Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8C533AFC383911EEBB4FAB4D4AD9E6FC.roa
File: 8C533AFC383911EEBB4FAB4D4AD9E6FC.roa (raw, json)
Hash identifier: 2VdyYPVJJZO7dVXNhKGepSPYqmQB8eTUcH6Oy63wfDk=
Subject key identifier: F8:CB:B9:71:15:53:15:8D:7F:76:A4:26:87:1B:E9:1C:91:B8:60:24
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CC6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8C533AFC383911EEBB4FAB4D4AD9E6FC.roa
Signing time: Fri 11 Aug 2023 11:23:51 +0000
ROA not before: Fri 11 Aug 2023 11:23:48 +0000
ROA not after: Sat 16 Aug 2025 11:23:48 +0000
asID: 32181
IP address blocks: 102.129.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3270 (0xcc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 11 11:23:48 2023 GMT
Not After : Aug 16 11:23:48 2025 GMT
Subject: CN=64d61a47-0549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:af:ef:c2:51:3c:fd:7a:81:05:55:85:57:
d8:74:af:60:2d:18:3d:b1:66:22:3e:12:11:bb:49:
5f:bb:55:a3:1c:9c:75:5c:f5:13:d9:78:bb:16:33:
b8:f3:4c:72:16:14:c8:6a:96:4c:34:1d:27:54:c5:
7d:dc:dd:cf:df:06:ed:7f:13:7b:7b:55:92:16:be:
05:78:6b:ff:d9:86:2e:22:c2:23:b5:03:e0:99:d6:
61:81:ff:b2:a0:09:08:0d:3d:af:16:7d:34:38:5d:
e0:a3:7b:2a:78:ae:90:ab:53:4d:e7:92:b2:9b:ae:
72:1e:ec:02:d8:9c:25:fc:cf:e0:94:ce:f9:56:13:
9a:a0:91:de:dc:59:11:18:88:bc:f0:36:71:ac:7c:
b0:9f:f4:bc:0a:9a:63:99:a0:85:38:e0:da:c7:73:
46:2e:37:fb:1b:9b:cf:1d:be:c8:8c:cb:26:5b:40:
5c:ab:ff:7d:06:23:43:3c:c2:c5:d2:c7:ec:40:f6:
da:92:06:f2:da:ea:8b:5a:bf:6d:5f:f0:72:f7:17:
3b:b0:bf:ad:26:0c:9a:d1:a8:d0:ba:0b:a3:11:4b:
4b:bb:ba:45:43:f7:9c:d0:be:44:dc:10:ef:d3:0a:
35:c0:48:b1:35:96:c3:3c:be:73:de:c8:dd:b7:71:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:B9:71:15:53:15:8D:7F:76:A4:26:87:1B:E9:1C:91:B8:60:24
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8C533AFC383911EEBB4FAB4D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:85:7d:9b:38:d7:f0:b7:d8:6f:75:f1:26:66:d7:88:f5:00:
93:f2:ab:fc:33:24:83:96:83:5e:9d:cb:da:04:a7:ef:25:5a:
26:7a:8a:fa:7c:7f:cd:d3:ca:77:40:27:ab:f4:cd:1e:20:b5:
13:53:0c:73:19:d6:da:9e:10:b8:70:9d:f3:9d:f5:a4:f1:39:
7a:9b:44:b3:44:58:9c:70:7a:74:83:46:ae:9c:06:c4:a3:dc:
ad:85:59:db:5a:6c:71:93:d6:da:28:a1:18:e1:a7:4a:61:f0:
a2:b3:63:65:1d:49:a2:5c:e1:ce:53:e0:e8:77:e8:9b:a2:65:
fd:87:79:64:f3:14:5d:b1:e7:a9:11:44:98:17:16:3f:9c:23:
48:f4:09:5f:6f:30:4d:1c:84:0a:05:78:d1:0a:9f:b2:ba:c0:
fa:59:df:aa:00:0f:c1:7b:1e:0c:9e:5e:56:57:3a:33:e8:4d:
c2:2a:15:9d:49:09:4d:39:73:6c:f8:3b:9d:eb:c4:c1:04:27:
83:a3:0f:db:d7:87:54:cd:8a:a9:62:74:2a:26:01:e1:5b:5d:
c4:b3:d6:fb:a4:37:44:8f:30:74:1e:cb:8b:39:8f:41:9a:bd:
54:67:0a:b0:22:47:4a:e0:93:7b:df:66:ea:84:f2:a1:fb:93:
14:dd:aa:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA4MTExMTIzNDhaFw0yNTA4MTYxMTIzNDhaMBgxFjAU
BgNVBAMTDTY0ZDYxYTQ3LTA1NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN/q/vwlE8/XqBBVWFV9h0r2AtGD2xZiI+EhG7SV+7VaMcnHVc9RPZeLsW
M7jzTHIWFMhqlkw0HSdUxX3c3c/fBu1/E3t7VZIWvgV4a//Zhi4iwiO1A+CZ1mGB
/7KgCQgNPa8WfTQ4XeCjeyp4rpCrU03nkrKbrnIe7ALYnCX8z+CUzvlWE5qgkd7c
WREYiLzwNnGsfLCf9LwKmmOZoIU44NrHc0YuN/sbm88dvsiMyyZbQFyr/30GI0M8
wsXSx+xA9tqSBvLa6otav21f8HL3Fzuwv60mDJrRqNC6C6MRS0u7ukVD95zQvkTc
EO/TCjXASLE1lsM8vnPeyN23cdblAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+Mu5
cRVTFY1/dqQmhxvpHJG4YCQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzhDNTMzQUZDMzgzOTExRUVCQjRGQUI0RDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgawwDQYJKoZIhvcNAQEL
BQADggEBADqFfZs41/C32G918SZm14j1AJPyq/wzJIOWg16dy9oEp+8lWiZ6ivp8
f83TyndAJ6v0zR4gtRNTDHMZ1tqeELhwnfOd9aTxOXqbRLNEWJxwenSDRq6cBsSj
3K2FWdtabHGT1toooRjhp0ph8KKzY2UdSaJc4c5T4Oh36JuiZf2HeWTzFF2x56kR
RJgXFj+cI0j0CV9vME0chAoFeNEKn7K6wPpZ36oAD8F7HgyeXlZXOjPoTcIqFZ1J
CU05c2z4O53rxMEEJ4OjD9vXh1TNiqlidComAeFbXcSz1vukN0SPMHQey4s5j0Ga
vVRnCrAiR0rgk3vfZuqE8qH7kxTdqjk=
-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org