Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5234009A856311EFBA81B8A5762E951A.roa
File: 5234009A856311EFBA81B8A5762E951A.roa (raw, json)
Hash identifier: bBe/InGa3qOT5GhbV6JzmevbSYUejsadThr/2hwVEGI=
Subject key identifier: 3B:45:EA:AF:7F:48:F4:25:BD:57:EA:77:0D:CE:3A:A3:11:30:CE:25
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1230
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5234009A856311EFBA81B8A5762E951A.roa
Signing time: Tue 08 Oct 2024 10:51:50 +0000
ROA not before: Tue 08 Oct 2024 10:51:46 +0000
ROA not after: Thu 08 Oct 2026 10:51:46 +0000
asID: 212238
IP address blocks: 102.165.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4656 (0x1230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 8 10:51:46 2024 GMT
Not After : Oct 8 10:51:46 2026 GMT
Subject: CN=67050ec6-3b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:b6:29:26:49:57:76:ed:dd:8e:d8:74:2d:
07:76:73:23:34:ab:cd:25:ce:81:8b:2d:ca:e6:f9:
33:78:c3:99:46:9f:38:3a:1a:cb:d6:85:a1:cb:b2:
64:67:fb:6c:82:aa:35:af:77:4e:57:dc:21:7a:2f:
85:ac:e0:d6:a2:0a:6d:ba:82:c0:af:d9:0b:f2:fe:
35:b6:e9:6a:4d:a3:5b:14:db:a4:57:ae:c0:23:76:
b2:48:8b:c8:aa:10:85:b9:00:ac:b4:2c:2c:86:8a:
d9:3f:cd:3a:dd:f5:c8:0a:4f:a2:b2:79:4b:fc:91:
08:e0:d7:f6:6d:30:8d:aa:9b:b9:e8:ec:e0:f3:68:
89:69:e1:4b:12:ff:85:8b:ca:63:cd:4c:eb:6a:83:
69:ea:e5:2e:97:1a:c9:8e:ba:ac:d9:72:da:0e:58:
f0:af:48:88:e0:61:b5:51:b4:e8:2b:3e:e3:fb:b8:
01:7a:f2:8e:68:10:1f:dd:20:f7:ba:86:4c:68:a1:
4a:6f:fe:be:37:35:96:d9:a8:5f:f4:08:e8:68:3a:
13:74:dd:bd:e0:df:06:ca:1f:4d:a5:5b:2b:21:bf:
81:5b:ba:fe:ca:64:82:59:36:11:19:ff:d1:09:e3:
cc:6b:8f:0f:06:80:c3:49:d1:75:76:9c:4d:66:ec:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:45:EA:AF:7F:48:F4:25:BD:57:EA:77:0D:CE:3A:A3:11:30:CE:25
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5234009A856311EFBA81B8A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.21.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:9a:ac:36:b1:4d:62:b9:61:75:7f:bd:b5:4d:ab:34:d8:dc:
c3:1a:be:2c:fb:8d:c4:c6:a1:1d:35:43:58:2a:c7:ec:dc:cd:
62:30:33:dd:f0:e7:c7:da:ac:2e:26:5d:13:bc:6d:3e:57:5a:
1d:23:17:70:f6:e2:f5:e1:d0:e0:f1:04:e1:bc:f6:be:c2:0d:
4c:05:93:aa:62:07:d3:bf:bd:6e:b1:08:04:c2:8c:78:b2:4c:
95:9d:b0:c6:eb:c3:a4:5c:71:d1:ca:7b:20:fc:af:6e:b0:9d:
d4:06:89:76:27:12:f9:e3:e9:92:f5:90:10:dc:01:25:50:2c:
5c:e3:5d:0c:38:e0:e9:47:51:56:ec:11:bd:c4:0e:e1:23:5a:
7c:c8:cf:ff:89:e2:cd:a1:1a:52:fc:60:a5:31:c3:71:ee:42:
68:6d:91:60:23:15:3e:de:7e:40:e9:d7:ef:3c:d9:64:06:2d:
73:f4:97:b9:26:6c:5a:33:73:11:63:7d:f5:7c:6f:02:77:76:
2e:07:c5:d8:1c:82:a6:3b:91:0d:b5:12:2f:6f:da:8d:29:ff:
3f:5d:59:e3:82:64:4b:f4:3c:5a:a1:e1:1b:9a:ed:c8:68:a8:
b2:8c:65:2a:63:bb:41:3a:fa:94:69:c4:00:81:9f:bf:a2:21:
c0:99:11:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org