Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F1F9E240E86311EEA9C85279775412E6.roa
File: F1F9E240E86311EEA9C85279775412E6.roa (raw, json)
Hash identifier: pG7+RiNOzT3/S9+O+1DZz8I6qOecFgbU6C8zrwmCcbM=
Subject key identifier: 9A:7C:8D:AD:D8:CB:AB:E2:48:3B:A3:4F:3E:D3:5A:28:96:D4:B2:03
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FF4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F1F9E240E86311EEA9C85279775412E6.roa
Signing time: Fri 22 Mar 2024 15:50:45 +0000
ROA not before: Fri 22 Mar 2024 15:50:42 +0000
ROA not after: Sun 22 Mar 2026 15:50:42 +0000
asID: 29802
IP address blocks: 102.165.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4084 (0xff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 22 15:50:42 2024 GMT
Not After : Mar 22 15:50:42 2026 GMT
Subject: CN=65fda8d5-418a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:ec:c2:98:5d:ea:a3:f6:c5:c3:31:df:63:
72:5f:30:e0:81:2a:d7:62:d1:5e:19:8f:92:7f:b6:
89:a5:09:71:a0:46:a1:5f:36:6c:25:da:8e:a6:c6:
66:62:6f:70:1a:dd:34:5a:92:35:48:34:9c:2d:83:
47:56:75:e1:5d:21:f7:96:79:42:f8:2c:24:84:a6:
47:60:08:03:69:ea:c6:0b:5c:c5:58:d2:6e:0c:23:
93:18:23:62:2a:bb:8c:da:cc:21:91:3f:dc:c6:47:
4b:15:db:ed:a2:71:1d:16:35:20:e3:89:f9:ee:ac:
d9:2a:a1:69:d5:6c:6a:16:bc:df:26:14:65:c2:f7:
66:ce:10:54:c7:79:17:34:12:f8:04:b8:df:4f:74:
4b:b4:2c:df:80:55:d0:e2:e2:7e:98:4c:45:7d:1c:
7c:86:27:9d:e5:57:f6:7d:f8:d1:e9:4d:3d:d6:57:
59:33:72:be:1b:7d:73:52:c6:49:a7:3d:ba:92:42:
46:d6:b0:d0:22:88:72:b2:eb:1c:d5:08:62:d8:1f:
96:03:06:26:99:0f:bc:a7:3b:1b:bd:d8:dd:f8:a7:
52:1f:da:4d:f1:c4:d1:31:54:a1:78:bd:81:b4:32:
f9:ae:98:8b:89:57:9e:0b:cd:4b:25:c9:37:6b:25:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:8D:AD:D8:CB:AB:E2:48:3B:A3:4F:3E:D3:5A:28:96:D4:B2:03
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F1F9E240E86311EEA9C85279775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.2.0/24
Signature Algorithm: sha256WithRSAEncryption
75:90:7e:69:58:74:58:03:d7:e5:6d:b1:76:6d:1c:8f:cd:68:
f3:2e:aa:95:7b:41:9e:1f:d1:19:cc:f3:65:31:93:4c:35:46:
96:12:d8:be:7a:d7:9b:48:be:53:38:a3:48:61:a1:d3:7c:af:
e6:27:53:32:55:49:ed:c2:06:7b:d2:5d:14:1a:d6:05:7e:d0:
9e:ad:ce:53:ed:f1:25:93:7f:08:98:bb:e5:07:99:6c:bf:f3:
24:9f:82:3b:24:84:e7:57:0d:a0:78:cd:38:40:4c:1f:b8:5a:
92:d7:c8:79:b6:98:8f:37:20:3b:ac:a8:fe:a9:fd:ba:f9:66:
ff:de:6f:ef:08:8e:d6:12:cc:39:bc:b8:63:9f:ce:b9:d3:83:
aa:77:7a:d2:77:66:f6:9d:86:f6:3f:76:88:3f:d5:14:bf:00:
b0:36:6c:7b:ed:64:d4:a7:c8:7c:de:36:e6:48:b9:d0:d6:e9:
df:66:af:a0:bc:2b:ab:41:b6:1a:73:7b:01:c8:fe:e6:ff:b6:
d9:82:07:f1:db:fc:ef:d9:28:05:ae:e9:61:b2:49:ae:75:31:
98:9b:41:8a:50:ca:24:ae:22:1c:cf:1a:61:ef:3c:a9:f1:d7:
ed:0c:8d:b2:3f:fd:a6:ac:56:3e:35:fa:8f:2c:80:4a:b7:6d:
43:69:d0:e6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD/QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDAzMjIxNTUwNDJaFw0yNjAzMjIxNTUwNDJaMBgxFjAU
BgNVBAMTDTY1ZmRhOGQ1LTQxOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdWuzCmF3qo/bFwzHfY3JfMOCBKtdi0V4Zj5J/tomlCXGgRqFfNmwl2o6m
xmZib3Aa3TRakjVINJwtg0dWdeFdIfeWeUL4LCSEpkdgCANp6sYLXMVY0m4MI5MY
I2Iqu4zazCGRP9zGR0sV2+2icR0WNSDjifnurNkqoWnVbGoWvN8mFGXC92bOEFTH
eRc0EvgEuN9PdEu0LN+AVdDi4n6YTEV9HHyGJ53lV/Z9+NHpTT3WV1kzcr4bfXNS
xkmnPbqSQkbWsNAiiHKy6xzVCGLYH5YDBiaZD7ynOxu92N34p1If2k3xxNExVKF4
vYG0MvmumIuJV54LzUslyTdrJeYBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmnyN
rdjLq+JIO6NPPtNaKJbUsgMwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0YxRjlFMjQwRTg2MzExRUVBOUM4NTI3OTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpQIwDQYJKoZIhvcNAQEL
BQADggEBAHWQfmlYdFgD1+VtsXZtHI/NaPMuqpV7QZ4f0RnM82Uxk0w1RpYS2L56
15tIvlM4o0hhodN8r+YnUzJVSe3CBnvSXRQa1gV+0J6tzlPt8SWTfwiYu+UHmWy/
8ySfgjskhOdXDaB4zThATB+4WpLXyHm2mI83IDusqP6p/br5Zv/eb+8IjtYSzDm8
uGOfzrnTg6p3etJ3ZvadhvY/dog/1RS/ALA2bHvtZNSnyHzeNuZIudDW6d9mr6C8
K6tBthpzewHI/ub/ttmCB/Hb/O/ZKAWu6WGySa51MZibQYpQyiSuIhzPGmHvPKnx
1+0MjbI//aasVj41+o8sgEq3bUNp0OY=
-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:11 2024 by rpki-client on console-fra.rpki-client.org