Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2F109CAAE86411EE96ECB17B775412E6.roa
File: 2F109CAAE86411EE96ECB17B775412E6.roa (raw, json)
Hash identifier: m0c9fz1vm7xheKRE2KtrPCAuXy3PvRxl/+5Yp6fLEfQ=
Subject key identifier: A9:8C:6D:4A:41:E1:C3:82:87:1E:E1:85:C0:95:C4:6B:38:28:57:8C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FF6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2F109CAAE86411EE96ECB17B775412E6.roa
Signing time: Fri 22 Mar 2024 15:52:28 +0000
ROA not before: Fri 22 Mar 2024 15:52:24 +0000
ROA not after: Sun 22 Mar 2026 15:52:24 +0000
asID: 29802
IP address blocks: 102.165.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4086 (0xff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 22 15:52:24 2024 GMT
Not After : Mar 22 15:52:24 2026 GMT
Subject: CN=65fda93c-5875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:13:27:f6:86:24:1b:13:fb:ac:13:12:72:
21:26:bc:88:85:7f:77:cc:be:7f:5d:28:b5:01:10:
bd:60:87:89:ad:ea:b3:47:39:30:e5:49:ce:4b:6e:
17:3e:ae:0e:54:5e:19:56:35:50:cd:f1:01:91:f1:
d3:bf:97:5c:f1:d5:c4:36:55:16:a4:bc:47:a3:f7:
e1:aa:c5:f7:02:4f:c3:d1:07:51:e0:8c:ad:3b:92:
d2:35:0c:1c:77:32:f0:ab:26:9c:e9:dc:97:6c:16:
88:af:1a:77:a7:49:a4:84:02:4e:e8:d3:69:6a:7c:
bc:37:98:e1:60:51:f0:bf:80:74:4f:e0:f8:12:a7:
87:1b:4c:fd:a8:f2:e4:f1:3c:d2:4b:f1:41:8c:88:
ba:77:fb:30:86:f1:09:58:93:08:2d:da:e1:64:76:
91:fc:96:41:41:75:7f:77:5f:d1:0b:5e:b3:e7:48:
cb:c5:70:8f:6b:26:a3:4a:79:9c:48:3b:e3:c9:7c:
b3:24:00:52:64:cc:03:8f:95:e3:53:fd:5d:f2:3c:
99:ea:31:45:ca:fe:7a:85:b8:b4:bc:e3:2b:8c:22:
d2:e2:e2:f7:f3:df:a0:59:36:a6:3e:64:9c:9b:52:
8e:fc:5c:55:98:73:6c:de:3a:96:8e:1d:75:7f:d7:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:6D:4A:41:E1:C3:82:87:1E:E1:85:C0:95:C4:6B:38:28:57:8C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2F109CAAE86411EE96ECB17B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:61:0d:05:fd:dc:04:61:07:81:65:8a:1b:ed:01:5e:5e:15:
5f:6c:50:c7:d5:ad:79:c5:33:cc:3b:23:81:bc:8a:c0:e7:cf:
2b:ac:0a:58:a3:a0:9c:61:8c:eb:8a:76:6d:f2:0b:57:f6:69:
fa:20:7d:bd:1c:36:7d:97:84:59:a3:9e:0b:0b:99:f9:f4:c4:
51:76:04:9a:72:4d:15:25:9a:2b:17:27:1f:f9:f8:9d:cc:50:
f9:f0:66:53:71:c1:f0:09:b9:d1:b9:e2:6f:6d:20:af:83:dd:
30:cd:08:ed:4e:83:7e:c0:5c:0f:62:85:e6:ae:bb:8d:d1:c3:
e8:b4:34:d0:05:f8:4a:a8:bf:8e:e8:05:8c:37:45:4a:30:e5:
9c:e1:79:f2:12:76:ff:ce:e5:4f:40:14:c1:1d:28:38:e4:a8:
01:4a:ef:78:ca:a6:f3:26:6f:ba:bb:52:a8:36:e7:be:9f:4e:
69:74:6d:9b:3d:55:50:b0:73:cd:17:6d:cd:e6:15:f1:40:5b:
cd:9f:4b:e3:f5:68:e7:94:27:e3:b2:b8:f3:6e:66:da:c3:0f:
96:1e:ab:ff:d4:e6:22:2a:2e:eb:ef:37:c0:80:19:62:75:7a:
23:03:5a:ce:df:49:37:69:b4:b8:29:69:dd:d7:09:6a:5e:e9:
4b:5f:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org