Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6AAC5F2A52CD11EDB10B85F5F1222468.roa
File: 6AAC5F2A52CD11EDB10B85F5F1222468.roa (raw, json)
Hash identifier: Cpuah5fqAP+yPDyGNQ5A38QHWhtC0F/NRONsCmlenyU=
Subject key identifier: FB:4D:AE:FC:E6:69:BA:07:ED:29:BE:EB:37:DB:B3:24:26:AC:05:46
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0876
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6AAC5F2A52CD11EDB10B85F5F1222468.roa
Signing time: Sun 23 Oct 2022 12:22:53 +0000
ROA not before: Sun 23 Oct 2022 12:22:48 +0000
ROA not after: Thu 24 Oct 2024 12:22:48 +0000
asID: 212669
IP address blocks: 102.165.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 23 12:22:48 2022 GMT
Not After : Oct 24 12:22:48 2024 GMT
Subject: CN=6355321d-f95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:85:19:b9:b8:d7:67:96:9c:0a:d4:ec:55:63:
43:61:12:4c:26:a2:6f:36:59:ab:92:4b:75:ee:8d:
5a:10:61:26:0c:69:f3:95:41:be:76:06:98:ae:43:
f6:f2:16:88:70:9c:91:37:f0:88:64:54:d5:6d:9d:
47:a3:ab:7b:68:f0:5e:77:f0:26:31:64:d0:30:85:
82:32:9c:b1:c7:b1:40:41:61:8d:6e:2d:6f:f4:60:
9b:25:35:9d:e8:ce:14:3c:5e:d4:b4:76:03:03:45:
50:52:7e:54:5f:45:7f:2f:57:7a:61:1e:41:48:06:
b1:ce:07:e4:76:67:ea:68:3e:bd:20:4a:8e:b2:03:
02:b9:81:c0:5f:40:32:5d:ec:a3:4b:86:41:71:45:
8c:4f:6b:e5:f4:c1:58:16:73:74:65:f0:5e:e3:1f:
af:3d:7d:3e:f5:c1:5d:99:30:3d:0a:43:11:de:61:
45:df:57:0e:00:e4:bc:cd:97:e9:a0:e6:bb:dc:92:
06:e5:42:a5:99:5c:84:c3:81:4a:96:20:dd:0c:6a:
25:01:cc:30:f5:3f:a7:8a:a6:70:29:49:30:c7:33:
e0:49:31:40:1e:dc:35:ae:2a:52:1b:48:cc:01:d2:
0f:76:84:7d:11:5a:43:85:9d:b3:78:9d:32:bd:bf:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:AE:FC:E6:69:BA:07:ED:29:BE:EB:37:DB:B3:24:26:AC:05:46
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6AAC5F2A52CD11EDB10B85F5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.39.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:e0:23:10:3e:66:11:a3:bd:0c:eb:fa:18:92:6c:4f:5e:5e:
f3:be:aa:32:2b:9b:f1:86:67:22:a9:60:2c:71:1a:91:36:59:
19:c5:98:69:65:b9:0c:3b:0f:75:66:5e:38:79:d6:e4:d3:9b:
5f:f3:e0:a1:8d:99:18:d9:19:ed:71:76:67:52:7b:e7:49:72:
bd:97:a0:59:d1:40:6e:4b:95:90:39:7b:52:42:83:26:35:9f:
3b:df:0d:7c:7a:27:01:70:51:cd:24:2a:f9:db:9a:c1:5c:4f:
83:05:ec:ee:bd:95:3f:a0:38:b7:b5:11:23:e5:cf:c5:d6:60:
62:cb:93:6a:65:71:d7:4d:17:a8:ab:af:25:b8:af:42:b3:b4:
b5:f8:55:f6:4f:b1:d5:d7:a1:4d:cd:40:b4:c0:35:19:0a:df:
d2:43:e7:4b:66:7e:25:44:59:d5:00:68:c5:3a:98:8e:ab:11:
80:25:1c:7b:6d:51:95:41:64:30:77:ce:0c:b9:d0:31:d8:63:
45:8d:56:e1:79:95:d0:dd:d4:5d:5d:5b:ff:b2:d3:7b:28:23:
01:d3:38:2b:a5:9f:6f:ea:a7:e7:73:56:c5:13:df:b4:01:1c:
f3:23:87:c0:e8:bb:0e:be:16:c8:1a:6e:c6:d7:ca:72:a7:67:
48:f9:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org