Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/9C9F4FB003B611EFB8A12227017001B1.roa
File: 9C9F4FB003B611EFB8A12227017001B1.roa (raw, json)
Hash identifier: RVO87omLbTuzPNyt+gyuo6dbEU3UiqJ5W8lmS1Jz7c8=
Subject key identifier: 37:D3:C1:43:72:91:E5:BE:9F:34:0B:FB:11:2D:74:A4:EE:50:B1:C7
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01E7
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/9C9F4FB003B611EFB8A12227017001B1.roa
Signing time: Fri 26 Apr 2024 10:20:32 +0000
ROA not before: Fri 26 Apr 2024 10:20:28 +0000
ROA not after: Thu 30 Apr 2043 10:20:28 +0000
asID: 30988
IP address blocks: 41.73.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 26 10:20:28 2024 GMT
Not After : Apr 30 10:20:28 2043 GMT
Subject: CN=662b7ff0-0727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:45:1d:fb:e8:b3:07:3d:83:f7:80:b3:6d:60:
fb:bc:39:87:06:e0:f2:94:77:ad:98:a6:1c:d7:c6:
b8:6d:8e:94:6a:9f:86:78:21:bb:54:9d:57:43:f5:
f8:3e:8a:cf:74:ad:a0:10:c8:c8:99:72:2e:85:f9:
e6:8a:d0:05:bb:23:ad:a5:5b:85:21:5a:eb:4e:3c:
a7:de:ba:28:fb:20:5c:57:d6:08:54:8b:c0:69:57:
7d:c3:72:7e:39:3b:b6:50:e5:16:a1:33:81:1c:b4:
a7:b0:52:0f:b8:81:7b:13:b6:7e:4e:75:c5:3e:d8:
cf:3e:7a:8b:9d:89:b8:87:f5:74:f9:db:b3:f1:9d:
27:9c:8d:82:f2:36:1e:67:c0:27:e1:68:bb:49:6c:
b2:6f:48:1d:3e:35:39:ee:89:5e:09:dc:d5:7c:00:
29:1a:96:b4:bc:ce:05:da:37:b0:4c:5a:9b:43:2e:
0b:93:bd:37:93:d5:c3:c0:65:89:c4:23:c7:cd:cc:
f4:69:92:6b:70:3a:94:9f:f2:0e:34:5e:6f:74:46:
19:5d:2d:5a:ac:84:b2:f4:f8:67:5d:59:dc:2e:1c:
6c:d1:93:78:1d:85:08:0c:22:e8:3f:49:84:ea:3d:
38:81:dd:e1:82:cb:8b:62:03:d7:4b:0d:40:e7:9b:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:C1:43:72:91:E5:BE:9F:34:0B:FB:11:2D:74:A4:EE:50:B1:C7
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/9C9F4FB003B611EFB8A12227017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.134.0/24
Signature Algorithm: sha256WithRSAEncryption
07:30:40:ce:1c:1a:a4:8b:8c:e9:b1:d7:f3:c3:c8:84:12:ca:
e3:74:fd:57:c1:52:6b:68:64:a6:88:d4:ce:79:96:86:d2:2a:
d9:54:e1:8d:bd:99:29:05:0d:15:6f:17:c6:ce:02:88:25:13:
9b:bf:b2:1a:4c:5f:43:5c:35:95:17:07:e4:0e:2b:4c:f6:75:
08:8a:6a:8b:26:e6:d8:90:61:1b:e4:b4:be:fd:5b:49:29:77:
3a:8f:36:92:42:d3:9e:0e:e8:d0:71:e2:38:21:a2:74:71:1e:
9a:e0:e3:9f:6a:15:96:b7:52:d1:bf:59:d2:0f:1c:02:30:df:
d9:81:20:a9:d3:04:33:f2:a5:c8:12:fd:b5:5f:80:70:71:54:
75:e6:d8:bf:c2:55:6f:47:43:42:a7:e4:2b:63:7e:db:68:98:
9e:a4:7a:c5:52:b9:00:eb:78:b0:91:bf:1d:65:19:90:7a:9a:
b9:ed:54:d9:7a:f2:16:4c:28:19:86:1e:c7:d9:71:63:ef:3c:
dd:08:e2:fd:a6:41:aa:74:e1:12:ab:ba:22:7f:05:6b:bd:42:
b6:73:35:0d:e5:d8:e1:24:80:67:d7:2d:1f:c4:cf:81:2e:0f:
37:28:37:fb:60:bb:58:57:46:de:92:6c:93:de:9b:23:4b:3a:
f5:4b:da:98
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAecwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OURCNUVBRjExMC8GA1UEBRMoRDNFMkUwQkNFQjYxRkI5QzQ1Mjc4MjZFNjEwRDQ2
NzY5OUQ2M0UxNDAeFw0yNDA0MjYxMDIwMjhaFw00MzA0MzAxMDIwMjhaMBgxFjAU
BgNVBAMTDTY2MmI3ZmYwLTA3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD2RR376LMHPYP3gLNtYPu8OYcG4PKUd62YphzXxrhtjpRqn4Z4IbtUnVdD
9fg+is90raAQyMiZci6F+eaK0AW7I62lW4UhWutOPKfeuij7IFxX1ghUi8BpV33D
cn45O7ZQ5RahM4EctKewUg+4gXsTtn5OdcU+2M8+eoudibiH9XT527PxnSecjYLy
Nh5nwCfhaLtJbLJvSB0+NTnuiV4J3NV8ACkalrS8zgXaN7BMWptDLguTvTeT1cPA
ZYnEI8fNzPRpkmtwOpSf8g40Xm90RhldLVqshLL0+GddWdwuHGzRk3gdhQgMIug/
SYTqPTiB3eGCy4tiA9dLDUDnm1c1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUN9PB
Q3KR5b6fNAv7ES10pO5QsccwHwYDVR0jBBgwFoAU0+LgvOth+5xFJ4JuYQ1GdpnW
PhQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlEQjVFL0QxRUE1OTE0QkYzMTExRURBN0U3MTdEMEYxMjIyNDY4LzAtTGd2
T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzAtTGd2T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlEQjVFL0QxRUE1OTE0QkYzMTExRURBN0U3MTdEMEYx
MjIyNDY4LzlDOUY0RkIwMDNCNjExRUZCOEExMjIyNzAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApSYYwDQYJKoZIhvcNAQEL
BQADggEBAAcwQM4cGqSLjOmx1/PDyIQSyuN0/VfBUmtoZKaI1M55lobSKtlU4Y29
mSkFDRVvF8bOAoglE5u/shpMX0NcNZUXB+QOK0z2dQiKaosm5tiQYRvktL79W0kp
dzqPNpJC054O6NBx4jghonRxHprg459qFZa3UtG/WdIPHAIw39mBIKnTBDPypcgS
/bVfgHBxVHXm2L/CVW9HQ0Kn5CtjfttomJ6kesVSuQDreLCRvx1lGZB6mrntVNl6
8hZMKBmGHsfZcWPvPN0I4v2mQap04RKruiJ/BWu9QrZzNQ3l2OEkgGfXLR/Ez4Eu
DzcoN/tgu1hXRt6SbJPemyNLOvVL2pg=
-----END CERTIFICATE-----
Generated at Tue May 21 03:39:23 2024 by rpki-client on console-ams.rpki-client.org