Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/328DBFBC903D11EF9DC70AA8762E951A.roa
File: 328DBFBC903D11EF9DC70AA8762E951A.roa (raw, json)
Hash identifier: AuhWkrVPZXzgK9Wl9VWihzLNbA1OQxBvqvlTj7PU4YQ=
Subject key identifier: 9F:62:21:6D:79:91:E4:E8:70:D5:C9:CE:B9:9E:31:6D:68:74:F5:CB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 125C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/328DBFBC903D11EF9DC70AA8762E951A.roa
Signing time: Tue 22 Oct 2024 06:16:39 +0000
ROA not before: Tue 22 Oct 2024 06:16:35 +0000
ROA not after: Thu 22 Oct 2026 06:16:35 +0000
asID: 212238
IP address blocks: 102.165.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4700 (0x125c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 06:16:35 2024 GMT
Not After : Oct 22 06:16:35 2026 GMT
Subject: CN=67174347-5fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:4e:34:08:2a:91:8a:08:11:3b:d8:ac:6a:
98:ad:07:44:d7:a9:37:23:ac:f8:46:e0:38:bd:fb:
86:15:ad:8b:fa:ec:28:d1:dc:b4:3d:51:91:ca:09:
a2:d6:d6:27:b0:6c:db:e8:f4:61:5a:f4:2e:fa:ba:
c0:ad:70:d5:b6:5f:bb:16:e8:a5:f1:5a:03:d4:6b:
2c:9c:8d:00:c7:1a:cf:54:69:39:73:c4:c3:c1:d7:
8a:1b:8c:e6:d9:e7:3c:70:23:5e:e5:0e:49:6d:88:
91:a3:bb:01:5c:11:a6:43:64:92:c6:d0:64:d9:4e:
41:b8:a4:e7:89:12:e1:c9:03:e8:1a:c1:d6:40:90:
9a:da:c2:67:1e:15:23:2b:2f:4a:13:21:3c:1a:07:
35:9b:55:bd:00:67:c2:68:bf:bf:44:1e:bb:4b:08:
b9:0e:93:90:9d:6b:c0:3d:99:d4:15:b6:ba:42:a2:
ea:7e:29:92:5b:16:90:01:e8:ef:3f:d8:7c:44:bd:
c3:6c:5f:5c:da:40:51:99:b4:ca:74:f4:f4:3c:dc:
1b:5a:74:b3:20:0f:23:e4:54:50:5a:8b:8d:6e:5b:
db:86:72:a3:db:b2:fa:c6:31:71:63:91:1e:cd:68:
42:ea:58:66:33:55:5f:1e:db:12:d6:81:2b:50:f3:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:21:6D:79:91:E4:E8:70:D5:C9:CE:B9:9E:31:6D:68:74:F5:CB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/328DBFBC903D11EF9DC70AA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.33.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ae:58:ff:3e:43:d2:81:c4:af:2c:29:f4:07:d0:b6:3c:71:
ad:7b:17:2e:86:1f:ea:53:99:72:e7:7f:6b:52:ce:45:9c:7d:
03:27:a1:f2:fc:f4:f9:cf:1a:d2:a9:0c:81:c4:9e:69:ba:e2:
b8:fd:7f:93:18:42:5f:2a:b7:58:e0:46:5f:36:7b:c5:6c:24:
60:0f:10:42:48:69:5e:65:fa:10:b5:c3:52:72:14:6e:15:a1:
89:4d:54:88:36:4f:50:35:c3:b3:d3:a4:1f:29:db:95:98:b2:
c7:c8:82:13:99:af:b0:56:fd:e0:8b:a7:e0:0c:5b:c9:e8:25:
27:53:21:a2:da:8f:1f:ba:45:5b:73:8b:16:68:92:1d:ac:50:
39:ea:90:29:fc:38:51:2a:be:ca:6f:f0:08:7c:c9:ba:df:73:
ac:70:fd:38:c3:e7:94:e2:25:94:b8:af:0a:f5:5a:36:69:2c:
16:c7:45:d9:14:8c:0a:ef:ce:dc:4e:d1:14:7c:15:cf:0e:c3:
04:b5:70:65:fd:d8:2f:52:f2:09:69:51:e2:13:48:c8:22:7a:
4d:9a:76:98:49:2a:69:7f:10:fd:1c:ae:31:b8:dc:82:4d:e4:
c9:34:08:e7:7a:dc:81:86:ec:49:f5:63:4b:b1:c5:a9:08:9e:
b1:be:ec:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:15 2024 by rpki-client on console-fra.rpki-client.org