Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/774335701C5911ECA2FC6A31D8A014CE.roa
File: 774335701C5911ECA2FC6A31D8A014CE.roa (raw, json)
Hash identifier: fM8gLdQ3ljof1zc4qD9FBZ5j/xT2JhI15oeTk8jbYas=
Subject key identifier: 2A:D9:DE:4D:FD:F6:E0:8D:65:B2:28:B9:13:97:11:64:BD:43:D4:8F
Certificate issuer: /CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Certificate serial: 09
Authority key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/774335701C5911ECA2FC6A31D8A014CE.roa
Signing time: Thu 23 Sep 2021 10:31:52 +0000
ROA not before: Thu 23 Sep 2021 10:31:48 +0000
ROA not after: Fri 31 Dec 2049 10:31:48 +0000
asID: 37254
IP address blocks: 41.76.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 27 Jun 2024 00:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Validity
Not Before: Sep 23 10:31:48 2021 GMT
Not After : Dec 31 10:31:48 2049 GMT
Subject: CN=614c5798-d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:b5:b4:49:a9:42:51:c6:9b:aa:5e:f1:33:
2c:b8:a7:ef:8f:48:0c:0c:79:74:d1:96:32:b9:fe:
08:18:d2:e6:31:e9:74:73:0b:78:81:6c:45:43:96:
e6:04:f1:5d:e0:24:72:6a:c0:b0:52:d1:5b:2c:f0:
ca:ab:0a:5a:cd:65:97:40:55:4a:c4:73:ea:56:b3:
74:3a:70:59:60:c5:e3:ef:3f:72:f5:75:ed:fe:2f:
25:b0:ea:76:b6:be:3f:c5:d5:63:7b:14:14:18:15:
6c:d6:5b:08:45:35:88:a0:88:82:9a:93:8f:a4:e7:
08:6e:32:e7:a5:df:29:60:38:8d:9f:b7:46:f8:18:
a2:de:eb:ae:88:6d:69:53:bf:28:8d:52:6c:d1:1e:
02:bf:76:b9:ce:d8:aa:41:be:ad:31:ae:63:ed:73:
cc:85:34:38:f1:0d:2f:ad:58:e0:94:e6:b4:77:a9:
21:23:60:7d:32:c3:bc:32:a5:83:a7:1f:4a:9a:dd:
7e:4e:09:36:e2:29:9d:9f:22:dd:b1:0a:b1:70:f5:
f9:8b:77:d5:bd:c1:cc:61:96:f1:2b:65:62:e4:14:
77:0c:79:d9:4f:06:14:2f:53:7f:a3:b6:4d:48:c5:
84:06:ac:4b:ac:96:92:3f:66:e2:8d:b8:bc:72:3f:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:DE:4D:FD:F6:E0:8D:65:B2:28:B9:13:97:11:64:BD:43:D4:8F
X509v3 Authority Key Identifier:
keyid:BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/774335701C5911ECA2FC6A31D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:66:4e:2b:0a:c1:3d:65:62:bc:54:43:7e:73:2b:5a:e5:12:
2c:2a:75:7b:dd:03:ea:98:a5:26:ae:ff:44:18:fe:d8:0b:fe:
b7:7b:ac:79:da:e1:93:93:bb:50:4c:3f:a4:1f:a4:2f:c4:71:
ca:e3:f1:df:8a:f6:51:de:f7:36:19:11:e7:17:67:4c:2c:89:
5f:f6:6f:aa:96:68:9d:c8:66:4b:5c:22:86:af:66:6b:15:a9:
b6:15:41:2d:9f:29:2f:7a:ac:6f:86:66:7a:9b:00:4c:f6:3d:
9f:6a:33:a8:b5:3b:c0:6a:22:17:a7:cc:4c:b0:9a:c4:ae:61:
f2:c2:06:93:23:3b:d4:f9:fb:bc:97:2f:8c:20:7d:46:cf:7e:
92:95:61:9d:1e:14:68:67:2e:af:3d:93:50:ad:56:98:6f:1a:
d0:51:03:f9:eb:6f:a8:f2:87:a7:bd:30:2d:56:ee:6d:ba:20:
06:58:af:00:15:4e:1f:d0:b6:d2:82:8b:ae:d3:d8:21:5d:aa:
51:a3:df:c6:ec:27:1b:b9:10:01:14:11:e3:f2:17:0b:37:50:
f9:c4:f6:01:68:42:27:95:42:75:ed:41:dc:e4:d7:16:5c:06:
b4:0d:91:14:65:88:58:eb:61:e7:8f:b5:bc:9a:8f:6f:2f:f0:
e2:a4:f4:f4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZF
ODU2MUFGMTEwLwYDVQQFEyhCREY2Rjk5Q0QwODJDMTNCRURBNURBMEU4OTg4OERE
NTMyQzg2MzA3MB4XDTIxMDkyMzEwMzE0OFoXDTQ5MTIzMTEwMzE0OFowGDEWMBQG
A1UEAwwNNjE0YzU3OTgtZDQ5ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtgtbRJqUJRxpuqXvEzLLin749IDAx5dNGWMrn+CBjS5jHpdHMLeIFsRUOW
5gTxXeAkcmrAsFLRWyzwyqsKWs1ll0BVSsRz6lazdDpwWWDF4+8/cvV17f4vJbDq
dra+P8XVY3sUFBgVbNZbCEU1iKCIgpqTj6TnCG4y56XfKWA4jZ+3RvgYot7rroht
aVO/KI1SbNEeAr92uc7YqkG+rTGuY+1zzIU0OPENL61Y4JTmtHepISNgfTLDvDKl
g6cfSprdfk4JNuIpnZ8i3bEKsXD1+Yt31b3BzGGW8StlYuQUdwx52U8GFC9Tf6O2
TUjFhAasS6yWkj9m4o24vHI/50ECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQq2d5N
/fbgjWWyKLkTlxFkvUPUjzAfBgNVHSMEGDAWgBS99vmc0ILBO+2l2g6JiI3VMshj
BzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTg1NjEvQjBENzIwRTAxQzNGMTFFQ0JBMjIwRDBCRDhBMDE0Q0UvdmZiNW5O
Q0N3VHZ0cGRvT2lZaU4xVExJWXdjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdmZiNW5OQ0N3VHZ0cGRvT2lZaU4xVExJWXdjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTg1NjEvQjBENzIwRTAxQzNGMTFFQ0JBMjIwRDBCRDhB
MDE0Q0UvNzc0MzM1NzAxQzU5MTFFQ0EyRkM2QTMxRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAylM2DANBgkqhkiG9w0BAQsF
AAOCAQEAoGZOKwrBPWVivFRDfnMrWuUSLCp1e90D6pilJq7/RBj+2Av+t3usedrh
k5O7UEw/pB+kL8RxyuPx34r2Ud73NhkR5xdnTCyJX/ZvqpZonchmS1wihq9maxWp
thVBLZ8pL3qsb4ZmepsATPY9n2ozqLU7wGoiF6fMTLCaxK5h8sIGkyM71Pn7vJcv
jCB9Rs9+kpVhnR4UaGcurz2TUK1WmG8a0FED+etvqPKHp70wLVbubbogBlivABVO
H9C20oKLrtPYIV2qUaPfxuwnG7kQARQR4/IXCzdQ+cT2AWhCJ5VCde1B3OTXFlwG
tA2RFGWIWOth54+1vJqPby/w4qT09A==
-----END CERTIFICATE-----
Generated at Tue Jun 25 04:13:13 2024 by rpki-client on console-ams.rpki-client.org