Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/171E722C5F3811EDBE2988D0F1222468.roa
File: 171E722C5F3811EDBE2988D0F1222468.roa (raw, json)
Hash identifier: 40kkxdQDg+BZl0q/xNl3ZhAQCr5NCrl2y5Vx+soac/A=
Subject key identifier: 21:C3:4D:67:B1:60:90:74:37:FF:35:60:3C:27:E8:CE:18:16:CC:B4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08C8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/171E722C5F3811EDBE2988D0F1222468.roa
Signing time: Tue 08 Nov 2022 07:36:43 +0000
ROA not before: Tue 08 Nov 2022 07:36:39 +0000
ROA not after: Fri 08 Nov 2024 07:36:39 +0000
asID: 53340
IP address blocks: 102.165.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 11:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 8 07:36:39 2022 GMT
Not After : Nov 8 07:36:39 2024 GMT
Subject: CN=636a070b-ddc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:44:95:75:6b:06:3a:cc:8e:71:c2:74:09:
37:0e:04:76:bf:16:72:23:c4:49:c7:ff:be:92:6c:
07:8d:a8:62:07:30:16:62:ba:d3:ac:25:91:7a:3b:
f3:cf:e0:ca:b6:cd:2b:8c:ad:e8:a4:fc:df:8b:b4:
75:74:2f:77:59:fe:0e:8e:d9:8a:3e:95:13:0b:93:
f0:c4:5f:6f:8b:6d:8d:2f:62:63:75:01:51:f5:2c:
88:77:c0:69:09:81:cb:54:f7:8d:6c:c0:4f:1b:98:
0c:fa:8f:13:0e:49:f1:ad:3e:26:f8:bd:2c:0e:83:
e1:3a:90:22:bf:9a:cd:5b:f5:46:72:e4:24:14:e8:
7e:ff:b0:14:c1:46:de:dc:31:42:8f:77:70:e4:fc:
3a:37:37:bb:40:25:87:c8:3d:7b:17:91:27:73:62:
5f:50:f8:10:69:aa:6b:da:68:74:97:d5:2e:12:d7:
a1:0c:e1:2d:f0:43:07:10:14:d9:85:91:22:38:93:
d5:a4:21:bd:ef:7f:d4:69:1f:1f:03:40:e3:62:40:
86:25:bd:5b:63:81:cd:f6:8d:4b:96:93:61:41:d0:
a4:cd:79:87:21:01:19:ed:cb:24:f6:57:54:0e:55:
79:e7:7a:bd:f8:07:bc:f8:78:37:41:53:55:83:df:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C3:4D:67:B1:60:90:74:37:FF:35:60:3C:27:E8:CE:18:16:CC:B4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/171E722C5F3811EDBE2988D0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:dc:77:4b:f6:9a:53:fd:b2:d0:b5:13:17:96:b6:84:fc:85:
c7:e1:d1:bb:5d:f1:9c:a8:6a:ec:61:42:7c:f3:6f:d2:83:48:
eb:f8:ea:24:f7:fb:fc:4b:84:7b:70:b7:74:10:46:cf:28:12:
68:54:0c:c6:70:df:86:b3:c5:65:e3:a7:e8:a7:d3:7f:ba:d6:
13:6d:a5:43:96:36:be:19:f2:97:78:53:15:bd:b6:0a:89:5e:
96:1e:91:a6:15:b6:62:1d:f9:b9:29:f3:03:ec:0b:15:0f:9f:
97:cf:b8:3e:18:3b:04:f9:10:1d:62:b4:f8:e7:bb:37:16:af:
c1:bb:db:99:fe:a3:89:89:21:3d:b9:6f:c0:13:fa:4a:31:af:
03:98:8b:7f:df:b2:02:fd:a0:24:86:29:7f:88:81:f6:d0:a1:
97:a9:4d:b1:52:fc:f7:7a:1c:ff:82:83:fd:ab:a0:31:1a:21:
ec:1d:6f:db:d5:d3:e2:1c:d7:75:99:8a:26:56:1d:83:73:e1:
d4:f0:7d:f3:a0:92:88:f9:59:71:9c:3d:30:f3:7b:cf:6e:35:
72:cd:64:d2:22:95:5d:04:86:f2:49:cc:21:2e:ce:5a:3f:95:
71:d3:37:1a:71:0d:6a:9f:c8:a6:5f:55:2c:30:d8:24:fb:8b:
59:57:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:07:35 2024 by rpki-client on console-ams.rpki-client.org