Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36A519B606D011EF9F93826F017001B1.roa
File: 36A519B606D011EF9F93826F017001B1.roa (raw, json)
Hash identifier: jegvnmkjqZNJzk2yOnkWcjy11/wm6U7rvQ7LyCW4Ffg=
Subject key identifier: B8:64:C3:5C:5B:E6:B6:22:D3:2A:0F:95:BA:FF:33:C2:78:B4:00:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36A519B606D011EF9F93826F017001B1.roa
Signing time: Tue 30 Apr 2024 09:01:21 +0000
ROA not before: Tue 30 Apr 2024 09:01:18 +0000
ROA not after: Sat 25 May 2024 09:01:18 +0000
asID: 5065
IP address blocks: 154.206.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45733 (0xb2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 09:01:18 2024 GMT
Not After : May 25 09:01:18 2024 GMT
Subject: CN=6630b361-a7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:6f:ae:3c:90:d6:c9:4a:8e:86:c5:9e:f6:
b7:d4:73:c0:15:f8:d0:3a:6b:98:46:3f:1e:fe:b4:
7e:1e:67:6c:c7:f4:fb:5f:41:26:11:63:cf:bb:f2:
b6:a3:34:15:20:91:7a:5e:25:42:1f:51:3c:ab:b4:
15:24:ac:3c:a3:19:04:21:5a:0a:1c:23:3a:36:c5:
d6:57:09:e2:7c:23:3d:fd:fc:ed:64:fd:1a:39:ed:
59:7b:29:94:96:5c:4b:cf:89:1e:00:27:9d:ac:56:
16:44:b4:92:c3:ac:39:f1:85:65:35:86:49:fc:d7:
1f:df:d5:ce:29:12:19:5b:4f:48:18:e6:01:96:3c:
31:d4:d7:6f:44:ca:52:2d:fc:e5:67:7a:83:4b:3c:
57:40:81:4a:d9:2b:5e:b6:4e:81:49:78:27:13:a9:
90:01:a9:ab:a7:12:19:7c:14:5d:40:c8:16:13:82:
2f:16:8a:90:59:7b:1b:c8:0f:40:2c:0f:16:33:a5:
0d:7c:dd:14:ab:ce:b6:c3:e5:e5:ba:c2:63:c7:c3:
b6:c2:fc:32:61:16:c7:e8:b4:31:52:b8:06:51:29:
ca:ca:16:44:95:b4:aa:fe:32:ed:1a:11:ba:17:b7:
0a:92:6e:2a:bb:76:a4:2d:e1:eb:a5:97:e6:ff:9d:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:64:C3:5C:5B:E6:B6:22:D3:2A:0F:95:BA:FF:33:C2:78:B4:00:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36A519B606D011EF9F93826F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
90:35:c7:d3:0a:e4:66:fc:ca:b1:a7:9b:62:de:d9:55:28:f0:
9f:db:39:16:b3:76:1a:a3:d5:77:f0:be:c9:48:b2:4c:d8:cc:
8f:2c:68:27:4c:35:13:b1:25:f9:93:6a:f4:86:b7:0d:c3:a1:
61:9c:05:b2:80:c2:3a:23:7b:f8:28:98:bd:52:cc:d8:b3:9b:
ac:05:4b:0c:b9:a7:2d:0c:99:34:20:d7:90:89:9e:40:66:f1:
04:f0:aa:62:7d:5f:28:92:97:b1:fa:3e:f4:90:6b:d2:4e:11:
d6:5c:e6:79:ec:11:d7:75:c9:80:62:70:96:8b:5b:a5:ac:4f:
4e:f4:c0:06:13:7e:83:c9:10:51:f0:8b:8d:37:f7:b1:b8:bb:
fa:32:ec:7b:99:7b:50:e6:47:69:65:08:94:82:b7:80:d1:0c:
aa:30:d6:19:6d:00:01:57:96:d3:e6:7f:b4:ea:d0:da:95:e8:
d6:bd:40:3d:64:d0:90:df:32:62:4c:92:c5:f1:cd:be:06:bb:
83:4d:fd:9b:f0:1a:00:6a:b4:21:e8:3e:99:b6:ea:d8:10:53:
c0:db:c0:39:3e:4a:8f:3d:91:ad:84:f9:39:92:7b:7e:46:18:
1a:7a:fa:d7:f7:5f:f0:88:1e:60:31:a5:48:d3:91:7d:48:e5:
c2:70:9a:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALKlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDMwMDkwMTE4WhcNMjQwNTI1MDkwMTE4WjAYMRYw
FAYDVQQDEw02NjMwYjM2MS1hN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzXhvrjyQ1slKjobFnva31HPAFfjQOmuYRj8e/rR+Hmdsx/T7X0EmEWPP
u/K2ozQVIJF6XiVCH1E8q7QVJKw8oxkEIVoKHCM6NsXWVwnifCM9/fztZP0aOe1Z
eymUllxLz4keACedrFYWRLSSw6w58YVlNYZJ/Ncf39XOKRIZW09IGOYBljwx1Ndv
RMpSLfzlZ3qDSzxXQIFK2Stetk6BSXgnE6mQAamrpxIZfBRdQMgWE4IvFoqQWXsb
yA9ALA8WM6UNfN0Uq862w+XlusJjx8O2wvwyYRbH6LQxUrgGUSnKyhZElbSq/jLt
GhG6F7cKkm4qu3akLeHrpZfm/50nNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLhk
w1xb5rYi0yoPlbr/M8J4tAD7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNkE1MTlCNjA2RDAxMUVGOUY5MzgyNkYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms40MA0GCSqGSIb3DQEB
CwUAA4IBAQCQNcfTCuRm/Mqxp5ti3tlVKPCf2zkWs3Yao9V38L7JSLJM2MyPLGgn
TDUTsSX5k2r0hrcNw6FhnAWygMI6I3v4KJi9UszYs5usBUsMuactDJk0INeQiZ5A
ZvEE8KpifV8okpex+j70kGvSThHWXOZ57BHXdcmAYnCWi1ulrE9O9MAGE36DyRBR
8IuNN/exuLv6Mux7mXtQ5kdpZQiUgreA0QyqMNYZbQABV5bT5n+06tDalejWvUA9
ZNCQ3zJiTJLF8c2+BruDTf2b8BoAarQh6D6ZturYEFPA28A5PkqPPZGthPk5knt+
RhgaevrX91/wiB5gMaVI05F9SOXCcJqZ
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:13 2024 by rpki-client on console-fra.rpki-client.org