Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/84344D28903C11EFA82FBCA3762E951A.roa
File: 84344D28903C11EFA82FBCA3762E951A.roa (raw, json)
Hash identifier: 9Z8INq4Qqqe6tr0fb3jRek3pGi0cfp/ep+JkgKbxudE=
Subject key identifier: 7B:45:A9:65:98:6F:0B:BF:51:97:EB:63:D2:B9:3B:2D:6E:71:E0:B9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1256
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/84344D28903C11EFA82FBCA3762E951A.roa
Signing time: Tue 22 Oct 2024 06:11:46 +0000
ROA not before: Tue 22 Oct 2024 06:11:42 +0000
ROA not after: Thu 22 Oct 2026 06:11:42 +0000
asID: 212238
IP address blocks: 102.165.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4694 (0x1256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 06:11:42 2024 GMT
Not After : Oct 22 06:11:42 2026 GMT
Subject: CN=67174222-fdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:0b:a5:43:16:4b:8a:36:11:21:de:13:5c:
7f:cd:a3:3f:c8:5c:28:ee:d6:2c:1c:91:2e:d2:5c:
0e:a9:38:0e:f8:1e:e9:25:3b:71:2c:34:cb:41:a2:
aa:36:f4:4e:27:50:60:95:b2:9d:d3:6a:3c:5c:fd:
7f:75:3b:9f:65:75:64:de:5a:a3:c7:ff:2f:fb:1a:
e7:23:e9:4b:50:b0:a2:10:86:9a:9d:66:ab:a0:20:
ff:ea:96:79:75:cc:92:c6:76:c1:88:67:cf:21:35:
1b:f7:98:78:73:fd:93:8d:1a:c3:f4:84:34:ef:0d:
42:b8:56:bc:fd:3f:e7:bb:c9:e0:a6:55:be:20:82:
79:d7:75:f4:e7:38:e2:28:36:f1:a2:1b:5c:d3:f4:
5c:fd:75:1f:c6:04:16:63:84:ce:6c:87:8c:af:d8:
81:10:43:df:ff:89:be:ae:de:57:37:12:dc:14:46:
36:da:db:e2:51:9b:29:7e:17:1e:aa:4b:72:2b:fb:
40:9b:7a:4b:89:d9:b2:84:8a:cf:a1:5f:d5:5e:e2:
1c:fc:ef:ca:53:83:03:26:85:6d:cd:f7:ff:0b:71:
bc:2b:d8:fb:f0:24:75:c5:85:cd:6c:97:48:85:ee:
a3:2a:4e:38:fa:ed:ad:b1:0e:96:e9:d9:99:09:86:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:45:A9:65:98:6F:0B:BF:51:97:EB:63:D2:B9:3B:2D:6E:71:E0:B9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/84344D28903C11EFA82FBCA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.17.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c0:df:38:67:c3:62:dc:09:b9:93:18:b8:8e:a6:0b:43:e3:
7d:0c:7d:ec:80:59:fc:50:02:31:5a:38:6a:cb:97:90:f0:72:
71:8b:13:10:14:dd:89:8e:42:02:40:e0:a5:ee:c3:87:f9:5e:
01:c8:2c:e6:bf:7f:a9:95:8f:5c:25:3b:f1:69:c3:ed:fd:7b:
fa:3c:6e:6e:d6:1b:cd:f6:5d:f2:e8:28:97:42:51:15:a6:98:
86:c7:eb:df:72:7b:b4:cf:63:1f:18:3f:25:7e:20:b9:42:ae:
3f:98:48:a1:44:02:48:c8:26:0c:43:d3:13:f9:15:dd:70:cd:
31:48:20:9d:5a:43:d8:76:cd:31:60:93:d5:0b:54:10:39:9b:
6b:63:63:d3:fa:e4:02:b3:8f:51:50:43:24:c1:59:4b:1d:9d:
09:54:7d:23:ef:e7:a8:40:3a:d8:b3:90:c7:9d:5b:ac:d5:83:
d7:1b:5f:44:31:33:22:09:fd:9c:74:8d:f5:fe:45:30:dc:ee:
da:62:3f:04:74:8c:f9:91:e4:15:cb:8a:de:2e:9a:70:23:fd:
fa:31:d8:a6:0c:30:7d:74:c8:29:dc:2b:68:21:f7:3b:74:4e:
b0:d2:ce:ce:db:9e:91:74:e6:86:25:a0:43:97:78:af:af:1e:
e0:ef:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:25 2024 by rpki-client on console-ams.rpki-client.org