Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/112E2C72603C11EDA2A8E38DF1222468.roa
File: 112E2C72603C11EDA2A8E38DF1222468.roa (raw, json)
Hash identifier: VpBEbXpxKbJILffmsqj/OzTnQUQOEkM/MEBPomChOT8=
Subject key identifier: 9E:D1:59:47:95:19:EA:1D:0A:A1:C0:77:03:FB:D2:FD:A2:2C:AA:84
Certificate issuer: /CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
Certificate serial: 46
Authority key identifier: F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/112E2C72603C11EDA2A8E38DF1222468.roa
Signing time: Wed 09 Nov 2022 14:37:42 +0000
ROA not before: Wed 09 Nov 2022 14:37:38 +0000
ROA not after: Mon 09 Nov 2026 14:37:38 +0000
asID: 8075
IP address blocks: 41.223.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
Validity
Not Before: Nov 9 14:37:38 2022 GMT
Not After : Nov 9 14:37:38 2026 GMT
Subject: CN=636bbb36-6946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:82:6b:23:f9:97:9d:de:ac:49:4e:7a:42:
2d:81:49:d9:7f:fb:07:e3:03:eb:91:0f:e2:b7:29:
62:d5:fa:87:17:cc:0f:06:c2:dc:00:f9:53:d1:8f:
81:4c:16:d7:15:ad:a3:c3:dc:a6:b1:ad:90:f7:e6:
29:53:a7:7e:14:ac:79:d1:56:65:d0:bb:cd:f6:9f:
8c:83:ea:97:6e:34:a4:ba:10:bb:ab:a3:d1:b6:c5:
fd:72:e5:b6:85:0f:cb:b3:e3:55:e2:f4:c9:00:b9:
b1:f1:0b:5a:bc:18:74:9c:00:07:c3:d5:82:b0:c6:
f4:d8:07:c3:aa:62:1b:78:b6:66:d3:ff:41:ba:0a:
81:57:86:92:a6:1d:c5:c4:82:fa:d1:cd:a1:9b:06:
84:0e:22:4e:40:f6:7f:a2:57:7c:88:18:bf:56:86:
00:bb:52:ea:4f:ff:74:81:10:df:e0:fe:1f:96:17:
f3:f9:9e:31:bd:ee:df:95:61:8e:00:ef:50:68:4c:
38:43:73:0b:44:1d:7d:a0:7f:2f:5d:73:87:51:2c:
45:3e:68:3f:6b:cf:a4:79:5c:f6:36:4c:2c:cc:74:
02:3a:97:08:4d:b0:fc:19:e3:51:a9:5a:3d:c3:4a:
4f:57:26:86:95:a5:c8:45:20:58:83:a0:10:d1:18:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:59:47:95:19:EA:1D:0A:A1:C0:77:03:FB:D2:FD:A2:2C:AA:84
X509v3 Authority Key Identifier:
keyid:F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/112E2C72603C11EDA2A8E38DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:5f:68:e6:a0:74:4c:72:0f:79:a4:79:c8:e1:38:8e:f4:dd:
be:cf:79:61:16:1c:79:ab:65:2a:c1:2e:52:f4:2f:63:1f:59:
57:6b:cc:b6:7a:ae:fa:45:5d:4a:26:78:71:6f:9f:5e:ef:e7:
2f:95:95:2b:b2:63:41:65:a0:4d:f4:5c:41:f6:3c:91:61:12:
97:18:b4:21:16:fb:8c:2a:55:f5:9c:d0:29:07:73:c0:59:40:
aa:68:23:2a:13:eb:e6:c6:84:a0:db:b9:00:50:8b:1e:6f:44:
ff:05:85:57:dc:7e:a4:65:e9:ad:ea:a1:6f:b7:b0:54:28:01:
18:04:9a:50:03:32:62:75:17:49:cf:3b:d4:d2:09:5a:ce:99:
a1:c7:b6:16:db:0a:09:bb:5d:b9:56:47:47:03:61:50:c1:db:
59:c3:41:f0:77:0b:8f:f2:dd:68:18:c3:d1:f8:96:fd:68:1e:
51:fb:e3:1a:53:ee:a7:c3:62:47:82:26:39:e1:05:84:94:fb:
ed:08:00:d3:e7:03:10:a0:4b:f5:09:41:6a:d8:6d:60:6a:e2:
de:65:d1:c4:a5:28:e3:4c:34:0c:a9:75:c0:45:66:1f:8f:86:
55:e5:33:ec:b8:39:b8:c1:c7:6b:db:15:d6:03:1c:55:52:b3:
32:db:ad:24
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBRjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZG
N0M3N0FGMTEwLwYDVQQFEyhGMzgyNkYzQjVEMjRGNjRDQjYwRjhDNjBDNzVEQjUx
OUEwQzdBNkI3MB4XDTIyMTEwOTE0MzczOFoXDTI2MTEwOTE0MzczOFowGDEWMBQG
A1UEAwwNNjM2YmJiMzYtNjk0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANwKgmsj+Zed3qxJTnpCLYFJ2X/7B+MD65EP4rcpYtX6hxfMDwbC3AD5U9GP
gUwW1xWto8PcprGtkPfmKVOnfhSsedFWZdC7zfafjIPql240pLoQu6uj0bbF/XLl
toUPy7PjVeL0yQC5sfELWrwYdJwAB8PVgrDG9NgHw6piG3i2ZtP/QboKgVeGkqYd
xcSC+tHNoZsGhA4iTkD2f6JXfIgYv1aGALtS6k//dIEQ3+D+H5YX8/meMb3u35Vh
jgDvUGhMOENzC0QdfaB/L11zh1EsRT5oP2vPpHlc9jZMLMx0AjqXCE2w/BnjUala
PcNKT1cmhpWlyEUgWIOgENEYqB0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSe0VlH
lRnqHQqhwHcD+9L9oiyqhDAfBgNVHSMEGDAWgBTzgm87XST2TLYPjGDHXbUZoMem
tzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjdDNzcvRTVBMTA0NTIzNDVFMTFFRDlDRjY1M0U5RjEyMjI0NjgvODRKdk8x
MGs5a3kyRDR4Z3gxMjFHYURIcHJjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvODRKdk8xMGs5a3kyRDR4Z3gxMjFHYURIcHJjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjdDNzcvRTVBMTA0NTIzNDVFMTFFRDlDRjY1M0U5RjEy
MjI0NjgvMTEyRTJDNzI2MDNDMTFFREEyQThFMzhERjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACnfCzANBgkqhkiG9w0BAQsF
AAOCAQEAw19o5qB0THIPeaR5yOE4jvTdvs95YRYceatlKsEuUvQvYx9ZV2vMtnqu
+kVdSiZ4cW+fXu/nL5WVK7JjQWWgTfRcQfY8kWESlxi0IRb7jCpV9ZzQKQdzwFlA
qmgjKhPr5saEoNu5AFCLHm9E/wWFV9x+pGXpreqhb7ewVCgBGASaUAMyYnUXSc87
1NIJWs6Zoce2FtsKCbtduVZHRwNhUMHbWcNB8HcLj/LdaBjD0fiW/WgeUfvjGlPu
p8NiR4ImOeEFhJT77QgA0+cDEKBL9QlBathtYGri3mXRxKUo40w0DKl1wEVmH4+G
VeUz7Lg5uMHHa9sV1gMcVVKzMtutJA==
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:35 2024 by rpki-client on console-fra.rpki-client.org