Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/95876FBEC99B11EEBFE3CA66775412E6.roa
File: 95876FBEC99B11EEBFE3CA66775412E6.roa (raw, json)
Hash identifier: 67MnwHHRIWAZKkGpUDkvHKd9YNZxKCNvG3lBkHztdAE=
Subject key identifier: 41:D0:04:1A:80:E0:90:A3:4B:77:6C:E2:CE:BC:E7:96:B7:98:A8:62
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 0583
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/95876FBEC99B11EEBFE3CA66775412E6.roa
Signing time: Mon 12 Feb 2024 11:40:56 +0000
ROA not before: Mon 12 Feb 2024 11:40:53 +0000
ROA not after: Wed 12 Feb 2048 11:40:53 +0000
asID: 37098
IP address blocks: 41.216.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 11:40:53 2024 GMT
Not After : Feb 12 11:40:53 2048 GMT
Subject: CN=65ca03c8-ef2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:66:58:bd:b1:5e:b5:37:c9:dc:53:4d:60:
01:9c:53:c6:32:9b:1e:6d:77:4b:19:f1:c9:1c:28:
4b:15:4b:5f:59:27:89:9b:32:e0:4a:a5:0a:34:83:
1f:83:e8:ee:86:8e:15:49:62:2c:03:c8:c1:08:dc:
c0:a2:5c:b6:cd:5f:67:31:3e:82:6f:c8:97:8e:5a:
12:75:ab:ab:68:6a:b9:24:7f:04:0e:1b:e1:db:55:
9e:f2:14:a2:91:65:7d:ae:30:3f:b2:39:2d:90:ea:
7c:89:69:12:66:df:0e:d9:1f:1d:f6:6d:9d:13:67:
1a:62:e4:1a:04:4c:9b:f3:21:04:52:cb:20:e3:de:
9e:31:b8:4a:e1:9c:d8:a5:cb:8e:87:b0:03:d6:65:
25:e8:9b:e0:87:3e:5f:1e:15:47:9f:00:19:cc:73:
2a:6a:cc:c4:83:a3:a4:02:c5:1b:46:57:55:60:d1:
2b:02:b9:b6:57:22:34:91:e8:5f:98:12:9f:33:ab:
e6:e4:b5:33:bd:7c:43:e7:ef:27:bc:6a:15:0c:c2:
94:a9:f8:84:21:da:74:23:95:d6:e6:7f:1c:9f:10:
19:35:4e:a6:f4:ec:4f:d4:be:2b:3b:f8:3f:be:1b:
87:b8:b9:b4:b0:8f:f4:14:c3:2c:b3:fe:5d:82:bc:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D0:04:1A:80:E0:90:A3:4B:77:6C:E2:CE:BC:E7:96:B7:98:A8:62
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/95876FBEC99B11EEBFE3CA66775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.230.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7b:50:e4:bf:04:a9:f2:4e:8b:03:49:1e:e8:09:d7:9a:4d:
88:3e:2f:dc:76:20:de:46:b2:a4:a4:94:4a:0b:de:9f:37:06:
71:75:64:a4:fc:f8:d4:33:8e:02:87:3e:98:d6:f9:21:6c:d6:
97:8e:1d:e9:a7:1a:bf:22:8b:41:d8:47:4d:27:0a:8c:80:b1:
d8:ec:3d:a3:76:d0:ff:6b:74:20:8d:5f:a7:ee:2a:c3:cf:4f:
84:39:b5:23:80:63:4a:21:4a:bc:60:81:6f:48:be:e4:9e:8b:
c0:00:42:f4:a0:68:8d:64:1f:d6:94:1e:8a:77:66:c4:fd:2a:
df:32:6e:4d:9d:61:28:a4:ec:6b:cc:77:b4:58:e3:fe:df:f4:
4b:ff:d9:c5:3a:19:09:47:61:2e:05:13:d2:10:82:e6:a0:b4:
ff:d9:17:0a:d3:53:d6:a3:42:9c:5d:64:49:71:07:51:db:ff:
1f:fb:d0:cd:eb:f2:55:fb:e0:96:12:cb:fe:c8:99:e5:2c:f5:
fb:4a:cd:a1:57:3a:7d:d5:8a:a9:f3:b1:a2:19:f2:fa:ff:c8:
d4:2c:c4:f2:61:1e:88:2c:4c:04:71:c8:ed:79:88:1a:9e:50:
75:4b:c4:e4:f9:f5:b6:d0:4b:21:37:85:bd:36:40:b4:e8:52:
46:86:fd:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMzQTRBRjExMC8GA1UEBRMoM0UwQ0U2M0Q2MDQ1NUJENjVCQUEzMTU0QkU4MTIw
NkM2N0U2OUQ0NDAeFw0yNDAyMTIxMTQwNTNaFw00ODAyMTIxMTQwNTNaMBgxFjAU
BgNVBAMTDTY1Y2EwM2M4LWVmMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrJWZYvbFetTfJ3FNNYAGcU8Yymx5td0sZ8ckcKEsVS19ZJ4mbMuBKpQo0
gx+D6O6GjhVJYiwDyMEI3MCiXLbNX2cxPoJvyJeOWhJ1q6toarkkfwQOG+HbVZ7y
FKKRZX2uMD+yOS2Q6nyJaRJm3w7ZHx32bZ0TZxpi5BoETJvzIQRSyyDj3p4xuErh
nNily46HsAPWZSXom+CHPl8eFUefABnMcypqzMSDo6QCxRtGV1Vg0SsCubZXIjSR
6F+YEp8zq+bktTO9fEPn7ye8ahUMwpSp+IQh2nQjldbmfxyfEBk1Tqb07E/Uvis7
+D++G4e4ubSwj/QUwyyz/l2CvPZDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQdAE
GoDgkKNLd2zizrznlreYqGIwHwYDVR0jBBgwFoAUPgzmPWBFW9ZbqjFUvoEgbGfm
nUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzM0E0LzJFNzQzNzgyQTFBQzExRUE5RkVCQzM3NEY4QUVBMjI4L1Bnem1Q
V0JGVzlaYnFqRlV2b0VnYkdmbW5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Bnem1QV0JGVzlaYnFqRlV2b0VnYkdmbW5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzM0E0LzJFNzQzNzgyQTFBQzExRUE5RkVCQzM3NEY4
QUVBMjI4Lzk1ODc2RkJFQzk5QjExRUVCRkUzQ0E2Njc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2OYwDQYJKoZIhvcNAQEL
BQADggEBADV7UOS/BKnyTosDSR7oCdeaTYg+L9x2IN5GsqSklEoL3p83BnF1ZKT8
+NQzjgKHPpjW+SFs1peOHemnGr8ii0HYR00nCoyAsdjsPaN20P9rdCCNX6fuKsPP
T4Q5tSOAY0ohSrxggW9IvuSei8AAQvSgaI1kH9aUHop3ZsT9Kt8ybk2dYSik7GvM
d7RY4/7f9Ev/2cU6GQlHYS4FE9IQguagtP/ZFwrTU9ajQpxdZElxB1Hb/x/70M3r
8lX74JYSy/7ImeUs9ftKzaFXOn3ViqnzsaIZ8vr/yNQsxPJhHogsTARxyO15iBqe
UHVLxOT59bbQSyE3hb02QLToUkaG/e0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:20 2024 by rpki-client on console-ams.rpki-client.org