Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/06562762BE9D11EE9AD5E1A7775412E6.roa
File: 06562762BE9D11EE9AD5E1A7775412E6.roa (raw, json)
Hash identifier: A47Fv49HrGw8EWfdryHbDHlv+/Oz+z1q6LexSzcMJBw=
Subject key identifier: 51:22:00:FB:2A:0D:83:6B:18:85:DC:0C:4A:65:07:CF:7B:D0:94:8C
Certificate issuer: /CN=F36114AAAF/serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
Certificate serial: 10
Authority key identifier: CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/06562762BE9D11EE9AD5E1A7775412E6.roa
Signing time: Mon 29 Jan 2024 11:53:32 +0000
ROA not before: Mon 29 Jan 2024 11:53:29 +0000
ROA not after: Thu 29 Jan 2026 11:53:29 +0000
asID: 21003
IP address blocks: 102.68.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36114AAAF/serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
Validity
Not Before: Jan 29 11:53:29 2024 GMT
Not After : Jan 29 11:53:29 2026 GMT
Subject: CN=65b791bc-f41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:c5:a2:da:2b:88:dc:c4:b3:79:8b:55:8d:
43:ab:83:01:53:48:95:54:c6:e9:2a:cc:ec:3b:50:
ab:f3:75:0e:c8:db:6b:bb:b6:64:bd:51:9c:3d:c6:
a2:21:5d:84:98:9a:e6:46:9b:0d:55:af:5e:a8:de:
f1:25:7e:96:1a:ac:ba:a6:7b:c2:b0:ee:dd:72:6f:
8f:22:b6:fb:be:b6:71:8c:5e:c4:72:16:46:7e:9e:
19:2d:b3:8b:7e:a6:7a:7f:a4:05:2e:f0:36:87:8a:
57:bb:d4:d4:60:bb:6e:91:7b:83:5b:7c:07:e1:33:
89:a7:17:81:c5:20:0f:c3:58:1c:b6:d7:22:d8:be:
f4:e6:2d:d2:cf:e7:72:af:db:ed:ad:e6:d1:4b:fa:
13:4c:8f:cd:a3:d9:d2:70:49:5c:d7:79:a2:4d:24:
a3:5b:75:a8:0b:26:b2:3e:a4:a3:fd:d9:b9:97:1a:
b3:1a:00:83:43:27:59:aa:ad:85:28:18:c2:b3:81:
8e:50:98:05:ef:ca:5f:10:a1:88:97:03:3a:69:d6:
34:64:ba:eb:d9:8a:39:a9:0b:c8:9d:11:95:28:05:
36:d8:62:c9:92:af:c3:a5:c0:1a:75:fe:e4:16:67:
a4:7f:0f:d5:49:c8:69:65:e3:d7:af:80:1a:22:46:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:00:FB:2A:0D:83:6B:18:85:DC:0C:4A:65:07:CF:7B:D0:94:8C
X509v3 Authority Key Identifier:
keyid:CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/06562762BE9D11EE9AD5E1A7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.68.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:af:22:77:2c:f1:7b:21:98:db:8b:8f:82:d7:e4:2d:0e:33:
f0:88:5f:6a:4f:45:df:ff:f7:a7:ad:ca:7e:a9:ea:34:e2:01:
16:ec:ae:e9:47:82:13:e1:8e:90:de:6c:69:85:43:7a:68:16:
68:3a:6e:38:56:b7:93:b3:e3:b3:b2:86:94:a2:56:f7:21:8d:
00:8e:89:17:15:1c:cf:21:d3:82:7b:f5:c0:84:9a:67:29:97:
2e:14:c7:75:b4:78:9b:d9:bc:11:52:0e:71:c0:f8:8c:cd:c3:
cb:4a:38:8e:02:72:4b:bc:6c:f7:75:f0:f5:60:e4:6b:7d:d9:
ff:52:94:96:49:d1:f5:cb:9d:ab:29:3f:b0:7a:5c:28:5f:19:
02:3a:02:81:8a:f3:84:9f:ec:4b:8b:59:44:84:c1:59:9a:c8:
d7:29:e8:77:3d:81:8c:e6:58:71:67:73:19:cd:18:e8:df:16:
b3:1e:40:94:67:a7:d1:74:ef:fb:0a:a0:53:73:a0:6b:b3:27:
23:61:34:51:73:51:bf:c9:62:e6:70:08:ce:df:7c:6e:b2:77:
c1:18:bb:ed:d6:b3:01:d5:b3:84:23:94:c1:70:24:ae:8f:83:
8a:01:3c:c4:bd:c3:57:0c:c4:6d:26:f9:57:52:5c:ac:8c:bf:
56:af:72:15
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBEDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MTRBQUFGMTEwLwYDVQQFEyhDRDUyMzJCNjNDNkE4MzI5OTBDODY3MDdDQjczOUJE
QzA0REI5QTU5MB4XDTI0MDEyOTExNTMyOVoXDTI2MDEyOTExNTMyOVowGDEWMBQG
A1UEAxMNNjViNzkxYmMtZjQxYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMI1xaLaK4jcxLN5i1WNQ6uDAVNIlVTG6SrM7DtQq/N1Dsjba7u2ZL1RnD3G
oiFdhJia5kabDVWvXqje8SV+lhqsuqZ7wrDu3XJvjyK2+762cYxexHIWRn6eGS2z
i36men+kBS7wNoeKV7vU1GC7bpF7g1t8B+EziacXgcUgD8NYHLbXIti+9OYt0s/n
cq/b7a3m0Uv6E0yPzaPZ0nBJXNd5ok0ko1t1qAsmsj6ko/3ZuZcasxoAg0MnWaqt
hSgYwrOBjlCYBe/KXxChiJcDOmnWNGS669mKOakLyJ0RlSgFNthiyZKvw6XAGnX+
5BZnpH8P1UnIaWXj16+AGiJGT0ECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRRIgD7
Kg2DaxiF3AxKZQfPe9CUjDAfBgNVHSMEGDAWgBTNUjK2PGqDKZDIZwfLc5vcBNua
WTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTE0QUEvODZENkU1N0VCRThGMTFFRTgzMkY0NDkxNzc1NDEyRTYvelZJeXRq
eHFneW1ReUdjSHkzT2IzQVRibWxrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvelZJeXRqeHFneW1ReUdjSHkzT2IzQVRibWxrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTE0QUEvODZENkU1N0VCRThGMTFFRTgzMkY0NDkxNzc1
NDEyRTYvMDY1NjI3NjJCRTlEMTFFRTlBRDVFMUE3Nzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGZEhzANBgkqhkiG9w0BAQsF
AAOCAQEAqK8idyzxeyGY24uPgtfkLQ4z8Ihfak9F3//3p63KfqnqNOIBFuyu6UeC
E+GOkN5saYVDemgWaDpuOFa3k7Pjs7KGlKJW9yGNAI6JFxUczyHTgnv1wISaZymX
LhTHdbR4m9m8EVIOccD4jM3Dy0o4jgJyS7xs93Xw9WDka33Z/1KUlknR9cudqyk/
sHpcKF8ZAjoCgYrzhJ/sS4tZRITBWZrI1ynodz2BjOZYcWdzGc0Y6N8Wsx5AlGen
0XTv+wqgU3Oga7MnI2E0UXNRv8li5nAIzt98brJ3wRi77dazAdWzhCOUwXAkro+D
igE8xL3DVwzEbSb5V1JcrIy/Vq9yFQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:13 2024 by rpki-client on console-fra.rpki-client.org