Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BE6D657CE86411EE897EEA7E775412E6.roa
File: BE6D657CE86411EE897EEA7E775412E6.roa (raw, json)
Hash identifier: TWbwNQWar0eKF4ZnlAEWENLFFhj4QkPoSuuQ0RfKsgI=
Subject key identifier: 75:11:49:C4:48:75:54:38:F4:35:3B:FD:1B:FF:28:A4:39:48:20:3C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FF8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BE6D657CE86411EE897EEA7E775412E6.roa
Signing time: Fri 22 Mar 2024 15:56:28 +0000
ROA not before: Fri 22 Mar 2024 15:56:25 +0000
ROA not after: Sun 22 Mar 2026 15:56:25 +0000
asID: 29802
IP address blocks: 102.165.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4088 (0xff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 22 15:56:25 2024 GMT
Not After : Mar 22 15:56:25 2026 GMT
Subject: CN=65fdaa2c-c10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:f0:cf:cd:fb:c7:9c:89:74:12:27:cb:a1:
c4:99:3f:67:ff:1f:fa:6d:b2:51:d9:d8:b7:ef:96:
81:29:4e:0e:37:0d:5e:f2:43:11:22:08:1a:65:fe:
4a:f4:bb:28:98:bf:54:89:9d:4e:45:d0:8b:16:af:
79:5e:9d:57:c6:71:8a:ee:a2:2f:78:ba:45:6d:39:
09:8b:03:30:b8:8e:31:62:40:14:1e:1d:dc:75:cb:
de:ac:61:05:cb:24:4a:c3:ba:69:75:cc:45:fa:4d:
c7:21:07:e0:4c:72:a3:80:fe:b3:68:27:46:b6:3f:
88:9c:3f:c7:bc:2d:d3:fb:cc:45:f6:fe:b9:4d:c8:
d7:09:b1:29:67:cb:d1:55:b5:fd:7a:ca:ac:9e:84:
7f:b6:ec:b1:3b:52:47:c6:ea:9c:60:15:60:16:6a:
e3:74:a3:29:9f:5b:19:cc:1c:9f:56:ce:2f:c6:a7:
f0:25:c8:28:e5:0c:27:55:a1:fc:df:e1:03:fa:3e:
bf:db:c7:5e:1c:7a:c7:21:4e:1c:78:a6:67:7a:c2:
29:61:17:31:f5:f9:b1:fd:25:6e:26:4b:bb:c6:60:
ca:30:e6:07:e5:81:e9:e6:6e:4e:87:2c:a4:e6:f8:
a7:e2:c4:af:bb:5c:85:3d:73:39:19:37:ee:fb:16:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:49:C4:48:75:54:38:F4:35:3B:FD:1B:FF:28:A4:39:48:20:3C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BE6D657CE86411EE897EEA7E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:82:55:82:3e:53:c6:ac:69:14:62:6f:83:ca:1b:f9:77:b2:
1a:d9:b5:bd:31:29:55:cf:a9:6c:f1:d6:92:b8:80:16:95:9d:
c7:6c:ee:b0:96:03:41:39:8e:5d:dd:fb:e6:b6:74:64:13:4c:
7b:59:b2:8b:04:83:cb:07:5f:cd:d5:95:29:08:b5:fb:c8:37:
66:ff:c8:a3:7a:25:1e:e6:83:42:e6:c7:ae:05:f4:f1:52:d3:
98:6a:a9:ec:b8:6c:35:25:a7:f4:ca:22:41:bc:4a:bc:0c:1a:
7c:06:c0:42:2d:2f:a1:bf:87:de:11:21:4a:e1:cd:a1:25:3a:
b5:c3:a2:a5:c7:38:81:71:25:cb:74:a2:f6:4e:9c:b4:78:03:
61:b2:9d:4c:b0:6f:a5:30:a8:cd:e4:3f:e8:4b:48:65:48:e3:
68:09:4c:fb:3f:be:7e:44:19:42:30:50:3b:64:80:cb:26:a0:
1a:ca:77:b4:4c:5c:d8:47:c0:15:f0:8e:f7:c6:12:d1:2c:01:
d4:72:85:d8:5e:a7:ab:11:90:fb:b3:e7:06:b3:66:a8:48:ff:
1a:ae:c0:e2:88:50:2d:6b:51:2e:58:20:0d:be:b6:c8:2e:3f:
2a:0d:9c:b9:bc:76:be:45:a6:91:e2:fe:c2:98:70:f5:b4:ec:
a6:89:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org