Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBE6D16EEB9111EE8CE8295F775412E6.roa
File: BBE6D16EEB9111EE8CE8295F775412E6.roa (raw, json)
Hash identifier: N1v8sOpB29La9I04zRifevCgAkfn1JUKrE5EHioIqjM=
Subject key identifier: 74:51:20:60:24:4D:0D:E8:F3:76:52:71:8B:C5:23:8C:19:09:55:7A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1022
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBE6D16EEB9111EE8CE8295F775412E6.roa
Signing time: Tue 26 Mar 2024 16:56:05 +0000
ROA not before: Tue 26 Mar 2024 16:56:01 +0000
ROA not after: Sat 28 Mar 2026 16:56:01 +0000
asID: 29802
IP address blocks: 102.165.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4130 (0x1022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 26 16:56:01 2024 GMT
Not After : Mar 28 16:56:01 2026 GMT
Subject: CN=6602fe25-913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:d8:5c:5a:1f:a2:ab:a2:3b:4b:d3:d4:a8:
b5:5d:86:f6:8e:14:35:8e:f3:77:eb:00:af:30:e1:
4e:af:33:dc:08:a2:a8:49:e6:3f:fa:b5:7d:1d:aa:
ba:cf:57:63:e9:e6:e7:cf:62:6c:9a:ee:a0:8b:4d:
7c:32:24:f3:80:fa:6a:4b:15:60:09:b9:98:fa:0e:
7e:04:01:3f:56:76:0b:15:58:63:77:11:13:53:1a:
70:06:8a:70:26:5e:8c:33:51:b4:2b:e5:88:9f:6b:
c2:3a:82:8f:4d:62:96:1c:09:47:c4:6e:37:7c:83:
f9:39:02:f5:36:f4:5f:9e:6b:60:98:8d:20:d8:ad:
f4:c2:20:81:3e:29:be:d1:b3:61:11:80:d1:e4:11:
ab:bb:4d:52:fc:a5:92:07:28:02:7a:f0:94:ec:3b:
84:6b:f6:59:86:5c:ff:20:7f:b7:83:47:55:20:b3:
a5:eb:c2:17:96:7e:89:1b:ac:75:87:ae:ff:8a:8c:
a8:9e:ea:25:9e:c1:9e:5d:10:1f:bd:2d:a0:14:43:
9b:fc:0f:6b:aa:de:2c:09:2d:82:71:03:44:9a:b8:
83:3d:96:04:f8:94:db:bf:0b:cc:90:ca:2d:5a:cb:
7a:33:d5:01:26:c4:68:1d:ab:06:f2:b7:50:4c:23:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:51:20:60:24:4D:0D:E8:F3:76:52:71:8B:C5:23:8C:19:09:55:7A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBE6D16EEB9111EE8CE8295F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d9:e1:81:51:59:a1:60:b9:ea:fc:37:04:94:60:ca:98:6c:
af:c2:e8:8e:e4:58:c2:24:a0:73:56:a3:41:be:52:fd:4c:e5:
9e:fa:8d:03:72:e0:d9:29:a3:e3:28:93:d2:45:70:a3:41:37:
e1:db:28:5c:47:24:ee:86:49:a7:9e:f0:f9:0a:49:0d:0b:45:
94:62:8c:6e:35:2c:83:78:87:87:03:64:a7:b2:e1:07:e1:0c:
04:b5:a6:06:b7:b4:e6:8b:1e:32:17:39:e4:75:10:48:f8:dd:
da:8b:6a:ed:2d:d4:8d:1f:15:53:69:65:2d:5b:d5:ba:1f:0b:
c6:e0:97:43:d6:6e:7c:fd:b3:5d:9b:f8:df:03:a6:ce:ff:03:
e6:a2:ce:9c:d0:88:7a:ac:4f:7c:b4:73:37:cc:58:12:c9:fc:
e5:f0:e4:f4:92:bb:58:e3:6d:72:6f:8c:8e:7e:94:82:a8:13:
0a:a5:39:dc:f8:5b:47:2d:0a:55:a1:90:72:6e:22:db:46:f0:
a4:6c:68:72:df:db:18:3f:65:ea:39:ce:07:d5:21:7d:94:ca:
5c:81:da:1b:36:4d:c1:94:dd:e7:22:ac:43:f3:14:49:e5:5f:
dc:31:40:73:2d:35:f7:3c:f7:27:24:37:9b:91:ca:fa:3e:5f:
3a:fa:af:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICECIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDAzMjYxNjU2MDFaFw0yNjAzMjgxNjU2MDFaMBgxFjAU
BgNVBAMTDTY2MDJmZTI1LTkxM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkfNhcWh+iq6I7S9PUqLVdhvaOFDWO83frAK8w4U6vM9wIoqhJ5j/6tX0d
qrrPV2Pp5ufPYmya7qCLTXwyJPOA+mpLFWAJuZj6Dn4EAT9WdgsVWGN3ERNTGnAG
inAmXowzUbQr5Yifa8I6go9NYpYcCUfEbjd8g/k5AvU29F+ea2CYjSDYrfTCIIE+
Kb7Rs2ERgNHkEau7TVL8pZIHKAJ68JTsO4Rr9lmGXP8gf7eDR1Ugs6XrwheWfokb
rHWHrv+KjKie6iWewZ5dEB+9LaAUQ5v8D2uq3iwJLYJxA0SauIM9lgT4lNu/C8yQ
yi1ay3oz1QEmxGgdqwbyt1BMI4lDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdFEg
YCRNDejzdlJxi8UjjBkJVXowHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0JCRTZEMTZFRUI5MTExRUU4Q0U4Mjk1Rjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpQ8wDQYJKoZIhvcNAQEL
BQADggEBAL3Z4YFRWaFguer8NwSUYMqYbK/C6I7kWMIkoHNWo0G+Uv1M5Z76jQNy
4Nkpo+Mok9JFcKNBN+HbKFxHJO6GSaee8PkKSQ0LRZRijG41LIN4h4cDZKey4Qfh
DAS1pga3tOaLHjIXOeR1EEj43dqLau0t1I0fFVNpZS1b1bofC8bgl0PWbnz9s12b
+N8Dps7/A+aizpzQiHqsT3y0czfMWBLJ/OXw5PSSu1jjbXJvjI5+lIKoEwqlOdz4
W0ctClWhkHJuIttG8KRsaHLf2xg/Zeo5zgfVIX2UylyB2hs2TcGU3ecirEPzFEnl
X9wxQHMtNfc89yckN5uRyvo+Xzr6r7M=
-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org