Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/BC497164BFC211EB9C90B47DF8AEA228.roa
File: BC497164BFC211EB9C90B47DF8AEA228.roa (raw, json)
Hash identifier: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=
Subject key identifier: 51:44:76:F0:19:FE:65:00:01:EF:1D:C5:60:9C:32:DF:F0:69:8F:88
Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial: 0297
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/BC497164BFC211EB9C90B47DF8AEA228.roa
Signing time: Fri 28 May 2021 14:41:07 +0000
ROA not before: Fri 28 May 2021 14:41:03 +0000
ROA not after: Wed 28 May 2031 14:41:03 +0000
asID: 36969
IP address blocks: 41.87.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Validity
Not Before: May 28 14:41:03 2021 GMT
Not After : May 28 14:41:03 2031 GMT
Subject: CN=60b10103-a7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:06:eb:ed:f3:bb:ba:90:0c:55:b7:21:43:
e1:4d:9e:5b:03:b5:b9:00:3e:d8:0d:b0:40:54:ab:
d0:ca:32:27:32:f7:5c:73:4f:bd:52:a3:94:f7:49:
9f:30:da:44:a1:36:3a:8d:14:ea:42:68:0e:1c:01:
38:d5:30:ac:9a:2a:c6:a5:28:6e:53:92:87:82:cb:
75:1d:a0:0f:22:55:57:64:62:60:83:7f:d5:20:ca:
d6:80:c1:dd:bd:b5:1d:21:6d:5f:6c:8f:48:ec:4f:
36:a3:d6:38:24:75:ae:38:58:b6:09:24:9e:4b:90:
59:e4:f0:3c:a5:ba:5d:62:36:5f:be:eb:f0:cc:90:
c9:4a:fb:82:a6:c1:e5:d3:f5:89:43:e3:37:5e:9d:
6c:7e:7d:b8:d1:f1:08:6c:65:eb:8b:dc:3e:8e:e3:
67:3c:78:85:4a:03:e5:85:46:d3:e0:ac:78:68:b6:
6e:70:9f:17:7f:d1:da:16:7c:ce:2f:c2:26:a8:35:
c2:eb:26:c9:e1:81:e5:93:25:b3:18:85:3f:a4:ff:
3a:f2:56:e8:8c:19:20:7b:70:93:32:14:78:bb:8d:
35:39:e4:a5:7e:35:39:97:9c:4b:3e:2e:73:21:a1:
3a:04:fa:5f:34:b1:3a:d6:25:08:a5:27:91:5e:1f:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:76:F0:19:FE:65:00:01:EF:1D:C5:60:9C:32:DF:F0:69:8F:88
X509v3 Authority Key Identifier:
keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/BC497164BFC211EB9C90B47DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.87.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a0:9c:a5:b0:50:21:6f:bc:a7:70:af:7e:39:44:a0:35:8b:
aa:ae:4d:3f:41:4f:bc:d9:1f:c4:88:e1:0a:35:a1:73:a8:47:
48:58:0a:b1:46:03:29:55:ce:42:13:fc:d4:a0:e8:96:04:08:
23:b4:7a:af:db:9a:09:c5:92:91:d4:09:16:1c:66:b4:9d:b2:
ff:3a:26:09:51:04:e9:49:0f:2f:68:e9:7b:de:32:ad:67:f3:
79:36:4d:cc:80:c5:48:78:f5:d5:d5:3e:1c:0c:27:eb:01:2b:
2a:00:5d:9f:29:13:db:9c:62:65:8f:cb:2b:ba:ca:c8:62:11:
7b:06:5d:d1:56:e1:45:f0:6e:84:48:2f:2d:0c:b8:49:d5:95:
22:0c:36:96:ec:22:a6:67:34:4f:f9:23:c1:0f:5b:61:09:db:
41:70:ad:a9:28:95:20:04:f8:95:d1:62:43:7b:76:fd:1d:e3:
63:aa:38:0f:8c:36:9b:7f:db:a8:30:93:de:ac:5f:ee:8a:23:
31:9d:96:98:87:a3:85:92:9f:1d:bd:a5:1c:ae:66:33:13:36:
ab:31:74:f5:ad:cf:c4:00:16:49:8e:ec:83:c3:13:0c:b4:df:
5f:18:d3:49:b0:c9:1f:8f:22:67:8d:e3:69:6d:a1:c9:11:0a:
c0:ef:06:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICApcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU0NkZBRjExMC8GA1UEBRMoNjhDNUU0QkFENURDRDU2NEEyNTYyNzUzQzlBQ0I2
MzJCRDI0Q0I1MDAeFw0yMTA1MjgxNDQxMDNaFw0zMTA1MjgxNDQxMDNaMBgxFjAU
BgNVBAMTDTYwYjEwMTAzLWE3YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/kAbr7fO7upAMVbchQ+FNnlsDtbkAPtgNsEBUq9DKMicy91xzT71So5T3
SZ8w2kShNjqNFOpCaA4cATjVMKyaKsalKG5TkoeCy3UdoA8iVVdkYmCDf9UgytaA
wd29tR0hbV9sj0jsTzaj1jgkda44WLYJJJ5LkFnk8Dylul1iNl++6/DMkMlK+4Km
weXT9YlD4zdenWx+fbjR8QhsZeuL3D6O42c8eIVKA+WFRtPgrHhotm5wnxd/0doW
fM4vwiaoNcLrJsnhgeWTJbMYhT+k/zryVuiMGSB7cJMyFHi7jTU55KV+NTmXnEs+
LnMhoToE+l80sTrWJQilJ5FeH7b1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUUR2
8Bn+ZQAB7x3FYJwy3/Bpj4gwHwYDVR0jBBgwFoAUaMXkutXc1WSiVidTyay2Mr0k
y1AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4QUVBMjI4L2FNWGt1
dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FNWGt1dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4
QUVBMjI4L0JDNDk3MTY0QkZDMjExRUI5QzkwQjQ3REY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApVxswDQYJKoZIhvcNAQEL
BQADggEBAHqgnKWwUCFvvKdwr345RKA1i6quTT9BT7zZH8SI4Qo1oXOoR0hYCrFG
AylVzkIT/NSg6JYECCO0eq/bmgnFkpHUCRYcZrSdsv86JglRBOlJDy9o6XveMq1n
83k2TcyAxUh49dXVPhwMJ+sBKyoAXZ8pE9ucYmWPyyu6yshiEXsGXdFW4UXwboRI
Ly0MuEnVlSIMNpbsIqZnNE/5I8EPW2EJ20FwrakolSAE+JXRYkN7dv0d42OqOA+M
Npt/26gwk96sX+6KIzGdlpiHo4WSnx29pRyuZjMTNqsxdPWtz8QAFkmO7IPDEwy0
318Y00mwyR+PImeN42ltockRCsDvBrM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:29 2024 by rpki-client on console-ams.rpki-client.org