Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F4A3AE0856411EF97E40FAA762E951A.roa
File: 1F4A3AE0856411EF97E40FAA762E951A.roa (raw, json)
Hash identifier: Jpq+LK5mQUN7Id1DfsRtIxyxLtP7cKyajYcZe7JN/P8=
Subject key identifier: 98:4E:49:AF:21:40:B7:B9:22:A7:E2:E1:F0:CA:B4:9C:08:53:E5:4A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1239
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F4A3AE0856411EF97E40FAA762E951A.roa
Signing time: Tue 08 Oct 2024 10:57:34 +0000
ROA not before: Tue 08 Oct 2024 10:57:30 +0000
ROA not after: Thu 08 Oct 2026 10:57:30 +0000
asID: 212238
IP address blocks: 102.165.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4665 (0x1239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 8 10:57:30 2024 GMT
Not After : Oct 8 10:57:30 2026 GMT
Subject: CN=6705101e-631e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:7b:36:0d:46:18:97:5b:d5:14:5e:81:ac:
a5:73:ec:41:32:6c:18:6f:1d:38:00:80:bd:2f:6a:
73:ff:e6:22:d0:be:00:94:8d:11:b6:d6:bd:08:1d:
a8:1b:7a:2e:1a:a6:fd:8c:ee:11:3e:8b:73:be:d8:
01:f7:82:d6:55:0d:a9:c8:4e:ba:8a:cc:9f:ed:af:
b5:38:da:40:2c:e4:64:a5:2e:f9:19:0d:43:26:52:
4c:58:b2:4a:ff:ad:c9:07:62:d3:de:14:83:82:66:
79:43:23:ba:90:38:8b:fa:bc:22:2a:89:d5:0a:04:
2d:fe:2a:59:f8:ca:14:03:4c:67:87:00:98:3a:ab:
b7:3b:05:6b:72:9e:2f:5c:1c:d6:ca:50:eb:f3:17:
73:30:a0:29:88:5b:18:6d:52:ce:92:49:eb:98:ec:
20:1b:13:aa:8a:f8:37:76:14:47:99:d2:12:e3:ce:
f7:cd:14:e7:5f:2a:70:21:8b:1e:43:9b:7f:46:05:
e1:5d:23:d1:8a:be:72:fe:4c:31:e2:9f:4d:cd:53:
1e:41:0a:f4:68:09:21:b0:ea:c4:83:47:2a:82:03:
d5:77:d3:85:3e:f6:08:94:60:fe:25:64:b4:8c:df:
b0:5c:38:5b:f8:5e:bf:34:54:13:c9:3c:80:fd:01:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:49:AF:21:40:B7:B9:22:A7:E2:E1:F0:CA:B4:9C:08:53:E5:4A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F4A3AE0856411EF97E40FAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.30.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ab:54:b0:ab:5f:f5:f1:d3:c7:a2:fc:20:8e:7d:c8:48:20:
ea:e0:5c:19:31:df:03:d0:c6:fe:18:37:9a:ea:01:40:55:5f:
0e:d4:99:6c:0a:fd:01:c6:42:5a:f7:a8:93:9e:d5:8e:39:5b:
9c:22:48:26:95:82:8c:b1:b7:ed:f4:8c:1c:30:7d:27:d0:21:
92:57:1c:13:11:7c:29:bf:8b:e2:8f:1a:0b:96:9b:41:06:31:
71:5a:8b:a8:5c:9d:45:d8:f9:0b:47:4e:cc:f1:a0:0b:b7:c9:
a6:8a:0e:b1:46:3d:05:1d:3b:f1:cf:60:c2:be:49:fb:73:2b:
7e:4d:7a:5d:ee:e7:7b:07:67:c7:08:dd:14:ac:59:ba:d6:47:
be:09:33:1e:65:91:95:e6:d0:fd:19:cb:7f:2f:02:75:1a:3a:
aa:7c:70:ea:fc:44:e9:61:ed:3e:70:6b:7a:07:2a:c9:af:0c:
1b:4f:f6:7c:26:99:0c:22:b3:ba:57:72:1a:5e:50:92:84:55:
bf:b0:c3:00:3d:6f:db:e4:73:79:49:e6:39:68:33:69:76:7a:
db:f0:91:f9:1c:ca:e7:f7:66:3b:c3:54:cf:d1:09:dd:91:35:
06:ce:d9:55:a4:50:53:67:da:70:ab:38:2a:cf:27:49:cc:91:
c5:86:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:15 2024 by rpki-client on console-fra.rpki-client.org