Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/292D046AE86711EE8FDB3A94775412E6.roa
File: 292D046AE86711EE8FDB3A94775412E6.roa (raw, json)
Hash identifier: n0LeDBTKJkHHV0N43lM8DTJBrQPG/rolLKt/+8fGqQs=
Subject key identifier: E2:D1:F3:18:C8:30:DA:18:B2:BA:1C:97:71:EA:CF:E2:11:6A:CD:7A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1010
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/292D046AE86711EE8FDB3A94775412E6.roa
Signing time: Fri 22 Mar 2024 16:13:46 +0000
ROA not before: Fri 22 Mar 2024 16:13:43 +0000
ROA not after: Sun 22 Mar 2026 16:13:43 +0000
asID: 29802
IP address blocks: 102.165.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4112 (0x1010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 22 16:13:43 2024 GMT
Not After : Mar 22 16:13:43 2026 GMT
Subject: CN=65fdae3a-b326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:47:af:46:8f:67:77:b6:b4:a2:f3:b8:3d:
f1:dd:0d:67:01:69:17:a7:59:fb:64:65:00:77:f4:
66:db:a2:e2:b9:ec:e8:80:20:78:5b:70:6b:f4:44:
a4:83:fc:2e:40:fa:9b:8f:89:3f:46:d4:33:89:91:
9c:d3:40:cf:0c:b3:bf:58:57:ef:d3:91:63:e7:27:
50:60:ae:ed:d2:94:bf:7d:5f:58:b9:98:a4:11:6e:
48:0f:16:70:8c:36:bc:81:c1:47:4d:58:e9:2f:1d:
69:cc:50:2a:dd:3a:72:11:79:a2:bb:82:62:6f:81:
06:ea:c1:97:f2:31:b1:b0:0e:bc:30:c6:07:34:a2:
32:dd:d1:a4:2d:7b:98:c5:ff:81:bf:0f:66:55:7e:
13:3b:dc:4c:19:f9:bf:22:46:80:8c:4f:97:ca:fa:
33:3b:e0:cf:1d:b7:7c:43:79:4b:97:9a:47:00:9d:
86:ea:99:34:f2:d1:d2:12:40:ab:9e:67:cf:13:3a:
08:59:93:ab:f5:f3:19:19:bc:51:0c:5f:62:95:db:
97:70:09:74:47:cb:5a:e0:89:e3:07:27:ee:e1:01:
92:e9:49:94:77:5f:63:86:07:21:3e:ae:50:5d:7f:
21:84:14:ad:72:41:d3:2d:7c:99:e3:a0:28:b2:28:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D1:F3:18:C8:30:DA:18:B2:BA:1C:97:71:EA:CF:E2:11:6A:CD:7A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/292D046AE86711EE8FDB3A94775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.9.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3d:4c:31:7c:51:e1:51:d4:26:b7:4c:c2:ef:19:9b:54:1a:
46:1e:e9:e2:0b:45:ce:f4:1f:cb:cf:93:c1:d4:6e:3b:5e:ae:
0c:00:50:e1:e7:5b:b3:6e:c3:e1:88:f2:fe:02:d3:20:8c:74:
72:c5:4a:9a:a6:cd:5b:c2:83:4c:29:8d:40:08:58:ba:50:37:
dc:9e:6f:eb:9e:5b:60:4c:1f:d9:73:86:54:11:e4:0b:1f:bb:
48:a8:93:86:5f:62:85:85:5d:c8:1f:43:4c:b7:64:4b:ba:4c:
11:13:2c:e2:2c:c0:88:10:bc:02:44:3e:77:54:ef:37:6b:2b:
a3:25:c0:9b:f3:6b:dc:c7:c3:46:32:51:84:91:fa:ae:0c:3f:
93:db:73:12:4e:6a:6a:df:a8:11:b6:62:ba:78:1c:eb:c1:78:
02:55:72:47:70:15:65:f4:6f:b7:7d:f4:9d:45:3d:a8:51:4b:
7c:41:cf:51:4c:24:43:a9:a5:c9:8b:67:7e:b5:38:a4:6c:e3:
ed:94:7c:21:96:71:53:17:66:97:e0:bd:36:3c:64:fd:81:8e:
1d:09:b7:74:73:5a:2a:f6:84:d9:db:32:79:73:f4:65:00:5f:
8c:40:c5:72:14:ed:fb:b4:0b:98:fc:39:f1:aa:25:9d:e3:33:
45:22:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org