Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa
File: 0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa (raw, json)
Hash identifier: Ev2ul4e+ltqtbvYSPW/0zConR3j9rixqOLLNpHJBAUU=
Subject key identifier: 66:FB:C6:D6:5C:DD:5F:3B:D5:16:11:21:9B:26:9B:72:1E:09:E2:D6
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 47
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa
Signing time: Thu 06 Jul 2023 18:00:57 +0000
ROA not before: Thu 06 Jul 2023 18:00:54 +0000
ROA not after: Wed 06 Jul 2033 18:00:54 +0000
asID: 37105
IP address blocks: 41.242.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Jul 6 18:00:54 2023 GMT
Not After : Jul 6 18:00:54 2033 GMT
Subject: CN=64a70159-8651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:f1:68:ed:1b:04:0b:7c:f9:6d:66:7d:6e:
0d:2c:76:26:4b:c0:6d:d2:04:1c:84:d9:ef:55:16:
fc:5a:16:5e:b5:dd:41:a9:44:86:5d:da:b1:d4:78:
68:3a:80:4a:c5:9f:2c:04:88:20:0d:52:0e:5a:71:
0f:f6:b5:95:49:41:ef:73:91:e2:e7:05:5a:a5:54:
37:2c:35:90:1c:5e:3e:11:73:a3:c8:f1:a2:23:9a:
c7:5a:cf:ee:f9:e1:73:f2:af:92:5e:ee:f0:8c:95:
58:0d:16:2d:e9:f0:1d:ae:c5:2b:4d:bf:4b:cc:5c:
62:46:db:a2:72:ae:f5:f4:1a:81:74:d1:25:78:eb:
77:48:62:8c:94:b6:45:15:60:4b:df:6e:af:76:de:
a0:20:39:05:97:bb:30:d9:f3:f5:eb:1c:4d:e0:50:
68:33:72:7b:c9:f1:8e:fb:9a:14:ad:59:ae:4e:61:
26:4d:8b:c8:c0:4a:36:ca:84:e6:8f:ae:d4:cc:06:
a1:68:f7:f7:3d:78:61:ca:7f:a7:24:3d:5d:f9:d4:
f7:7c:e9:ad:14:96:d5:af:0e:23:14:be:01:61:49:
37:e8:94:bb:36:4b:47:6e:8a:33:74:87:62:20:55:
c4:47:96:bb:1b:4d:75:2d:0e:c3:75:ec:6c:b7:0a:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:C6:D6:5C:DD:5F:3B:D5:16:11:21:9B:26:9B:72:1E:09:E2:D6
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.192.0/18
Signature Algorithm: sha256WithRSAEncryption
be:b3:ab:f9:95:f2:e8:59:39:53:c9:d9:61:67:3e:89:9d:d3:
09:ad:33:15:19:10:5f:a7:ba:b4:a2:92:a4:64:53:85:60:a3:
48:ac:78:33:4a:ec:87:f3:c3:45:eb:ac:03:38:66:d3:40:09:
30:74:23:89:15:d0:23:9f:02:ae:a1:19:89:e4:c3:7f:2c:41:
8c:58:aa:84:7f:f2:d2:b6:99:6e:ff:f0:36:26:6f:bf:af:ca:
50:85:25:c6:44:1b:15:99:c8:ea:0e:0e:fd:92:99:e2:ac:c0:
89:74:7c:53:ba:28:35:d0:de:00:b9:11:18:c4:0e:69:59:8b:
2a:17:e5:3f:c2:6d:ef:9e:87:16:6e:13:54:aa:e9:df:30:3b:
cb:10:71:3e:fe:24:e6:47:8a:11:1a:ca:64:39:99:c6:30:3e:
72:02:47:3f:4c:eb:e4:98:20:11:e4:04:29:cf:1f:82:ff:31:
74:04:e2:21:58:1f:03:92:59:08:87:bb:af:cb:d2:e9:75:ae:
34:aa:b5:1e:3a:f2:ee:3b:e7:58:0d:83:f8:cc:76:a0:c8:84:
b7:bb:58:7a:be:fd:72:29:75:3d:c7:05:ed:4c:6b:7a:1d:4a:
7e:58:24:c0:47:81:45:6d:a1:b1:99:2b:20:7e:00:83:68:e5:
1c:3b:3e:86
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBRzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
QkY0MUFGMTEwLwYDVQQFEygzRjY3N0YzQTE4QUNBQUU2Qzk3RjgxRjk5QUU4Nzk0
NjU0RTA0MTBCMB4XDTIzMDcwNjE4MDA1NFoXDTMzMDcwNjE4MDA1NFowGDEWMBQG
A1UEAxMNNjRhNzAxNTktODY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM7s8WjtGwQLfPltZn1uDSx2JkvAbdIEHITZ71UW/FoWXrXdQalEhl3asdR4
aDqASsWfLASIIA1SDlpxD/a1lUlB73OR4ucFWqVUNyw1kBxePhFzo8jxoiOax1rP
7vnhc/Kvkl7u8IyVWA0WLenwHa7FK02/S8xcYkbbonKu9fQagXTRJXjrd0hijJS2
RRVgS99ur3beoCA5BZe7MNnz9escTeBQaDNye8nxjvuaFK1Zrk5hJk2LyMBKNsqE
5o+u1MwGoWj39z14Ycp/pyQ9XfnU93zprRSW1a8OIxS+AWFJN+iUuzZLR26KM3SH
YiBVxEeWuxtNdS0Ow3XsbLcKSWUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRm+8bW
XN1fO9UWESGbJptyHgni1jAfBgNVHSMEGDAWgBQ/Z386GKyq5sl/gfma6HlGVOBB
CzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkJGNDEvMTRDREY4QjIxMEQ2MTFFRTk1OEMwRjE1NEFEOUU2RkMvUDJkX09o
aXNxdWJKZjRINW11aDVSbFRnUVFzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUDJkX09oaXNxdWJKZjRINW11aDVSbFRnUVFzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkJGNDEvMTRDREY4QjIxMEQ2MTFFRTk1OEMwRjE1NEFE
OUU2RkMvMEVCRjdCRTIxQzI3MTFFRUE0RERCOTVFNEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBinywDANBgkqhkiG9w0BAQsF
AAOCAQEAvrOr+ZXy6Fk5U8nZYWc+iZ3TCa0zFRkQX6e6tKKSpGRThWCjSKx4M0rs
h/PDReusAzhm00AJMHQjiRXQI58CrqEZieTDfyxBjFiqhH/y0raZbv/wNiZvv6/K
UIUlxkQbFZnI6g4O/ZKZ4qzAiXR8U7ooNdDeALkRGMQOaVmLKhflP8Jt756HFm4T
VKrp3zA7yxBxPv4k5keKERrKZDmZxjA+cgJHP0zr5JggEeQEKc8fgv8xdATiIVgf
A5JZCIe7r8vS6XWuNKq1Hjry7jvnWA2D+Mx2oMiEt7tYer79cil1PccF7Uxreh1K
flgkwEeBRW2hsZkrIH4Ag2jlHDs+hg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org