Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1655BA32E86511EE8D112384775412E6.roa
File: 1655BA32E86511EE8D112384775412E6.roa (raw, json)
Hash identifier: eUjuB+KiBIWN9tN7lDV9/ylwLntOs4uBO8wqJOMgJ+Q=
Subject key identifier: E7:73:89:48:8B:43:50:A7:D9:5E:17:DD:FA:E3:92:2F:94:50:22:E9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FFC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1655BA32E86511EE8D112384775412E6.roa
Signing time: Fri 22 Mar 2024 15:58:56 +0000
ROA not before: Fri 22 Mar 2024 15:58:52 +0000
ROA not after: Sun 22 Mar 2026 15:58:52 +0000
asID: 29802
IP address blocks: 102.165.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4092 (0xffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 22 15:58:52 2024 GMT
Not After : Mar 22 15:58:52 2026 GMT
Subject: CN=65fdaac0-a3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:7c:72:0b:ad:35:10:7f:c7:1f:0d:00:57:
34:ca:10:ac:8d:87:9a:32:22:8a:f2:88:17:89:5b:
2a:6a:cd:c2:d0:4c:23:f3:b6:fa:44:16:25:d2:3d:
5c:f3:53:5c:4b:3e:78:c4:7c:c6:29:b2:79:53:89:
99:75:6a:65:17:bf:a9:3c:ce:72:18:cc:7b:ae:f5:
2f:5a:1a:e8:94:22:31:7c:ec:28:2a:50:90:39:b9:
5b:cf:56:ed:a4:fd:4b:c7:9a:54:fb:47:ac:cd:1b:
8c:04:8f:ab:44:4e:84:44:fc:bf:8b:0a:37:7e:96:
9c:9f:ca:ca:d8:be:ed:16:6c:74:ce:07:48:e3:13:
3e:15:8a:92:3b:e4:49:a7:a5:15:74:83:a5:1d:94:
fa:76:43:65:d6:c2:6f:45:fa:48:f0:fe:30:8d:c2:
5a:5f:4c:ce:cc:49:d0:32:0a:ca:0c:16:46:f5:2e:
ec:85:91:6c:f4:38:fd:89:e4:35:1e:65:7b:88:92:
fa:08:b8:20:a4:ee:81:08:94:a6:a7:40:5f:b5:d0:
85:43:0a:7d:c1:76:3e:61:e4:e0:6b:8c:3d:06:27:
a7:58:60:86:bd:e0:76:ba:7a:08:90:a3:af:01:b9:
f2:68:0e:9b:e2:d3:67:01:26:48:c1:9d:ec:75:32:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:73:89:48:8B:43:50:A7:D9:5E:17:DD:FA:E3:92:2F:94:50:22:E9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1655BA32E86511EE8D112384775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.20.0/24
Signature Algorithm: sha256WithRSAEncryption
37:61:c6:61:dd:da:63:6a:30:a0:c5:45:8f:85:95:51:46:2a:
e5:b2:66:69:cc:0b:d5:3b:68:11:f6:1a:7e:e9:80:b2:be:2b:
be:ed:33:f5:4f:05:e5:a6:18:db:26:f2:58:88:43:60:9a:0c:
5e:e7:0d:13:8a:43:8d:bb:7a:e5:da:e8:9a:10:c5:29:22:38:
de:3b:ef:ac:fb:8f:cb:28:0a:2d:4e:29:e6:05:98:82:37:b5:
53:74:0a:59:f8:46:cb:c2:c3:f3:f5:6d:b8:8c:a1:a2:de:fc:
88:85:c1:df:e4:1b:7a:21:0a:c6:98:7d:4c:32:65:c0:d5:98:
c9:16:54:67:42:d2:86:02:d0:2e:8f:54:66:53:0f:76:36:05:
36:e6:a3:4e:3e:50:79:54:07:db:00:5b:5c:c0:70:14:7b:06:
b7:80:23:ce:f1:98:ed:31:43:b0:79:24:a7:73:dd:2c:f6:18:
e0:50:65:f6:0e:2e:a9:d1:eb:e1:93:63:5a:cf:f0:01:6f:4e:
97:28:2f:e0:4f:80:60:2c:b7:c0:d6:3d:4b:ed:34:c2:c9:20:
16:54:9f:88:0c:59:80:3c:b7:99:e0:52:91:76:af:1d:63:18:
bd:4c:d1:a1:32:3c:df:ae:d0:39:97:17:6d:d5:7c:9b:f7:34:
2b:04:d2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org