Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/865BDA42E69911EDA9C37F1C4AD9E6FC.roa
File: 865BDA42E69911EDA9C37F1C4AD9E6FC.roa (raw, json)
Hash identifier: I9aVzsIA9q7f/Uc/rOpA3b8sg8heTEd1slH1c5S6w58=
Subject key identifier: CC:DF:24:C8:21:C6:0E:DC:E6:0C:04:09:44:77:5D:6F:1A:F3:A1:0C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B44
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/865BDA42E69911EDA9C37F1C4AD9E6FC.roa
Signing time: Sat 29 Apr 2023 14:24:18 +0000
ROA not before: Sat 29 Apr 2023 14:24:14 +0000
ROA not after: Sat 26 Apr 2025 14:24:14 +0000
asID: 61317
IP address blocks: 102.165.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 29 14:24:14 2023 GMT
Not After : Apr 26 14:24:14 2025 GMT
Subject: CN=644d2892-79e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:5f:07:70:7e:ab:6b:99:5d:ac:c7:b4:b1:
b9:8d:19:27:27:69:09:e5:48:a2:fe:a0:98:45:9e:
00:82:1e:13:62:c6:34:50:3b:33:8e:12:f6:96:46:
fe:c6:fe:69:bb:db:ae:40:cb:15:32:25:db:3e:33:
26:17:16:28:20:3e:df:9f:a6:95:3c:a3:eb:b1:0c:
47:05:72:9c:b7:36:bc:00:c6:53:63:79:4e:f8:db:
5b:03:03:d5:30:5c:c5:9c:57:16:a8:93:ca:dc:1d:
fa:d8:06:08:2c:af:1f:a6:29:5d:96:fa:13:a6:4b:
5f:14:24:8b:f6:17:db:d3:c3:a1:33:88:e0:55:fd:
16:95:ca:51:99:0b:f1:7d:b6:95:94:fd:b1:42:8b:
c0:8c:78:d6:01:1e:50:98:98:3e:6f:81:fd:16:74:
e8:a8:90:13:e8:9f:3d:f4:d2:4f:3e:30:63:2f:32:
54:95:82:b9:8a:8d:6b:a2:e7:5a:44:3c:40:59:8b:
60:0e:20:19:d7:32:91:4b:c4:53:c0:52:71:b4:f2:
07:77:0d:e2:0a:0b:c9:8a:67:1d:60:b8:37:72:c7:
26:b7:90:56:f7:70:b9:df:a3:5c:5f:34:7b:9e:59:
79:af:2e:9d:55:c9:fb:57:f4:33:d1:c2:de:71:d9:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DF:24:C8:21:C6:0E:DC:E6:0C:04:09:44:77:5D:6F:1A:F3:A1:0C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/865BDA42E69911EDA9C37F1C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2e:95:f5:68:7d:81:a5:50:d1:5f:91:cf:6b:6e:ff:7d:74:
72:2d:75:f5:82:72:f7:f2:e4:ac:c7:13:2c:ab:95:5e:2e:9c:
4b:9d:f4:ac:a4:23:1f:c1:1a:ff:1b:70:da:d7:22:2e:a7:19:
d7:12:3a:a4:ec:84:77:63:b1:f2:ab:fc:8f:fc:2c:92:6c:ef:
aa:e7:d0:71:eb:32:b2:a5:1b:4c:33:36:4c:5f:ea:6e:ea:ab:
fb:aa:80:b1:d9:3f:e6:cb:99:41:47:3f:44:92:17:e4:d7:59:
e8:91:4f:1a:24:ea:67:30:ce:ad:73:ef:79:b0:6d:d9:51:62:
88:3e:e5:42:61:06:c3:bc:34:ab:94:f5:7c:a0:c0:42:3c:e6:
fa:7e:3e:cf:e5:dd:b2:aa:2e:dd:6a:51:cb:7c:42:44:9b:0b:
43:fa:5a:50:47:66:9d:79:dd:40:5d:ba:f1:94:5f:00:b6:33:
d4:91:9f:57:a8:00:ff:cd:9d:7d:3e:6e:d1:59:5f:95:1d:f4:
e9:33:a9:5f:36:8a:ff:f0:a0:c7:e8:24:56:b4:07:ff:99:9e:
7f:72:9b:ae:a3:90:92:3c:35:c3:29:98:ae:08:64:e9:bf:94:
34:78:23:11:2a:44:90:58:5e:4c:d2:b7:e7:a6:d6:f0:2b:61:
ed:9b:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org