Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AF6FF0648C911EF9B9DDF40762E951A.roa
File: 5AF6FF0648C911EF9B9DDF40762E951A.roa (raw, json)
Hash identifier: QoPXCceeLCbvqEdTywUDhaRr0LUbfftriH51bL+K63I=
Subject key identifier: 6E:1F:AE:E7:20:F3:F2:5A:C9:66:A2:B0:FC:3F:19:DF:F6:34:C6:72
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1181
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AF6FF0648C911EF9B9DDF40762E951A.roa
Signing time: Tue 23 Jul 2024 07:58:32 +0000
ROA not before: Tue 23 Jul 2024 07:58:29 +0000
ROA not after: Sat 25 Jul 2026 07:58:29 +0000
asID: 212238
IP address blocks: 102.165.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4481 (0x1181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 23 07:58:29 2024 GMT
Not After : Jul 25 07:58:29 2026 GMT
Subject: CN=669f62a8-ce70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:f3:df:bf:2c:cb:0b:d3:93:ea:97:9c:4c:
fc:69:dc:31:f2:65:58:67:5d:95:00:be:60:97:d1:
80:9e:7b:11:45:38:ba:71:f9:41:35:c0:9c:14:6d:
fc:dc:3e:f4:61:1f:62:08:6c:dc:cf:2a:a8:11:45:
7c:c0:0e:4d:20:50:2e:b8:8f:64:72:f5:04:ad:b8:
33:e9:80:69:fe:d8:a0:68:e0:63:96:c3:7b:f3:ab:
9c:97:60:f7:df:1e:3b:21:b4:ee:4b:82:c2:17:a8:
c6:f8:6c:b2:31:55:5d:e5:26:b0:71:dc:c2:f2:ce:
64:74:cf:10:4f:aa:cd:d9:14:bf:d7:21:86:57:bb:
85:c2:fd:29:ea:85:2c:3b:59:ce:71:a5:f5:6f:3f:
57:0f:bb:9e:fa:21:b1:1d:d4:69:30:79:c6:40:07:
11:94:6b:da:b7:db:90:65:7b:b2:f0:59:c0:ae:ff:
4e:62:f5:dc:dc:f6:ee:fc:e9:be:14:65:f1:96:c4:
a2:bc:c6:64:f2:a9:8f:9a:cd:cc:73:6c:46:f3:55:
8e:13:c2:33:df:4f:c2:c9:2c:c2:1c:9f:f9:00:3f:
69:fd:88:36:02:d5:59:d1:be:99:de:b6:2f:33:77:
74:b8:d3:a6:3b:33:f9:d4:01:a8:5c:03:71:81:c5:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:AE:E7:20:F3:F2:5A:C9:66:A2:B0:FC:3F:19:DF:F6:34:C6:72
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AF6FF0648C911EF9B9DDF40762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.35.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:84:76:e3:20:ee:8b:7d:5d:a9:86:27:ec:ee:e7:8c:b5:6a:
cb:98:d1:ab:55:26:42:e3:88:c8:2b:68:27:48:af:15:c6:af:
04:7d:cf:a1:a3:29:24:76:af:af:df:38:7c:b6:7c:bd:da:43:
94:39:94:24:c1:fc:40:b7:39:6d:6e:80:29:f4:ff:6e:23:9d:
62:de:26:ed:70:99:b0:f5:42:a0:3f:35:76:46:bb:6f:65:44:
26:8f:91:fb:db:a4:f6:21:d1:4f:24:3d:6f:fa:53:b3:29:e3:
98:33:20:13:17:83:0c:62:b4:a1:ac:bc:9b:fe:7c:48:6c:24:
98:a3:23:e7:1a:f9:b6:fc:ab:ee:8a:5a:88:35:74:df:ce:2d:
c6:6f:40:ba:59:5a:4c:20:b3:26:45:79:5b:f6:e2:68:8e:b3:
7f:db:99:d8:0d:22:cf:25:ca:68:a1:40:4a:74:39:20:cd:74:
bf:a9:c0:b9:96:83:c1:37:51:32:7f:a1:fb:8a:eb:1f:6d:69:
12:fd:98:c5:fd:65:60:7e:5e:56:37:e9:46:05:39:fd:ea:25:
55:46:92:4b:be:70:e0:21:02:c5:b0:32:70:79:e5:7f:7f:4b:
18:eb:46:9f:97:a1:56:0c:13:d5:3c:b5:39:73:1e:9c:b9:ff:
b4:3b:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org