Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/24F52F7A9F8811EA8771673BF8AEA228.roa
File: 24F52F7A9F8811EA8771673BF8AEA228.roa (raw, json)
Hash identifier: yndl0tOhUDwQ6Y3ExagHGGbpgAi1l8sO07zu0poxd34=
Subject key identifier: 7A:90:77:28:6D:C1:E9:90:36:AD:30:48:6E:42:81:32:02:51:49:A0
Certificate issuer: /CN=F36B1FB2AR/serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
Certificate serial: 02
Authority key identifier: 5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41
Authority info access: rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/24F52F7A9F8811EA8771673BF8AEA228.roa
Signing time: Tue 26 May 2020 19:36:08 +0000
ROA not before: Tue 26 May 2020 19:36:03 +0000
ROA not after: Tue 31 Dec 2030 19:36:03 +0000
asID: 327981
IP address blocks: 169.239.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AR/serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
Validity
Not Before: May 26 19:36:03 2020 GMT
Not After : Dec 31 19:36:03 2030 GMT
Subject: CN=5ecd6fa7-e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:df:7c:7a:9f:3f:f9:b7:05:50:71:41:be:
12:78:cd:77:23:2b:91:8d:0f:25:ae:fe:3e:06:9d:
b6:aa:9f:5e:63:fe:58:98:e1:22:a8:bf:7a:f2:70:
3d:8e:58:82:17:d5:83:e0:65:a7:78:4c:b1:6f:83:
41:d3:ea:d3:aa:cc:37:3e:6b:2f:36:6d:51:d8:3a:
dc:e0:0a:a4:29:2c:6a:01:47:f7:9f:d8:0c:a5:ec:
61:8f:b9:d4:9e:3f:80:54:25:f0:23:7c:43:52:d6:
97:d1:0d:9e:41:b5:e2:85:da:b8:27:c5:3d:73:ad:
73:29:8a:26:5c:c6:cd:69:02:f2:e3:7b:40:7e:ec:
46:8a:ed:dc:ec:19:71:ec:45:22:ec:11:6c:2d:96:
48:fa:02:f5:b0:8d:ac:bc:cd:10:42:34:6a:58:91:
f5:e3:26:0d:ed:9a:75:63:ec:e5:e1:7c:d3:ab:5d:
21:00:7e:c0:b6:b4:76:52:41:eb:98:a4:e3:8b:4e:
b4:ca:f1:06:36:a4:26:fc:90:1f:1f:9b:5c:12:5a:
02:81:35:e8:14:33:a9:4a:df:5d:4c:e1:e3:40:47:
2e:0e:dd:85:e4:83:31:0c:37:dc:21:40:1e:70:2c:
67:38:c5:7f:15:e2:15:7a:4f:55:7a:73:40:6c:ec:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:77:28:6D:C1:E9:90:36:AD:30:48:6E:42:81:32:02:51:49:A0
X509v3 Authority Key Identifier:
keyid:5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/24F52F7A9F8811EA8771673BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.16.0/22
Signature Algorithm: sha256WithRSAEncryption
57:8f:59:8d:05:54:a1:48:38:1d:a0:81:63:d6:72:a1:d0:31:
f3:de:4b:53:6d:d8:9a:4f:82:1e:57:45:b0:54:be:96:4f:43:
bd:4c:fa:90:0e:03:ff:ba:89:52:e4:a2:62:df:36:cf:52:98:
1f:38:ae:66:a9:39:90:a9:ed:be:6c:db:2e:c6:50:87:f5:03:
cd:33:6d:d1:a3:2d:42:fe:b3:eb:d0:ea:05:02:e1:6c:a1:61:
45:e3:54:b8:eb:a5:42:c7:a3:c0:4b:56:c8:55:06:99:4d:7e:
c1:67:84:a7:ea:f7:4f:56:b8:de:63:58:75:c1:cc:04:b1:4a:
d0:92:a0:74:2b:bf:cc:cd:6a:dc:68:9c:79:bf:c0:7a:1f:24:
6a:da:65:6c:b7:e7:63:24:af:94:ec:70:e3:e1:88:42:46:11:
ed:5c:fa:56:7d:ea:a6:97:38:f5:2c:b8:29:e8:c9:f9:44:26:
1d:f3:da:c1:a7:03:b8:64:98:70:90:94:1b:51:6a:13:14:05:
54:ae:44:db:6e:0a:ec:be:44:df:4c:dc:b5:50:7c:16:f0:06:
0d:40:9c:08:61:ca:d6:a0:b4:cd:bd:38:78:10:d8:31:62:41:
47:aa:d8:c3:91:93:78:62:b5:27:d9:bb:fd:32:0c:6d:fe:53:
3a:9e:f8:66
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
MUZCMkFSMTEwLwYDVQQFEyg1QjUyNEU0QjNGMTlFODQxQkM2MTY0RTk2M0JGRDIz
RDM4Q0QzMjQxMB4XDTIwMDUyNjE5MzYwM1oXDTMwMTIzMTE5MzYwM1owGDEWMBQG
A1UEAxMNNWVjZDZmYTctZThiMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1y33x6nz/5twVQcUG+EnjNdyMrkY0PJa7+PgadtqqfXmP+WJjhIqi/evJw
PY5YghfVg+Blp3hMsW+DQdPq06rMNz5rLzZtUdg63OAKpCksagFH95/YDKXsYY+5
1J4/gFQl8CN8Q1LWl9ENnkG14oXauCfFPXOtcymKJlzGzWkC8uN7QH7sRort3OwZ
cexFIuwRbC2WSPoC9bCNrLzNEEI0aliR9eMmDe2adWPs5eF806tdIQB+wLa0dlJB
65ik44tOtMrxBjakJvyQHx+bXBJaAoE16BQzqUrfXUzh40BHLg7dheSDMQw33CFA
HnAsZzjFfxXiFXpPVXpzQGzsnW8CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBR6kHco
bcHpkDatMEhuQoEyAlFJoDAfBgNVHSMEGDAWgBRbUk5LPxnoQbxhZOljv9I9OM0y
QTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjFGQjIvRkJBNzE0MDI5RjgzMTFFQUIyMkIzRDM3RjhBRUEyMjgvVzFKT1N6
OFo2RUc4WVdUcFk3X1NQVGpOTWtFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
VzFKT1N6OFo2RUc4WVdUcFk3X1NQVGpOTWtFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjFGQjIvRkJBNzE0MDI5RjgzMTFFQUIyMkIzRDM3RjhBRUEy
MjgvMjRGNTJGN0E5Rjg4MTFFQTg3NzE2NzNCRjhBRUEyMjgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqnvEDANBgkqhkiG9w0BAQsFAAOC
AQEAV49ZjQVUoUg4HaCBY9ZyodAx895LU23Ymk+CHldFsFS+lk9DvUz6kA4D/7qJ
UuSiYt82z1KYHziuZqk5kKntvmzbLsZQh/UDzTNt0aMtQv6z69DqBQLhbKFhReNU
uOulQsejwEtWyFUGmU1+wWeEp+r3T1a43mNYdcHMBLFK0JKgdCu/zM1q3Giceb/A
eh8katplbLfnYySvlOxw4+GIQkYR7Vz6Vn3qppc49Sy4KejJ+UQmHfPawacDuGSY
cJCUG1FqExQFVK5E224K7L5E30zctVB8FvAGDUCcCGHK1qC0zb04eBDYMWJBR6rY
w5GTeGK1J9m7/TIMbf5TOp74Zg==
-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:47 2024 by rpki-client on console-ams.rpki-client.org