Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/8C7C1810938711EE9A4CB809D25BE465.roa
File: 8C7C1810938711EE9A4CB809D25BE465.roa (raw, json)
Hash identifier: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=
Subject key identifier: 02:A5:15:A3:D6:D8:9C:C4:5E:BB:DD:BD:27:5A:49:46:EF:58:BF:73
Certificate issuer: /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial: 02
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/8C7C1810938711EE9A4CB809D25BE465.roa
Signing time: Tue 05 Dec 2023 16:01:28 +0000
ROA not before: Tue 05 Dec 2023 16:01:24 +0000
ROA not after: Sat 05 Dec 2026 16:01:24 +0000
asID: 37089
IP address blocks: 41.191.100.0/24 maxlen: 24
41.191.101.0/24 maxlen: 24
41.191.102.0/24 maxlen: 24
41.191.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Validity
Not Before: Dec 5 16:01:24 2023 GMT
Not After : Dec 5 16:01:24 2026 GMT
Subject: CN=656f4958-3949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:ef:88:95:6d:fc:2a:f7:88:28:49:61:4c:
c1:3c:53:7a:17:55:4c:89:86:d2:8f:65:cf:c0:ea:
e4:76:d4:a2:d5:d2:90:84:1d:d5:4d:99:26:d6:dc:
b6:b3:d0:4d:eb:77:91:7e:61:21:c2:38:e8:56:e7:
37:0a:59:fc:8c:03:42:14:f8:d7:c7:fe:6e:3e:76:
71:ad:e1:9e:a9:e8:3c:48:b5:49:dd:99:6e:86:be:
1e:3b:a9:ed:48:26:65:6c:f1:f5:1f:b2:4e:39:12:
f0:f3:53:83:0c:1e:35:98:70:d8:5f:16:0c:aa:c9:
6c:9a:2f:82:b5:63:fc:fa:71:a9:fe:21:34:49:6d:
bc:94:e0:63:35:30:fb:a2:17:00:f7:8d:c2:ea:8f:
fc:a0:5c:d4:65:de:05:f6:4a:3d:16:06:45:cb:65:
8e:96:f0:57:bf:28:91:a9:fd:54:12:67:a7:8f:9e:
98:d3:5d:35:88:8f:20:0c:55:0f:88:ed:58:78:d9:
76:b6:bb:79:4e:27:bc:78:b5:2f:ab:01:0b:74:e9:
b2:b3:6a:9f:d6:c6:98:9d:30:36:f3:3e:bd:bc:c3:
2b:68:f5:3e:89:a0:08:28:1c:e0:db:ec:5e:41:32:
1b:43:6d:3f:8d:57:1f:ea:38:19:c3:3f:19:c3:14:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:15:A3:D6:D8:9C:C4:5E:BB:DD:BD:27:5A:49:46:EF:58:BF:73
X509v3 Authority Key Identifier:
keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/8C7C1810938711EE9A4CB809D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:bf:7f:61:8d:08:57:1e:a7:9b:5b:fb:18:08:fa:b2:ea:30:
86:84:30:9a:82:da:a4:ab:86:11:1a:17:a4:a8:74:fe:1b:17:
03:db:61:e7:91:80:86:42:51:24:08:21:ef:40:56:8a:40:3d:
2c:94:43:d8:94:be:1f:90:58:ff:41:22:53:00:a0:54:86:d6:
2f:39:cc:ae:92:f0:8a:3e:7c:67:26:34:0a:e4:72:e4:0d:a1:
14:d3:29:dc:1e:f4:8f:2f:ba:51:6c:5c:45:54:42:73:fb:5b:
88:a6:51:f9:c8:53:ad:a6:4d:24:14:a6:c0:84:46:54:13:82:
13:aa:5e:93:c0:60:6c:ad:66:a3:6c:23:4b:49:b5:35:97:28:
dc:e7:13:72:10:9d:9e:52:65:2c:31:74:1b:89:17:46:20:fb:
ac:ac:58:b1:54:34:ee:c7:5f:3e:72:46:4a:d5:f4:1e:de:ed:
85:c4:48:a0:0e:c6:4f:cf:96:b2:ba:a1:2c:01:cb:c0:a5:9e:
d4:1d:04:9e:3f:b3:6f:9d:ee:3a:b2:c6:71:e9:ab:04:15:5b:
5c:ba:53:2e:3b:39:76:98:a0:20:0f:89:47:90:6e:d4:aa:ec:
e6:59:b2:c5:b5:bd:52:60:76:75:bd:00:4e:fd:ae:dd:86:5a:
fb:db:3a:a0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
Q0EyNkFGMTEwLwYDVQQFEygwRTI1QzJGOEQ1RTUwMjlFNjkxMDlFQkNFQjI1NUND
RTM1NDkxNkZFMB4XDTIzMTIwNTE2MDEyNFoXDTI2MTIwNTE2MDEyNFowGDEWMBQG
A1UEAxMNNjU2ZjQ5NTgtMzk0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAME574iVbfwq94goSWFMwTxTehdVTImG0o9lz8Dq5HbUotXSkIQd1U2ZJtbc
trPQTet3kX5hIcI46FbnNwpZ/IwDQhT418f+bj52ca3hnqnoPEi1Sd2Zboa+Hjup
7UgmZWzx9R+yTjkS8PNTgwweNZhw2F8WDKrJbJovgrVj/Ppxqf4hNEltvJTgYzUw
+6IXAPeNwuqP/KBc1GXeBfZKPRYGRctljpbwV78okan9VBJnp4+emNNdNYiPIAxV
D4jtWHjZdra7eU4nvHi1L6sBC3TpsrNqn9bGmJ0wNvM+vbzDK2j1PomgCCgc4Nvs
XkEyG0NtP41XH+o4GcM/GcMUOTMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQCpRWj
1ticxF673b0nWklG71i/czAfBgNVHSMEGDAWgBQOJcL41eUCnmkQnrzrJVzONUkW
/jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUNBMjYvQkVDQzQ3Mzg5Mzg1MTFFRUJDNzc3MjA2RDI1QkU0NjUvRGlYQy1O
WGxBcDVwRUo2ODZ5VmN6alZKRnY0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRGlYQy1OWGxBcDVwRUo2ODZ5VmN6alZKRnY0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUNBMjYvQkVDQzQ3Mzg5Mzg1MTFFRUJDNzc3MjA2RDI1
QkU0NjUvOEM3QzE4MTA5Mzg3MTFFRTlBNENCODA5RDI1QkU0NjUucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAim/ZDANBgkqhkiG9w0BAQsF
AAOCAQEAP79/YY0IVx6nm1v7GAj6suowhoQwmoLapKuGERoXpKh0/hsXA9th55GA
hkJRJAgh70BWikA9LJRD2JS+H5BY/0EiUwCgVIbWLznMrpLwij58ZyY0CuRy5A2h
FNMp3B70jy+6UWxcRVRCc/tbiKZR+chTraZNJBSmwIRGVBOCE6pek8BgbK1mo2wj
S0m1NZco3OcTchCdnlJlLDF0G4kXRiD7rKxYsVQ07sdfPnJGStX0Ht7thcRIoA7G
T8+WsrqhLAHLwKWe1B0Enj+zb53uOrLGcemrBBVbXLpTLjs5dpigIA+JR5Bu1Krs
5lmyxbW9UmB2db0ATv2u3YZa+9s6oA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org