Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/27FACDE6B52911EEB0444E77775412E6.roa
File: 27FACDE6B52911EEB0444E77775412E6.roa (raw, json)
Hash identifier: nau7MtDpHNO1FImzD1RpTGfATR0ii/z5tt7CUBcWtrg=
Subject key identifier: 28:BA:33:10:BC:CB:4D:85:99:1B:47:96:78:F1:36:89:C1:21:21:2C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F07
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/27FACDE6B52911EEB0444E77775412E6.roa
Signing time: Wed 17 Jan 2024 11:11:26 +0000
ROA not before: Wed 17 Jan 2024 11:11:23 +0000
ROA not after: Sat 17 Jan 2026 11:11:23 +0000
asID: 26042
IP address blocks: 102.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3847 (0xf07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 17 11:11:23 2024 GMT
Not After : Jan 17 11:11:23 2026 GMT
Subject: CN=65a7b5de-08ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:e8:04:50:45:30:3f:0c:8f:4f:fb:4f:37:
0f:32:d4:4e:71:50:69:5a:65:80:db:c4:e8:86:21:
22:d8:39:6c:f8:93:16:41:04:b0:21:97:d2:32:b0:
cb:11:87:3c:c3:0b:09:c5:ad:16:10:4d:3f:ba:ce:
cb:53:df:09:b4:92:5f:aa:fe:07:a0:8c:91:37:88:
c5:15:08:a9:d0:1e:78:3a:5a:c1:66:0c:66:8b:fd:
a5:95:3f:7e:37:a6:e2:63:eb:f0:a6:41:85:00:34:
e5:72:aa:0a:37:aa:6a:1a:92:22:db:47:15:cf:67:
2a:a8:f0:d0:95:d3:94:e7:62:58:7c:5a:b6:2e:82:
67:b6:fd:de:05:9d:79:1a:98:00:31:48:c5:6a:98:
f4:90:b5:23:e5:97:1e:7a:2d:f7:1a:5d:11:4c:e6:
ae:b0:36:94:2a:04:70:2f:bd:cb:b4:3b:58:1f:3e:
4d:a3:e3:09:c2:40:17:10:ce:b0:5c:c0:ba:b2:7e:
ec:10:11:6c:c7:3e:c3:e8:99:59:12:98:50:ef:7b:
f4:82:83:ed:88:80:af:75:57:e1:9a:b9:2d:d4:a0:
97:3c:49:54:09:19:63:9a:a1:cd:c2:ab:f1:fd:16:
ab:bb:d8:4e:05:8f:c3:96:2f:9b:dd:ea:24:e4:a1:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:33:10:BC:CB:4D:85:99:1B:47:96:78:F1:36:89:C1:21:21:2C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/27FACDE6B52911EEB0444E77775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:90:54:f5:68:3a:f3:58:30:3a:9b:81:b2:d1:ea:6a:da:da:
19:12:0b:24:93:a0:b8:7b:bb:57:c7:2f:3f:cf:90:06:6f:db:
bc:2f:3e:11:5f:81:aa:1d:e8:a8:94:a3:d0:bb:16:eb:89:57:
81:db:79:a8:65:45:e8:1c:3c:6a:63:dd:fa:70:38:f0:fc:4b:
c0:c8:9d:57:fb:85:b3:01:f7:b9:14:cd:7e:08:99:91:05:a0:
b1:75:d5:12:53:7a:23:7b:bf:04:bb:63:05:2a:36:47:fb:f5:
e2:0a:c6:47:97:32:20:3d:fe:9a:ac:74:0c:c7:2b:43:52:79:
ec:f9:79:5a:d5:2a:d4:61:2c:56:e6:74:2d:c0:98:ae:69:7c:
2d:03:4a:06:b9:b3:a9:35:18:4b:f9:09:5c:8c:d4:f3:32:21:
a5:41:de:72:0b:30:46:57:ae:7c:68:2c:35:2b:53:d4:a4:3f:
80:e5:b1:4d:a6:7f:8c:4b:09:97:8e:09:25:04:88:f4:74:56:
cf:ac:bf:f4:f4:e7:9d:e1:80:09:cd:d5:11:fc:3f:28:78:7d:
c0:9b:23:42:bd:f0:3c:2d:d0:b7:f5:92:6f:13:0d:a0:32:06:
c8:e3:90:ea:7e:94:14:37:cf:e1:e7:c1:b3:34:82:a8:3b:04:
e4:b9:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org