Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1DD783D6348111EF85EEE06B762E951A.roa
File: 1DD783D6348111EF85EEE06B762E951A.roa (raw, json)
Hash identifier: 50EqUh+Tu7DwZ97LyAjkfdToa2rRJt6Mq7nkb8ChWTc=
Subject key identifier: DE:35:38:6C:C6:2D:F2:1D:6E:AF:A1:79:D8:98:28:BD:93:40:7F:1A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 112B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1DD783D6348111EF85EEE06B762E951A.roa
Signing time: Thu 27 Jun 2024 12:31:03 +0000
ROA not before: Thu 27 Jun 2024 12:30:59 +0000
ROA not after: Sat 27 Jun 2026 12:30:59 +0000
asID: 9009
IP address blocks: 102.165.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 27 12:30:59 2024 GMT
Not After : Jun 27 12:30:59 2026 GMT
Subject: CN=667d5b87-0a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:be:b3:84:47:1e:73:92:28:c0:31:b0:b8:
d0:40:79:23:5f:bc:af:0b:5a:ba:3d:bd:b3:00:66:
3e:84:94:a3:b3:bf:33:8f:75:7e:c3:54:00:28:33:
04:3e:9a:3c:48:87:6a:e3:5c:e0:28:28:b0:6e:0f:
eb:4c:0b:ab:12:72:ba:de:b4:f4:f8:53:a2:21:d1:
c7:2a:b4:07:fc:79:a0:11:56:b1:39:8b:df:29:81:
4d:02:de:10:ea:4a:6c:dd:4c:1f:ac:05:cb:ca:b3:
20:3a:c2:14:c0:59:6b:4f:d3:b5:c6:a8:2b:e2:e6:
48:19:b7:a5:ec:ad:2c:1c:2f:2d:0f:16:30:5f:ed:
88:f7:d7:6c:ef:7b:d0:e6:93:6d:f4:9a:76:60:64:
71:d8:a4:e9:e5:fe:d0:84:e1:2d:da:f4:53:1f:8f:
da:80:b5:4b:f1:56:70:8b:3b:47:bd:46:2d:20:45:
7d:c7:32:80:f8:95:d1:17:42:db:e8:7c:99:c6:ca:
07:64:22:6a:5a:aa:f5:92:6a:0b:ad:e6:1d:8b:83:
35:cd:af:aa:05:71:1a:6c:58:35:dc:23:2e:5e:59:
e0:54:60:2a:0c:3c:07:5f:6c:a1:ef:32:46:ac:7c:
0d:dc:49:ed:db:1a:39:cd:98:cb:b7:84:29:47:4b:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:38:6C:C6:2D:F2:1D:6E:AF:A1:79:D8:98:28:BD:93:40:7F:1A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1DD783D6348111EF85EEE06B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.22.0/24
Signature Algorithm: sha256WithRSAEncryption
45:80:4d:db:dd:99:49:88:cd:fc:62:55:05:fc:67:c6:a0:df:
a4:ae:0b:0f:f7:d1:08:ab:4c:a4:3a:bb:f2:db:8f:d6:76:a7:
73:11:66:6b:fc:b4:f6:5d:a5:7f:96:0f:1a:b6:85:9a:d6:39:
97:74:9c:51:c1:65:bd:a7:71:4e:a4:c6:77:2c:0c:e0:e5:68:
56:01:5f:51:4b:27:60:61:0a:b9:a6:ed:40:e8:4c:b7:33:c2:
d6:61:5a:43:59:f0:88:cc:54:4a:5f:5a:de:fc:01:e3:52:c1:
54:f7:96:13:10:78:88:87:e9:01:7a:ef:57:59:6f:48:6a:d4:
c2:71:5b:48:f6:6f:b3:ee:34:6b:96:42:59:81:d8:b6:0c:58:
e3:98:cb:5a:38:54:57:fc:2d:cb:5d:ad:f1:51:fa:d2:04:bf:
b3:95:67:ca:20:c9:0c:56:8e:a1:3d:c5:3f:94:19:77:4c:db:
b0:28:f6:6d:52:ec:dc:1b:78:31:3c:80:dc:eb:8d:0a:e6:fd:
95:49:2d:3f:14:8e:e0:b6:a9:cc:01:21:c5:be:02:a2:b0:da:
43:92:0c:f1:e5:78:ca:97:56:85:32:ee:65:54:7a:2a:17:31:
75:1b:73:65:13:94:c3:34:5a:2d:f2:ec:5b:cd:05:c7:00:9b:
2d:85:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:57 2024 by rpki-client on console-fra.rpki-client.org