Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5D1AE50D0AD11EE84B7EB71775412E6.roa
File: C5D1AE50D0AD11EE84B7EB71775412E6.roa (raw, json)
Hash identifier: hosHEUuztIF2splXSG2ZXRXq4cQWiiMwtv+ctiUUKHY=
Subject key identifier: 36:3F:C5:C9:03:26:4B:93:67:FA:D2:E5:E6:45:C2:4E:EA:8E:6E:93
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F6F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5D1AE50D0AD11EE84B7EB71775412E6.roa
Signing time: Wed 21 Feb 2024 11:38:46 +0000
ROA not before: Wed 21 Feb 2024 11:38:43 +0000
ROA not after: Sat 21 Feb 2026 11:38:43 +0000
asID: 61317
IP address blocks: 102.165.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3951 (0xf6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 11:38:43 2024 GMT
Not After : Feb 21 11:38:43 2026 GMT
Subject: CN=65d5e0c6-db0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:49:8f:92:2a:86:9f:34:3a:22:2e:e4:61:
a9:25:3a:d0:e7:bd:de:e9:4d:fb:bd:17:b4:74:ca:
88:d9:a9:7d:09:a0:19:53:4d:57:d9:4b:af:9b:0b:
5f:85:9f:03:b6:b6:fc:60:c5:1f:62:49:7a:f8:b8:
60:f4:6e:2e:e4:ab:49:93:35:33:99:0b:26:d8:f7:
13:24:f1:be:5d:3e:88:56:33:6c:9b:f6:bc:8d:ee:
31:4c:11:f2:b6:b9:9e:11:f9:47:2f:09:d7:75:28:
31:7c:8f:38:44:03:97:ba:dc:ec:e2:e3:05:a8:94:
15:d3:40:56:ac:a2:54:a1:e7:75:9f:d0:0c:5a:a2:
f9:46:d6:01:20:40:53:e4:26:6b:98:14:42:86:3a:
b9:3d:38:ec:47:e5:3a:e7:33:a8:7f:8a:14:ae:41:
0b:ff:e1:39:c3:74:48:0f:43:de:fd:78:7c:11:8f:
d6:b5:7d:e3:fe:96:d2:8d:ab:af:f5:af:82:d6:fb:
49:78:76:56:f7:7a:36:06:fc:dd:83:72:96:c8:90:
b8:45:b1:49:97:dd:10:6c:be:17:1c:14:b3:ba:f0:
7b:33:11:ea:75:44:f4:4a:8c:85:a2:87:9e:0b:99:
f3:6a:38:e5:96:14:e0:48:3f:78:c6:95:ec:f4:26:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3F:C5:C9:03:26:4B:93:67:FA:D2:E5:E6:45:C2:4E:EA:8E:6E:93
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5D1AE50D0AD11EE84B7EB71775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.19.0/24
Signature Algorithm: sha256WithRSAEncryption
45:84:0b:df:ec:8f:d4:5e:d7:b8:58:04:e2:1c:bb:f2:0c:c0:
51:f9:9a:d0:96:26:46:15:67:4f:2a:b0:69:ab:5a:52:57:27:
7c:e8:e0:de:03:4c:ec:a2:7f:d6:2a:aa:6c:bd:1d:29:cf:65:
75:3a:03:f3:3f:ac:c2:ce:0c:63:84:96:d4:ea:97:c9:ba:fc:
32:73:77:b3:1d:c6:5b:0b:08:84:fa:84:b1:06:5e:ec:9b:7b:
64:3d:61:c1:7e:04:f4:0d:61:90:14:70:07:de:d2:ae:dc:ef:
54:72:9a:74:f9:3e:20:c9:2f:85:6e:98:ee:48:32:d8:b1:75:
ba:83:99:5c:fd:f7:c5:c5:7f:bb:fc:d1:1b:c7:ab:1f:41:bb:
a3:22:e9:f2:5d:f0:29:e8:3a:17:0c:98:80:99:04:9d:ed:b6:
83:c7:00:30:6b:a5:b9:c9:9a:8e:12:60:fb:c0:85:6a:00:b4:
4e:86:41:5a:38:b3:18:64:49:43:f7:4b:6b:64:1b:f9:e6:8b:
6a:bb:b8:79:fc:44:d8:8f:8e:e4:ac:c0:1f:15:9e:ea:be:d2:
f7:69:cb:ab:09:78:29:5a:90:82:dd:f7:ed:8e:40:59:67:72:
04:35:c4:26:69:a9:c2:6d:27:2e:30:a8:e2:3b:9e:c3:33:bb:
15:97:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:58 2024 by rpki-client on console-fra.rpki-client.org