Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B45AE87C35B611EE9C2FE2784AD9E6FC.roa
File: B45AE87C35B611EE9C2FE2784AD9E6FC.roa (raw, json)
Hash identifier: mjWvTZspXqmopSHNl8Vku0nJwxy+N1/pSd+hLwPDiO4=
Subject key identifier: B6:98:6E:30:FD:7A:86:11:31:6C:BC:B3:03:F5:FC:0E:67:0A:78:D4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CB6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B45AE87C35B611EE9C2FE2784AD9E6FC.roa
Signing time: Tue 08 Aug 2023 06:42:12 +0000
ROA not before: Tue 08 Aug 2023 06:42:03 +0000
ROA not after: Fri 08 Aug 2025 06:42:03 +0000
asID: 61317
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 8 06:42:03 2023 GMT
Not After : Aug 8 06:42:03 2025 GMT
Subject: CN=64d1e3c4-face
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:fe:2c:d5:ed:c0:9e:8d:6b:e1:80:b1:93:
d7:76:02:50:bb:45:50:27:12:73:36:85:9a:51:b2:
32:54:1c:c6:72:5f:03:be:de:74:53:0b:84:ed:62:
fd:0b:0d:64:1f:1f:e1:2a:b9:43:19:69:28:5c:de:
6b:02:95:9e:d3:68:e0:d9:10:6c:53:46:39:24:92:
aa:1e:94:95:0c:e6:25:3e:2e:4f:b5:53:93:a9:be:
45:d8:78:21:f3:6b:4e:a9:a8:92:09:28:0b:69:a2:
41:64:c0:83:18:3c:8b:7c:e6:8a:a2:98:cc:5b:2a:
b4:2a:d4:19:ee:24:4c:69:1b:2c:e0:ce:84:cc:8c:
4c:fe:f6:22:03:59:76:7d:a7:a4:f0:f8:26:e6:ec:
fb:14:fd:e5:a6:20:f1:db:59:12:14:6b:2f:e4:f6:
d2:a7:3a:a3:d2:5f:a4:6e:80:13:be:f7:ec:c4:9e:
a6:83:04:31:2f:c8:c0:c2:20:3c:35:c9:04:4c:f7:
76:df:91:b6:eb:ae:9f:b3:a3:95:c3:b1:74:21:ad:
56:50:7c:6b:fa:dd:0d:b9:a2:18:da:3c:98:1e:bf:
e8:36:aa:ae:06:5a:79:d7:ce:bf:4e:9b:cc:9f:61:
15:b7:e3:ab:3f:6e:43:26:09:70:80:2c:08:db:d9:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:6E:30:FD:7A:86:11:31:6C:BC:B3:03:F5:FC:0E:67:0A:78:D4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B45AE87C35B611EE9C2FE2784AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:02:ba:d2:1d:31:50:87:d8:8c:21:cf:4e:ee:56:20:24:55:
5a:38:2b:84:c4:c7:c2:4f:cd:5a:32:d3:ac:5c:ee:77:72:bf:
f9:26:9a:62:31:fb:bb:4a:72:68:ee:95:d6:03:e7:ec:bc:e4:
63:da:9a:7c:a8:f3:d1:aa:2f:fd:6a:6e:d8:c0:bc:49:02:12:
a5:f5:36:8e:8d:d5:de:7d:50:69:94:c3:ed:e4:63:46:04:b0:
68:85:a9:24:63:35:4b:5d:1c:56:c1:4f:1a:f3:8c:9c:dd:65:
87:2b:88:30:24:08:39:2c:82:e7:2a:81:f4:dd:2d:ae:b2:77:
e3:07:15:43:56:3b:03:51:a4:e7:b5:44:df:24:15:b5:97:c0:
5d:20:7f:8c:cd:53:98:8e:3e:45:f5:70:a5:49:eb:43:95:dd:
2b:ca:b5:6f:47:ab:7e:f0:47:53:05:5b:6d:71:c9:f3:bb:93:
06:51:03:d3:f6:cb:a2:25:6f:70:24:95:2e:65:32:7b:5f:24:
f8:7a:47:3f:d5:23:78:fd:ac:97:5a:5d:9c:00:2d:01:94:aa:
9c:b4:a7:a9:76:9e:00:2f:72:c2:30:7b:54:e2:ca:af:f5:f1:
36:3d:c6:39:24:1e:85:84:b2:b3:f9:6a:54:cd:39:93:d1:16:
6b:72:c8:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA4MDgwNjQyMDNaFw0yNTA4MDgwNjQyMDNaMBgxFjAU
BgNVBAMTDTY0ZDFlM2M0LWZhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeaP4s1e3Ano1r4YCxk9d2AlC7RVAnEnM2hZpRsjJUHMZyXwO+3nRTC4Tt
Yv0LDWQfH+EquUMZaShc3msClZ7TaODZEGxTRjkkkqoelJUM5iU+Lk+1U5OpvkXY
eCHza06pqJIJKAtpokFkwIMYPIt85oqimMxbKrQq1BnuJExpGyzgzoTMjEz+9iID
WXZ9p6Tw+Cbm7PsU/eWmIPHbWRIUay/k9tKnOqPSX6RugBO+9+zEnqaDBDEvyMDC
IDw1yQRM93bfkbbrrp+zo5XDsXQhrVZQfGv63Q25ohjaPJgev+g2qq4GWnnXzr9O
m8yfYRW346s/bkMmCXCALAjb2fYPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtphu
MP16hhExbLyzA/X8DmcKeNQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0I0NUFFODdDMzVCNjExRUU5QzJGRTI3ODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgb4wDQYJKoZIhvcNAQEL
BQADggEBALkCutIdMVCH2Iwhz07uViAkVVo4K4TEx8JPzVoy06xc7ndyv/kmmmIx
+7tKcmjuldYD5+y85GPamnyo89GqL/1qbtjAvEkCEqX1No6N1d59UGmUw+3kY0YE
sGiFqSRjNUtdHFbBTxrzjJzdZYcriDAkCDksgucqgfTdLa6yd+MHFUNWOwNRpOe1
RN8kFbWXwF0gf4zNU5iOPkX1cKVJ60OV3SvKtW9Hq37wR1MFW21xyfO7kwZRA9P2
y6Ilb3AklS5lMntfJPh6Rz/VI3j9rJdaXZwALQGUqpy0p6l2ngAvcsIwe1Tiyq/1
8TY9xjkkHoWEsrP5alTNOZPRFmtyyDQ=
-----END CERTIFICATE-----
Generated at Sat May 4 02:37:58 2024 by rpki-client on console-fra.rpki-client.org