Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/4E82CFC6AA2B11EE8A64656D775412E6.roa
File: 4E82CFC6AA2B11EE8A64656D775412E6.roa (raw, json)
Hash identifier: lUjaFzCGnUSpOsFK/cdtDOu0JwLUPvQ1vWrQ8SC6UZw=
Subject key identifier: 21:68:2F:85:62:AF:AD:DA:7D:F4:F3:78:44:38:52:6D:C6:A5:A1:C9
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 03E2
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/4E82CFC6AA2B11EE8A64656D775412E6.roa
Signing time: Wed 03 Jan 2024 11:29:07 +0000
ROA not before: Wed 03 Jan 2024 11:29:04 +0000
ROA not after: Fri 03 Jan 2025 11:29:04 +0000
asID: 209854
IP address blocks: 196.44.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Jan 3 11:29:04 2024 GMT
Not After : Jan 3 11:29:04 2025 GMT
Subject: CN=65954503-d9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:69:64:94:a3:7e:3a:5d:a0:ba:5e:39:e0:
70:3b:16:11:f0:97:29:cf:b5:48:cc:7c:7a:82:2e:
fd:ca:f6:a5:a0:8c:73:7d:12:ab:12:d4:8b:b6:37:
9c:a2:7e:7b:4b:33:a1:dd:39:1b:ba:06:e9:3d:e1:
59:cc:ff:03:d0:eb:b3:bb:26:90:bb:90:4b:71:d8:
8d:3f:a0:c4:ac:7e:dd:46:94:85:ad:2f:92:48:e1:
5c:09:20:45:ef:46:8b:50:b8:60:bc:e8:e9:c9:02:
5d:4a:c8:66:ad:3f:59:0b:d1:c6:cc:81:1d:c3:1e:
f1:02:68:f4:f5:ae:ec:9e:94:f7:67:6c:84:d7:73:
66:52:11:d3:22:82:bb:17:18:5b:0d:b7:15:77:f3:
31:d2:3e:f1:0d:cf:46:83:76:95:98:d9:47:09:47:
9a:bd:07:fd:ce:f2:f6:52:9b:d9:d9:d7:ef:bf:4a:
99:a9:c9:74:52:91:df:81:71:61:60:1d:0b:c8:56:
bf:53:27:35:d1:c2:1c:f5:70:d3:36:2d:c4:20:c2:
24:1a:ea:05:d0:a3:89:38:70:48:01:fe:9d:7b:c0:
d7:66:d6:08:75:67:5a:5f:1a:48:a7:fd:9e:94:33:
d8:50:bd:81:ba:96:72:4e:c2:70:37:66:c1:79:07:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:2F:85:62:AF:AD:DA:7D:F4:F3:78:44:38:52:6D:C6:A5:A1:C9
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/4E82CFC6AA2B11EE8A64656D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
76:72:bc:79:8d:8c:34:c3:82:1a:78:a3:0d:36:6c:45:5d:0d:
fd:7b:e7:13:31:da:0e:b7:19:39:2e:dc:8c:de:bf:8b:e6:96:
11:5d:06:f9:1c:f3:22:77:b3:1b:3d:79:26:67:75:e8:2a:be:
02:60:fe:42:6e:f0:34:5a:d2:19:bb:d3:b4:93:4e:b2:d0:b7:
97:f6:46:6a:3d:c5:55:0e:46:da:0a:c7:94:2a:94:41:90:1a:
aa:28:a9:45:ac:60:f0:a6:d5:9d:8e:f7:ab:1c:e1:14:56:6e:
44:75:8e:37:c6:c9:ec:76:f7:d7:ed:8d:1d:5b:49:30:e3:91:
61:60:e5:7b:96:0c:b2:3e:7b:83:6d:bc:81:51:ed:de:a5:f4:
14:1d:d6:4a:92:2e:ce:fc:92:b4:dd:06:26:c4:cd:cc:5f:7b:
74:3d:4a:09:76:97:07:9a:92:83:d0:fc:04:b3:fd:5b:a2:94:
8d:0a:df:7e:c3:c7:31:12:43:ce:b4:94:fb:10:6e:75:37:2c:
8f:5e:18:86:1a:54:45:2f:3e:99:e9:d2:19:83:16:3b:d2:54:
98:67:0f:74:3b:eb:1e:ba:d7:06:ba:95:50:02:86:a7:d1:19:
a2:fd:fc:1d:07:ce:e9:95:58:03:6d:6c:be:35:3c:66:9b:59:
6d:91:97:c6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNDAxMDMxMTI5MDRaFw0yNTAxMDMxMTI5MDRaMBgxFjAU
BgNVBAMTDTY1OTU0NTAzLWQ5YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCt1mlklKN+Ol2gul454HA7FhHwlynPtUjMfHqCLv3K9qWgjHN9EqsS1Iu2
N5yifntLM6HdORu6Buk94VnM/wPQ67O7JpC7kEtx2I0/oMSsft1GlIWtL5JI4VwJ
IEXvRotQuGC86OnJAl1KyGatP1kL0cbMgR3DHvECaPT1ruyelPdnbITXc2ZSEdMi
grsXGFsNtxV38zHSPvENz0aDdpWY2UcJR5q9B/3O8vZSm9nZ1++/SpmpyXRSkd+B
cWFgHQvIVr9TJzXRwhz1cNM2LcQgwiQa6gXQo4k4cEgB/p17wNdm1gh1Z1pfGkin
/Z6UM9hQvYG6lnJOwnA3ZsF5By6LAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIWgv
hWKvrdp99PN4RDhSbcalockwHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzRFODJDRkM2QUEyQjExRUU4QTY0NjU2RDc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELHYwDQYJKoZIhvcNAQEL
BQADggEBAHZyvHmNjDTDghp4ow02bEVdDf175xMx2g63GTku3Izev4vmlhFdBvkc
8yJ3sxs9eSZndegqvgJg/kJu8DRa0hm707STTrLQt5f2Rmo9xVUORtoKx5QqlEGQ
GqooqUWsYPCm1Z2O96sc4RRWbkR1jjfGyex299ftjR1bSTDjkWFg5XuWDLI+e4Nt
vIFR7d6l9BQd1kqSLs78krTdBibEzcxfe3Q9Sgl2lweakoPQ/ASz/VuilI0K337D
xzESQ860lPsQbnU3LI9eGIYaVEUvPpnp0hmDFjvSVJhnD3Q76x661wa6lVAChqfR
GaL9/B0HzumVWANtbL41PGabWW2Rl8Y=
-----END CERTIFICATE-----
Generated at Wed May 8 04:40:15 2024 by rpki-client on console-fra.rpki-client.org