Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6055813C7FEE11EF902BBA4A762E951A.roa
File: 6055813C7FEE11EF902BBA4A762E951A.roa (raw, json)
Hash identifier: P2X2EHgzTVUqpDwkpbE5OHRTLu19Iw7thjTJOtLQ4NI=
Subject key identifier: 7E:B7:65:8C:3D:35:42:D6:6E:B2:0B:F7:67:A8:63:0F:94:A1:B8:8E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 121D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6055813C7FEE11EF902BBA4A762E951A.roa
Signing time: Tue 01 Oct 2024 12:12:07 +0000
ROA not before: Tue 01 Oct 2024 12:12:03 +0000
ROA not after: Thu 01 Oct 2026 12:12:03 +0000
asID: 174
IP address blocks: 102.165.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4637 (0x121d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 1 12:12:03 2024 GMT
Not After : Oct 1 12:12:03 2026 GMT
Subject: CN=66fbe717-bbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:e9:24:33:86:3e:4c:f6:ba:7b:d4:c6:4e:
33:68:41:8d:f7:8a:b2:66:e0:47:9a:37:8a:d9:25:
5f:19:c3:ad:75:6b:f5:21:45:d2:06:c3:58:7a:36:
d3:50:cd:c4:b2:0a:db:e3:80:fa:b6:e8:fc:de:f4:
3e:14:89:15:ce:b7:2a:75:ef:dd:36:ec:f4:54:f3:
66:87:7a:e5:f8:e1:b4:3e:c1:78:65:d0:7c:56:ef:
40:85:af:a3:a9:f4:57:2b:40:a1:cb:47:0e:b1:28:
9b:66:3e:32:4c:63:49:6a:55:d1:f4:24:76:a4:2c:
d4:03:54:b6:e4:fc:b4:6b:27:73:52:84:8d:1a:82:
6f:dd:68:24:68:95:2d:f3:4b:68:7a:54:66:f9:6c:
18:1b:e6:f4:9e:51:30:cc:cb:4c:b7:87:7a:5c:50:
4f:b4:f4:12:31:fd:af:7f:74:1a:1f:da:e0:3a:36:
ee:1d:54:f4:06:ca:9b:cf:81:8b:3f:5a:c1:5d:2b:
17:29:f5:b4:fc:33:45:41:24:cb:9f:3a:6e:a5:59:
65:e8:95:0c:76:d7:70:67:43:46:69:6b:7f:6d:f6:
85:79:b1:10:02:d7:19:f4:af:15:9f:13:58:ad:f2:
57:c1:cb:57:cf:ab:0f:f4:69:a6:0d:7a:72:e9:8a:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:65:8C:3D:35:42:D6:6E:B2:0B:F7:67:A8:63:0F:94:A1:B8:8E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6055813C7FEE11EF902BBA4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.48.0/24
Signature Algorithm: sha256WithRSAEncryption
98:71:2e:eb:0e:be:39:b5:4d:09:98:04:6c:df:75:1c:47:f6:
78:2a:d1:ff:28:ca:90:86:6e:94:83:77:41:d3:f7:55:a0:5a:
44:1c:84:d0:29:ce:c6:d2:47:b3:17:e3:32:55:d8:ff:dc:51:
b3:28:dc:4c:6f:75:fc:44:bb:34:a9:75:b5:7c:7c:a4:9b:9e:
e7:c1:6d:88:6b:8b:37:94:d7:81:4f:ce:6e:d3:97:58:2f:e6:
8a:4b:44:fd:98:7f:a1:57:9b:91:32:3f:53:f8:aa:fd:b2:8e:
80:8b:08:41:6d:54:72:8b:1d:8e:c3:fb:fa:4b:e6:7b:43:60:
a4:d2:d3:cd:ca:72:2e:ca:a0:e4:2c:bb:fc:55:2c:60:75:1d:
ac:e1:d3:24:a4:fd:b4:dc:a7:3e:1f:54:1e:2d:2b:4a:10:a2:
a7:c3:a6:6e:42:1d:2e:ff:2c:cd:a0:0b:5b:8d:9e:1e:00:62:
64:0b:42:92:b4:bd:43:0a:d9:05:ef:c3:be:f9:45:eb:51:cc:
0e:41:7e:d1:c3:1e:b5:4d:44:1e:ae:c2:66:30:85:52:6b:0e:
99:36:8c:82:1a:6c:8d:95:b7:a3:b2:a0:a9:b3:9d:3f:0d:24:
4a:81:e8:45:78:41:c5:7a:28:f8:8a:cb:6f:aa:f0:95:de:7a:
1e:01:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 09:35:35 2024 by rpki-client on console-fra.rpki-client.org