Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/B530BB18F97011EEB5FBB168017001B1.roa
File: B530BB18F97011EEB5FBB168017001B1.roa (raw, json)
Hash identifier: chol58buVy5Fq8T9HYD+K5Wy/ompZFYBbVeluWTvY1A=
Subject key identifier: 7F:65:47:F4:AF:DD:1C:66:53:F5:49:EE:27:73:8E:97:37:DA:A9:AE
Certificate issuer: /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial: 50
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/B530BB18F97011EEB5FBB168017001B1.roa
Signing time: Sat 13 Apr 2024 08:34:57 +0000
ROA not before: Sat 13 Apr 2024 08:34:53 +0000
ROA not after: Tue 01 Apr 2025 08:34:53 +0000
asID: 34465
IP address blocks: 102.209.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Validity
Not Before: Apr 13 08:34:53 2024 GMT
Not After : Apr 1 08:34:53 2025 GMT
Subject: CN=661a43b1-48ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:82:db:6e:47:d6:f9:43:9b:aa:c1:9b:3d:
5e:fd:ff:39:f3:b8:9f:e3:97:ab:ca:6b:c5:e4:02:
c4:55:15:ed:8f:5f:fe:dc:a3:39:55:38:27:28:a7:
97:48:65:52:7b:64:91:58:03:58:8a:83:b3:78:f7:
35:df:d7:98:ea:4b:cf:2b:ae:fa:19:82:a7:c9:39:
7c:c3:00:7e:73:d6:08:f0:c8:99:2d:dd:45:27:98:
b8:8c:f2:cd:ac:59:0f:d1:3d:4f:5e:1a:9c:be:3d:
9b:f8:10:fa:b0:a0:f4:74:b5:13:5d:80:8f:a1:ff:
fc:c1:aa:f6:ee:fd:06:8c:1b:86:5e:ff:27:c7:05:
d5:c2:74:0e:b2:7b:c4:04:22:98:69:90:47:e1:d4:
4b:fe:b3:8e:ac:3d:74:b3:31:88:f1:00:00:4d:3b:
93:6b:bf:ba:92:54:ef:e4:90:9c:4a:8b:70:d7:22:
65:81:65:a1:fd:0e:1a:fe:3b:49:90:c3:2a:a0:0d:
d6:7c:1d:53:18:33:72:16:87:0e:1d:1c:ea:b4:7c:
db:58:81:b7:21:f3:7d:f6:49:f1:c1:df:50:c6:69:
11:06:0b:08:68:06:dd:d7:39:da:9a:39:a6:b6:5c:
c6:b6:7d:f3:1f:0b:5b:72:2a:e9:8f:03:30:85:b0:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:47:F4:AF:DD:1C:66:53:F5:49:EE:27:73:8E:97:37:DA:A9:AE
X509v3 Authority Key Identifier:
keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/B530BB18F97011EEB5FBB168017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.243.0/24
Signature Algorithm: sha256WithRSAEncryption
06:74:ab:5d:bd:b4:45:35:23:c8:71:dc:60:11:21:bf:44:07:
69:fa:0e:9e:e6:05:27:2e:59:c8:1b:f2:fc:50:86:c8:58:61:
f8:89:4a:29:54:97:b0:d0:db:e3:79:6d:11:ed:c0:8b:ba:e4:
38:91:00:a4:c5:65:2a:56:2c:9c:55:83:e4:92:b6:ad:b7:c1:
5c:b9:31:15:1f:4e:89:68:11:65:05:d9:06:4f:5c:4d:e7:db:
b1:d0:81:1d:9e:d6:ea:78:a5:c2:a8:b2:d2:c2:24:9e:04:1f:
34:f0:24:30:ec:b8:76:07:45:ec:a1:f2:62:28:c1:17:23:a3:
38:34:f4:f3:b8:09:ac:9c:3b:63:79:d3:1c:d8:e0:32:7f:51:
6b:2b:54:84:72:4a:76:93:6b:ef:23:fe:3e:a5:d6:08:75:7d:
73:10:73:de:3f:42:c4:c7:a9:89:da:07:5b:35:c3:ed:18:36:
69:cd:bb:d1:9a:63:d5:42:21:60:84:a7:b2:e6:16:28:6f:39:
59:52:21:28:96:0c:31:b6:b1:e2:1b:15:f4:af:1f:a9:ca:a2:
0b:d1:64:54:4c:4b:7d:92:9f:bb:a4:66:be:e5:c8:dc:e6:f3:
81:39:28:d7:c0:d6:69:69:64:87:37:ea:45:92:a7:e4:a8:86:
74:31:d9:db
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
RjU5QkFGMTEwLwYDVQQFEyhFMDM2QUUwOEZFMDM0MTZGNTg4ODdBOUQxOTVEQkZE
ODZBMjU2MDNDMB4XDTI0MDQxMzA4MzQ1M1oXDTI1MDQwMTA4MzQ1M1owGDEWMBQG
A1UEAxMNNjYxYTQzYjEtNDhhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKJhgttuR9b5Q5uqwZs9Xv3/OfO4n+OXq8prxeQCxFUV7Y9f/tyjOVU4Jyin
l0hlUntkkVgDWIqDs3j3Nd/XmOpLzyuu+hmCp8k5fMMAfnPWCPDImS3dRSeYuIzy
zaxZD9E9T14anL49m/gQ+rCg9HS1E12Aj6H//MGq9u79Bowbhl7/J8cF1cJ0DrJ7
xAQimGmQR+HUS/6zjqw9dLMxiPEAAE07k2u/upJU7+SQnEqLcNciZYFlof0OGv47
SZDDKqAN1nwdUxgzchaHDh0c6rR821iBtyHzffZJ8cHfUMZpEQYLCGgG3dc52po5
prZcxrZ98x8LW3Iq6Y8DMIWwvfsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBR/ZUf0
r90cZlP1Se4nc46XN9qprjAfBgNVHSMEGDAWgBTgNq4I/gNBb1iIep0ZXb/YaiVg
PDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkY1OUIvNEFBQUEyMTRDNzUxMTFFRUEwMkVCMzkyNzc1NDEyRTYvNERhdUNQ
NERRVzlZaUhxZEdWMl8yR29sWUR3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNERhdUNQNERRVzlZaUhxZEdWMl8yR29sWUR3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkY1OUIvNEFBQUEyMTRDNzUxMTFFRUEwMkVCMzkyNzc1
NDEyRTYvQjUzMEJCMThGOTcwMTFFRUI1RkJCMTY4MDE3MDAxQjEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbR8zANBgkqhkiG9w0BAQsF
AAOCAQEABnSrXb20RTUjyHHcYBEhv0QHafoOnuYFJy5ZyBvy/FCGyFhh+IlKKVSX
sNDb43ltEe3Ai7rkOJEApMVlKlYsnFWD5JK2rbfBXLkxFR9OiWgRZQXZBk9cTefb
sdCBHZ7W6nilwqiy0sIkngQfNPAkMOy4dgdF7KHyYijBFyOjODT087gJrJw7Y3nT
HNjgMn9RaytUhHJKdpNr7yP+PqXWCHV9cxBz3j9CxMepidoHWzXD7Rg2ac270Zpj
1UIhYISnsuYWKG85WVIhKJYMMbax4hsV9K8fqcqiC9FkVExLfZKfu6RmvuXI3Obz
gTko18DWaWlkhzfqRZKn5KiGdDHZ2w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org