Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/75D6766EDF2311ED83B373F82F6D8C1D.roa
File: 75D6766EDF2311ED83B373F82F6D8C1D.roa (raw, json)
Hash identifier: 37pEiIp5C/V6cfX2WHfpcR3Mr+mqpkn+VHF+Wvw/t3U=
Subject key identifier: B1:D2:FF:62:18:8B:C5:D7:D5:5D:91:24:6B:F9:24:0D:76:95:7E:AE
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B24
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/75D6766EDF2311ED83B373F82F6D8C1D.roa
Signing time: Thu 20 Apr 2023 02:31:31 +0000
ROA not before: Thu 20 Apr 2023 02:31:28 +0000
ROA not after: Sat 19 Apr 2025 02:31:28 +0000
asID: 174
IP address blocks: 102.129.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 20 02:31:28 2023 GMT
Not After : Apr 19 02:31:28 2025 GMT
Subject: CN=6440a403-b33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:25:83:c2:9d:19:c1:77:5f:76:e1:a9:0b:
b9:69:56:c0:00:36:62:61:81:d0:2e:ef:e6:43:2c:
8d:b2:44:bf:78:30:9d:c6:fc:76:97:39:15:dc:62:
ed:ee:d0:a5:3e:6b:8f:0e:df:e2:1a:37:0e:6f:60:
86:a5:90:1e:9d:a4:fa:82:e4:e3:e8:5f:28:7d:6f:
35:20:90:2a:8e:ef:c3:c4:ec:15:73:9c:13:87:8b:
a4:b2:18:0f:0d:6e:fc:31:3e:22:30:dd:d0:dd:fb:
24:da:4c:67:95:4f:65:95:72:7a:fe:d3:e3:2d:ae:
91:8e:1a:eb:b8:86:dd:46:ae:d0:85:e4:fb:dc:7f:
c9:bf:fd:5d:52:70:52:fa:de:68:d1:64:04:24:a2:
03:41:9f:22:d7:d7:4d:8a:ac:0a:a7:2a:d0:b6:c0:
15:9a:a3:dc:c3:e7:bd:7f:57:81:98:6d:29:f4:77:
bc:36:5f:98:32:76:ad:64:f4:e7:86:c7:6e:7e:97:
7a:84:7d:30:10:69:ab:b0:95:26:36:ee:09:7d:f7:
db:f3:e5:d3:f3:30:12:5a:9c:e4:ac:b0:8c:b9:99:
10:38:50:66:d3:14:8a:14:2e:b8:ce:b3:51:7c:30:
e8:22:4f:bd:64:3a:33:4b:9e:25:16:4d:3d:4c:fd:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D2:FF:62:18:8B:C5:D7:D5:5D:91:24:6B:F9:24:0D:76:95:7E:AE
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/75D6766EDF2311ED83B373F82F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.153.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:d7:48:59:d8:c8:b6:c1:dc:19:1f:18:c5:86:f2:97:bb:ba:
39:77:aa:f7:84:d9:85:ef:51:a4:c1:e5:38:d7:fc:02:85:70:
39:7e:51:5f:53:5c:31:33:c7:04:3f:46:60:70:11:a4:cb:d0:
38:8d:6e:f2:60:b5:44:30:58:3b:20:8b:12:a6:bd:64:ec:c3:
c3:a7:67:22:f2:18:ed:00:4c:ff:e6:8d:47:b3:8e:e3:dc:e1:
7b:08:e9:9f:de:84:fc:fe:82:ae:7c:00:39:db:b4:6f:d9:5d:
84:0b:df:a6:4d:bd:f0:4c:d9:4b:97:58:80:ee:1d:52:09:85:
a9:56:4c:c5:ab:f6:3e:cb:ab:23:b9:60:d2:f2:e9:ab:5b:d0:
30:55:f5:2f:89:38:64:13:e4:29:8a:23:e5:9b:c0:77:33:c6:
68:3f:31:17:e0:d9:31:6f:62:6f:6a:77:c3:01:c3:03:15:15:
21:2d:15:9e:7d:20:c2:cb:82:a1:8e:23:f2:84:ea:96:de:1e:
3d:1a:47:3c:9d:9c:68:8e:58:3a:82:2b:eb:d9:8d:f1:83:00:
22:0d:14:65:61:b7:e1:d4:5d:1e:25:1b:84:e2:37:ef:4e:c4:
ed:41:43:b9:78:34:65:fc:75:7c:42:a9:59:67:02:12:39:14:
de:56:c5:ad
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA0MjAwMjMxMjhaFw0yNTA0MTkwMjMxMjhaMBgxFjAU
BgNVBAMMDTY0NDBhNDAzLWIzM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtgyWDwp0ZwXdfduGpC7lpVsAANmJhgdAu7+ZDLI2yRL94MJ3G/HaXORXc
Yu3u0KU+a48O3+IaNw5vYIalkB6dpPqC5OPoXyh9bzUgkCqO78PE7BVznBOHi6Sy
GA8NbvwxPiIw3dDd+yTaTGeVT2WVcnr+0+MtrpGOGuu4ht1GrtCF5Pvcf8m//V1S
cFL63mjRZAQkogNBnyLX102KrAqnKtC2wBWao9zD571/V4GYbSn0d7w2X5gydq1k
9OeGx25+l3qEfTAQaauwlSY27gl999vz5dPzMBJanOSssIy5mRA4UGbTFIoULrjO
s1F8MOgiT71kOjNLniUWTT1M/RuTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsdL/
YhiLxdfVXZEka/kkDXaVfq4wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzc1RDY3NjZFREYyMzExRUQ4M0IzNzNGODJGNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgZkwDQYJKoZIhvcNAQEL
BQADggEBANnXSFnYyLbB3BkfGMWG8pe7ujl3qveE2YXvUaTB5TjX/AKFcDl+UV9T
XDEzxwQ/RmBwEaTL0DiNbvJgtUQwWDsgixKmvWTsw8OnZyLyGO0ATP/mjUezjuPc
4XsI6Z/ehPz+gq58ADnbtG/ZXYQL36ZNvfBM2UuXWIDuHVIJhalWTMWr9j7LqyO5
YNLy6atb0DBV9S+JOGQT5CmKI+WbwHczxmg/MRfg2TFvYm9qd8MBwwMVFSEtFZ59
IMLLgqGOI/KE6pbeHj0aRzydnGiOWDqCK+vZjfGDACINFGVht+HUXR4lG4TiN+9O
xO1BQ7l4NGX8dXxCqVlnAhI5FN5Wxa0=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:12 2024 by rpki-client on console-ams.rpki-client.org