:1a:ad:c5:
90:25:bb:11:19:8a:a7:b4:9f:d0:c7:f3:de:ed:fb:
19:0d:77:3c:11:cd:92:6d:ef:63:37:ff:a0:0b:ae:
48:17:65:de:34:92:e4:14:dd:52:8a:9a:10:56:65:
62:37:78:6e:a7:7a:5d:3d:13:df:ab:b2:41:99:bd:
05:23:6e:aa:dc:c1:c2:c6:fe:76:12:08:a7:5c:63:
87:f5:43:5b:23:00:47:9e:ab:e0:cd:ba:50:48:d1:
b2:17:80:6c:51:57:a4:f5:a0:b3:79:e2:28:08:59:
b2:1e:a6:07:53:e3:69:37:ac:8a:9a:d7:24:dd:a2:
95:7a:94:80:d7:45:40:df:30:79:fb:52:74:e7:37:
34:72:f9:d7:df:81:ef:61:53:d3:e4:60:9d:b2:8a:
60:1a:40:9e:1d:c7:f0:d5:f6:41:21:94:aa:c8:3f:
c3:01:5e:88:27:7e:fc:70:a3:dc:11:1c:fa:a2:aa:
74:f6:58:45:a3:a0:39:90:2c:4c:8f:6d:5b:4d:1b:
c4:71:f9:ab:e0:45:83:73:f8:d4:eb:f3:54:74:8b:
c1:3e:1e:68:b2:be:40:02:30:28:80:c8:72:23:fa:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:18:A1:2C:81:82:58:9A:9C:05:1B:CE:F2:94:E7:BE:51:85:55
X509v3 Authority Key Identifier:
keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/97582C76E80F11EC9BB9BF95F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:08:8c:f8:c2:e8:18:60:bf:8d:59:f7:6c:03:a5:e1:9c:38:
57:ea:9b:84:58:50:4b:a0:73:4c:d0:47:54:ec:ca:9b:0b:d9:
6e:83:a3:18:6b:8b:dd:b3:65:50:22:a0:66:dd:2f:6a:16:d4:
08:45:7d:db:8a:9b:da:16:a5:92:2b:d7:3f:e6:0c:cb:b5:b7:
ed:e3:ef:c3:92:6a:e7:b2:38:8e:0c:f8:30:e4:56:be:a7:5a:
c3:72:52:e3:ad:cf:00:10:e6:39:3f:72:af:ef:45:6d:dc:a6:
b2:c5:97:98:c1:a0:2b:28:ab:b2:fb:fd:75:d6:a4:10:1c:b5:
4a:97:e6:48:d1:92:a7:5e:11:5c:f5:2c:15:cc:68:49:a9:a0:
26:43:59:d7:05:fa:f1:fc:70:7f:72:0b:1b:18:ae:58:be:b5:
a4:c3:13:52:59:67:e9:fe:ba:72:b9:d3:8d:ea:ec:a3:a2:e3:
ba:60:36:01:ad:29:35:21:6f:7e:6c:6e:86:1b:43:15:b5:6c:
a6:21:1f:a3:5e:c0:bc:71:4b:ec:eb:67:72:61:a1:33:02:47:
cb:cd:7b:a6:06:d1:da:25:f8:c4:d7:e9:25:96:47:70:b1:48:
ad:ec:af:7b:92:86:45:e5:64:bb:51:cd:48:a1:5d:a9:b8:3b:
be:d1:5b:0a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
Qzk0RUFGMTEwLwYDVQQFEyg4MjcyQzJCOEIzQjM4OUVFMkI3QkJENEZCRDU1MDk2
NzZGMzI3OUJCMB4XDTIyMDYwOTE2MTY1N1oXDTMyMDYwOTE2MTY1N1owGDEWMBQG
A1UEAwwNNjJhMjFjZmMtYmMzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMgeuI6G/TRjsmZtbiXNXTRsR6dpRjcAn0gPGq3FkCW7ERmKp7Sf0Mfz3u37
GQ13PBHNkm3vYzf/oAuuSBdl3jSS5BTdUoqaEFZlYjd4bqd6XT0T36uyQZm9BSNu
qtzBwsb+dhIIp1xjh/VDWyMAR56r4M26UEjRsheAbFFXpPWgs3niKAhZsh6mB1Pj
aTesiprXJN2ilXqUgNdFQN8weftSdOc3NHL519+B72FT0+RgnbKKYBpAnh3H8NX2
QSGUqsg/wwFeiCd+/HCj3BEc+qKqdPZYRaOgOZAsTI9tW00bxHH5q+BFg3P41Ovz
VHSLwT4eaLK+QAIwKIDIciP6aUcCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQqvhih
LIGCWJqcBRvO8pTnvlGFVTAfBgNVHSMEGDAWgBSCcsK4s7OJ7it7vU+9VQlnbzJ5
uzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUM5NEUvRTlEN0Q4QUVFODBEMTFFQzk3N0M5NjkwRjEyMjI0NjgvZ25MQ3VM
T3ppZTRyZTcxUHZWVUpaMjh5ZWJzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZ25MQ3VMT3ppZTRyZTcxUHZWVUpaMjh5ZWJzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUM5NEUvRTlEN0Q4QUVFODBEMTFFQzk3N0M5NjkwRjEy
MjI0NjgvOTc1ODJDNzZFODBGMTFFQzlCQjlCRjk1RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAClMwjANBgkqhkiG9w0BAQsF
AAOCAQEALAiM+MLoGGC/jVn3bAOl4Zw4V+qbhFhQS6BzTNBHVOzKmwvZboOjGGuL
3bNlUCKgZt0vahbUCEV924qb2halkivXP+YMy7W37ePvw5Jq57I4jgz4MORWvqda
w3JS463PABDmOT9yr+9FbdymssWXmMGgKyirsvv9ddakEBy1SpfmSNGSp14RXPUs
FcxoSamgJkNZ1wX68fxwf3ILGxiuWL61pMMTUlln6f66crnTjerso6LjumA2Aa0p
NSFvfmxuhhtDFbVspiEfo17AvHFL7OtncmGhMwJHy817pgbR2iX4xNfpJZZHcLFI
reyve5KGReVku1HNSKFdqbg7vtFbCg==
-----END CERTIFICATE-----
Generated at Fri May 17 03:06:27 2024 by rpki-client on console-ams.rpki-client.org