Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/EB509C2AC99D11EEB321876A775412E6.roa
File: EB509C2AC99D11EEB321876A775412E6.roa (raw, json)
Hash identifier: p2dpDdQb34gaCv5jDzsfZfSA7ioiyEsF2wPYi+ctFkc=
Subject key identifier: 4F:FC:D0:73:8F:CF:8F:49:6C:8B:34:34:B7:E8:83:47:D6:CF:B2:B3
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 058D
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/EB509C2AC99D11EEB321876A775412E6.roa
Signing time: Mon 12 Feb 2024 11:57:39 +0000
ROA not before: Mon 12 Feb 2024 11:57:36 +0000
ROA not after: Wed 12 Feb 2048 11:57:36 +0000
asID: 37098
IP address blocks: 154.66.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1421 (0x58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 11:57:36 2024 GMT
Not After : Feb 12 11:57:36 2048 GMT
Subject: CN=65ca07b3-a500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:78:6b:f3:1e:3d:f4:d2:36:8a:e3:c4:0e:
b1:e5:94:d7:9c:04:29:80:80:fc:85:b2:03:a4:9d:
ad:c3:64:29:61:34:4e:1f:1f:c8:02:b5:2d:39:37:
b0:b2:08:e5:69:23:52:bc:a2:d1:92:46:de:90:de:
0d:c1:87:be:9f:65:f2:af:63:4d:e4:50:af:6b:5f:
bc:89:09:a6:bf:6c:80:35:b3:a0:a4:97:63:1e:14:
16:2a:c2:79:c6:bc:6c:b4:c4:bc:3e:4d:b2:bb:7c:
e0:e4:7f:e8:32:bb:53:95:1e:87:1f:37:da:17:ec:
12:7e:d8:22:47:ef:8d:6c:44:52:28:83:68:24:27:
b3:14:3a:1a:60:b1:15:f1:d6:a0:65:9d:60:74:e1:
53:b2:5d:8d:e7:12:8c:35:6a:e4:c2:e5:4e:4a:73:
03:8a:11:5c:e5:ec:b9:ef:54:a5:63:1a:e9:1f:22:
d2:29:b9:f7:62:7a:25:0e:d4:c6:bc:54:f6:e4:32:
9b:5b:e0:1f:33:09:d2:f2:41:20:d8:34:9d:06:47:
bf:89:6a:aa:cd:57:5e:a0:f9:69:9a:35:2a:1e:de:
f8:c9:95:6b:68:0b:4c:a4:6c:e2:ef:8d:5f:15:2f:
fc:c9:98:b7:c1:e9:6d:c1:12:fe:32:ce:4a:a3:c6:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FC:D0:73:8F:CF:8F:49:6C:8B:34:34:B7:E8:83:47:D6:CF:B2:B3
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/EB509C2AC99D11EEB321876A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4d:44:79:93:5e:3d:b5:67:23:29:15:b8:0d:f4:4f:6f:57:
7c:01:0f:c2:b8:d5:78:4a:1f:08:b1:0f:1c:2b:02:88:8b:b8:
30:ca:91:c4:2c:5d:86:8c:dd:04:f8:61:d8:f1:a7:64:2d:84:
05:f2:16:cf:75:14:b5:6b:cc:a3:5c:09:74:ed:59:5f:97:ac:
dd:e4:7f:42:05:d9:85:c7:ea:b0:f9:1b:01:bb:7d:5c:aa:af:
bc:11:4b:17:05:07:3c:92:8c:57:c1:00:3a:7e:8f:8f:ee:c7:
38:96:61:46:36:e2:a3:a8:e3:93:1f:55:cd:70:62:ee:e9:d0:
02:1b:80:88:fc:36:7c:28:ee:68:4c:57:16:c4:5e:f7:4b:65:
c6:65:06:af:d3:04:9c:ed:9e:4e:d7:ae:11:2a:f9:cd:e0:06:
b8:ab:5a:ea:86:af:9d:ba:7e:26:e3:2a:50:e9:5c:05:16:7b:
65:5e:ae:dc:fb:d0:ed:ad:65:53:0d:ea:9b:25:2d:31:5b:16:
7b:a3:16:01:d1:28:4c:22:fe:b3:ca:32:0e:19:60:bc:bb:46:
6d:48:5c:04:5d:c2:58:6f:c2:ed:7d:77:3a:55:12:49:60:ec:
82:6d:7f:bf:42:3f:3d:8f:a3:bf:da:58:5e:4b:d1:d8:46:db:
30:42:08:20
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMzQTRBRjExMC8GA1UEBRMoM0UwQ0U2M0Q2MDQ1NUJENjVCQUEzMTU0QkU4MTIw
NkM2N0U2OUQ0NDAeFw0yNDAyMTIxMTU3MzZaFw00ODAyMTIxMTU3MzZaMBgxFjAU
BgNVBAMTDTY1Y2EwN2IzLWE1MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFC3hr8x499NI2iuPEDrHllNecBCmAgPyFsgOkna3DZClhNE4fH8gCtS05
N7CyCOVpI1K8otGSRt6Q3g3Bh76fZfKvY03kUK9rX7yJCaa/bIA1s6Ckl2MeFBYq
wnnGvGy0xLw+TbK7fODkf+gyu1OVHocfN9oX7BJ+2CJH741sRFIog2gkJ7MUOhpg
sRXx1qBlnWB04VOyXY3nEow1auTC5U5KcwOKEVzl7LnvVKVjGukfItIpufdieiUO
1Ma8VPbkMptb4B8zCdLyQSDYNJ0GR7+JaqrNV16g+WmaNSoe3vjJlWtoC0ykbOLv
jV8VL/zJmLfB6W3BEv4yzkqjxnINAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUT/zQ
c4/Pj0lsizQ0t+iDR9bPsrMwHwYDVR0jBBgwFoAUPgzmPWBFW9ZbqjFUvoEgbGfm
nUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzM0E0LzJFNzQzNzgyQTFBQzExRUE5RkVCQzM3NEY4QUVBMjI4L1Bnem1Q
V0JGVzlaYnFqRlV2b0VnYkdmbW5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Bnem1QV0JGVzlaYnFqRlV2b0VnYkdmbW5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzM0E0LzJFNzQzNzgyQTFBQzExRUE5RkVCQzM3NEY4
QUVBMjI4L0VCNTA5QzJBQzk5RDExRUVCMzIxODc2QTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaQnwwDQYJKoZIhvcNAQEL
BQADggEBAJpNRHmTXj21ZyMpFbgN9E9vV3wBD8K41XhKHwixDxwrAoiLuDDKkcQs
XYaM3QT4Ydjxp2QthAXyFs91FLVrzKNcCXTtWV+XrN3kf0IF2YXH6rD5GwG7fVyq
r7wRSxcFBzySjFfBADp+j4/uxziWYUY24qOo45MfVc1wYu7p0AIbgIj8Nnwo7mhM
VxbEXvdLZcZlBq/TBJztnk7XrhEq+c3gBrirWuqGr526fibjKlDpXAUWe2Vertz7
0O2tZVMN6pslLTFbFnujFgHRKEwi/rPKMg4ZYLy7Rm1IXARdwlhvwu19dzpVEklg
7IJtf79CPz2Po7/aWF5L0dhG2zBCCCA=
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:39 2024 by rpki-client on console-fra.rpki-client.org