Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8CFDCF8E521111EEB311E1694AD9E6FC.roa
File: 8CFDCF8E521111EEB311E1694AD9E6FC.roa (raw, json)
Hash identifier: L8WubW2OpRXKVWqBUQ2xV6vWOdfFY+NjLBLqC3BkkBs=
Subject key identifier: F1:04:31:0A:EF:6C:E4:CA:45:DC:62:99:B4:43:9B:AB:EA:BC:9F:7F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D3D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8CFDCF8E521111EEB311E1694AD9E6FC.roa
Signing time: Wed 13 Sep 2023 08:43:03 +0000
ROA not before: Wed 13 Sep 2023 08:43:00 +0000
ROA not after: Sat 13 Sep 2025 08:43:00 +0000
asID: 212384
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3389 (0xd3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 13 08:43:00 2023 GMT
Not After : Sep 13 08:43:00 2025 GMT
Subject: CN=65017617-f3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:64:1d:9c:7b:c1:53:86:b0:54:b7:b8:a5:
f2:b2:60:aa:76:98:26:ca:a7:dd:2f:70:01:09:49:
b3:75:99:02:90:77:aa:b9:7d:03:bf:bb:3a:8d:93:
ab:0c:d2:ef:ac:95:a6:ce:a3:96:1b:0f:fb:85:25:
4f:8e:c2:3a:8f:e2:c5:58:27:98:2b:73:af:f8:a2:
5c:29:ac:ff:50:e3:1e:19:23:1b:90:2e:10:c1:74:
44:eb:9f:16:8c:7d:58:56:b1:c2:40:44:bb:70:07:
aa:47:71:27:d0:e2:0a:d8:ad:14:8a:d5:66:2c:5b:
b0:2d:e3:ba:6d:f2:88:71:d2:56:f3:3d:ac:b5:45:
d7:a7:bf:7e:f4:02:e2:ab:70:c1:46:bf:e9:1d:7f:
5f:1a:54:be:88:8a:61:f0:9e:55:dd:06:c0:d0:b1:
0a:08:07:1a:8d:16:a5:55:d5:f1:ad:39:df:8b:35:
ba:53:ce:4b:07:6a:83:fc:f9:1e:92:1b:a9:52:3d:
16:4f:50:40:7d:50:e5:f7:3e:ae:20:40:74:2a:21:
46:2d:55:90:91:28:78:eb:e4:17:f9:31:a0:5f:94:
f1:41:db:39:d3:b4:b5:c5:93:fe:84:b4:1c:81:e8:
ff:a0:1e:f3:2e:44:5d:58:f7:8a:cb:fa:5d:15:ec:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:31:0A:EF:6C:E4:CA:45:DC:62:99:B4:43:9B:AB:EA:BC:9F:7F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8CFDCF8E521111EEB311E1694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:08:33:cf:98:54:5e:ac:87:54:aa:d4:af:8e:96:44:78:50:
22:a9:88:58:61:c1:fe:da:06:fb:cd:aa:67:74:83:f8:88:49:
d8:52:ab:90:2f:27:ff:f2:4c:a7:3b:aa:26:f1:88:13:46:aa:
ee:39:d1:5f:f7:a1:75:5e:69:e5:fe:41:66:5f:4b:d8:c9:7f:
31:08:d9:c7:5a:06:72:db:e1:39:4a:ea:4a:10:fc:d5:d0:52:
5c:52:6e:cc:01:a6:61:d8:cd:fe:df:e3:2c:24:3f:13:fe:39:
75:e8:96:e1:cf:46:ec:95:cf:9f:9e:42:3d:3a:59:7a:ea:ac:
9e:cd:61:ec:54:1c:1a:e8:b7:67:0b:a3:c1:c2:b2:1a:8e:c5:
fd:35:c2:83:f4:f1:53:e5:05:56:29:88:c5:36:39:20:1f:82:
e0:7d:3c:0d:9b:31:e8:96:53:4e:92:66:9a:0a:af:ac:c6:33:
6e:b4:47:d9:c3:db:c5:3e:d3:af:5f:10:aa:bf:0a:42:20:49:
ab:fd:45:be:d8:82:21:fc:66:07:47:3f:3b:72:79:4e:26:7d:
f2:87:eb:29:77:c1:bb:f0:aa:db:be:26:40:6c:4a:40:8c:c5:
35:f3:76:f6:11:4f:fd:d6:df:be:9c:2e:03:54:da:f3:53:64:
bc:b8:91:98
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA5MTMwODQzMDBaFw0yNTA5MTMwODQzMDBaMBgxFjAU
BgNVBAMTDTY1MDE3NjE3LWYzZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2KWQdnHvBU4awVLe4pfKyYKp2mCbKp90vcAEJSbN1mQKQd6q5fQO/uzqN
k6sM0u+slabOo5YbD/uFJU+OwjqP4sVYJ5grc6/4olwprP9Q4x4ZIxuQLhDBdETr
nxaMfVhWscJARLtwB6pHcSfQ4grYrRSK1WYsW7At47pt8ohx0lbzPay1Rdenv370
AuKrcMFGv+kdf18aVL6IimHwnlXdBsDQsQoIBxqNFqVV1fGtOd+LNbpTzksHaoP8
+R6SG6lSPRZPUEB9UOX3Pq4gQHQqIUYtVZCRKHjr5Bf5MaBflPFB2znTtLXFk/6E
tByB6P+gHvMuRF1Y94rL+l0V7Lr/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8QQx
Cu9s5MpF3GKZtEObq+q8n38wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzhDRkRDRjhFNTIxMTExRUVCMzExRTE2OTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdAwDQYJKoZIhvcNAQEL
BQADggEBAGoIM8+YVF6sh1Sq1K+OlkR4UCKpiFhhwf7aBvvNqmd0g/iISdhSq5Av
J//yTKc7qibxiBNGqu450V/3oXVeaeX+QWZfS9jJfzEI2cdaBnLb4TlK6koQ/NXQ
UlxSbswBpmHYzf7f4ywkPxP+OXXoluHPRuyVz5+eQj06WXrqrJ7NYexUHBrot2cL
o8HCshqOxf01woP08VPlBVYpiMU2OSAfguB9PA2bMeiWU06SZpoKr6zGM260R9nD
28U+069fEKq/CkIgSav9Rb7YgiH8ZgdHPztyeU4mffKH6yl3wbvwqtu+JkBsSkCM
xTXzdvYRT/3W376cLgNU2vNTZLy4kZg=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org