Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BEC35B6ED0211EEA833F1A2775412E6.roa
File: 0BEC35B6ED0211EEA833F1A2775412E6.roa (raw, json)
Hash identifier: U8gMVpDW6U7YyZEC6JJNXIQIudfip2K9m0CpZMqde94=
Subject key identifier: 01:E3:B3:46:6F:9D:E8:09:54:F6:DE:4C:0D:A5:F7:18:3E:35:BB:EB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 102A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BEC35B6ED0211EEA833F1A2775412E6.roa
Signing time: Thu 28 Mar 2024 12:52:34 +0000
ROA not before: Thu 28 Mar 2024 12:52:31 +0000
ROA not after: Sat 28 Mar 2026 12:52:31 +0000
asID: 14445
IP address blocks: 102.165.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4138 (0x102a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 28 12:52:31 2024 GMT
Not After : Mar 28 12:52:31 2026 GMT
Subject: CN=66056812-f177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:c2:2f:05:af:70:4f:c5:f1:81:c5:0f:95:
68:4b:1e:59:5f:58:53:a9:f8:23:d9:da:c0:9a:13:
d3:14:e0:5b:4c:d7:25:2c:20:8d:84:8c:9b:2c:d0:
b2:5f:79:03:c6:c9:7e:da:50:b8:53:5a:d7:a5:1a:
3a:82:0d:13:c4:82:db:af:7a:21:a1:dd:e3:ad:a3:
b0:1c:a3:4c:9d:4a:57:52:96:b0:ac:6d:a4:47:6a:
4a:fd:1d:a1:14:c9:40:9e:6a:92:dc:75:e4:fb:66:
c4:b8:67:03:d5:51:c5:3d:eb:6c:06:73:3c:63:49:
bb:77:b1:85:80:ee:70:4e:e7:ac:2f:a5:3f:fc:08:
7d:af:dc:cb:5c:ae:db:46:17:d9:e7:7f:0f:14:51:
82:a0:ff:aa:23:40:7d:e7:60:f6:e1:58:2e:b3:ae:
0e:b8:a3:8b:d4:a0:e3:df:8c:a5:17:12:18:5d:47:
07:b4:d3:41:a8:d4:b6:16:36:8a:64:a6:fc:29:30:
0f:d7:d2:38:13:14:32:b6:79:0a:fa:25:4a:92:54:
16:78:11:8e:b5:3f:30:ac:94:5c:d4:42:1a:01:9f:
f5:58:3a:b5:ab:d1:8d:ef:75:60:d7:c6:6b:31:4f:
22:20:2c:93:23:12:d7:6e:2a:ff:d4:93:be:3c:80:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:B3:46:6F:9D:E8:09:54:F6:DE:4C:0D:A5:F7:18:3E:35:BB:EB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BEC35B6ED0211EEA833F1A2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.12.0/24
Signature Algorithm: sha256WithRSAEncryption
72:53:be:33:2c:01:6d:4f:38:eb:23:5a:09:de:49:dc:0b:fd:
26:53:44:7e:aa:b2:a9:fb:06:45:a8:d6:69:55:31:4d:02:b6:
56:b4:56:50:0a:9d:3e:02:a2:97:5c:d6:a2:cd:18:c4:66:0d:
3b:80:4a:d6:12:09:70:f4:d2:ff:5a:d4:9c:e6:7b:5b:58:b6:
f3:51:15:c8:95:f8:d2:1e:15:c4:e2:05:7c:6e:af:8a:62:c6:
44:ca:c5:51:29:58:49:7b:2a:88:30:08:cd:a5:2e:b5:f5:fd:
fa:cc:dc:6f:b4:53:cd:8d:d7:59:c3:93:8e:d1:7c:6e:f7:7e:
2d:83:73:be:05:83:4c:47:fb:5c:27:62:f5:61:80:91:07:eb:
fd:ad:ec:a1:65:d5:d8:00:36:7d:02:55:14:8b:b4:8f:58:39:
09:d0:66:06:1a:40:ae:01:84:26:e7:ae:a6:f4:2c:b8:df:81:
ee:00:f8:df:d9:6a:b6:f3:18:98:e9:df:19:36:45:52:d8:b9:
a3:f1:08:0f:e6:02:10:60:6b:87:33:06:a0:74:bd:84:a2:cf:
3e:16:88:d8:e4:f0:78:9f:9a:44:37:e7:39:3a:9a:0a:f2:e0:
a7:54:4b:6d:a1:dd:80:d8:86:b6:f8:ff:d9:ea:b2:84:02:60:
82:ae:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org