Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8F575C5653BE11EEB927F33F4AD9E6FC.roa
File: 8F575C5653BE11EEB927F33F4AD9E6FC.roa (raw, json)
Hash identifier: e81LWDlbRtpD9Cv/17rcSjKi17dC5haWfVKve2WDuFo=
Subject key identifier: BA:68:AD:0C:64:7B:A1:9A:83:5C:58:35:00:09:31:F5:7D:38:E8:55
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D5E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8F575C5653BE11EEB927F33F4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 11:54:01 +0000
ROA not before: Fri 15 Sep 2023 11:53:58 +0000
ROA not after: Sat 20 Sep 2025 11:53:58 +0000
asID: 212238
IP address blocks: 102.165.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 11:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3422 (0xd5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 15 11:53:58 2023 GMT
Not After : Sep 20 11:53:58 2025 GMT
Subject: CN=650445d9-1d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:7f:9b:36:de:c1:47:b5:0c:91:87:88:98:
de:a6:2c:ae:b7:b0:c9:71:42:7c:8c:81:2f:e8:15:
8b:49:1a:9c:4a:3c:db:dd:72:27:02:36:db:f2:0c:
37:f5:a3:25:e8:ca:53:c5:ba:2f:74:6d:7e:f6:bd:
52:08:8f:5e:c3:92:85:24:40:da:7d:e4:7d:b5:8e:
36:7e:5a:f0:78:0a:e6:f8:66:67:ba:35:3d:97:7a:
68:75:37:a1:ff:2f:b0:b6:92:be:80:b9:34:84:2f:
d5:fe:6a:5c:58:0a:7f:a6:e1:3e:bd:7e:af:a8:6f:
66:8c:75:a9:eb:60:70:3f:7c:da:47:78:c6:b0:64:
4c:1f:88:b7:10:f4:9a:ad:e3:df:42:b1:83:39:2f:
c3:f2:e1:60:0c:af:0f:44:cc:ea:7b:50:25:b7:6f:
ac:d1:ce:78:9b:b1:6b:0f:0c:51:3e:ec:c9:85:e2:
a4:a2:56:6a:73:01:42:6a:bf:99:7d:19:2c:40:dd:
45:40:03:cc:ee:c6:75:92:c0:5b:65:1d:fb:8d:2c:
b0:61:21:79:b0:e6:27:85:ad:28:5a:36:90:96:2b:
1b:54:8e:e8:e6:32:cb:ea:e8:b2:1b:56:8d:78:56:
5e:d2:0f:65:8f:1c:14:68:21:e6:05:ea:8d:7a:d6:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:AD:0C:64:7B:A1:9A:83:5C:58:35:00:09:31:F5:7D:38:E8:55
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8F575C5653BE11EEB927F33F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8e:10:f0:f2:de:5a:b0:4d:61:90:1d:8b:dc:62:ae:42:61:
eb:a1:d4:67:4f:9f:91:b4:b5:e8:01:9c:ff:26:72:24:57:cb:
a1:15:27:19:1f:15:90:78:54:f4:30:63:a1:93:d2:b1:ec:cd:
3a:a6:c3:c3:27:f0:3f:ea:d5:ed:48:a7:f3:28:8b:a1:86:2c:
4c:67:b7:e2:10:2f:f7:76:d7:0d:68:88:a5:fb:b0:8e:55:5e:
ae:fc:1d:fe:8e:da:bb:06:d8:cf:fb:67:36:24:e2:b7:2c:b0:
47:df:4a:e8:2e:f5:f7:94:6a:3d:16:15:ae:e7:42:dd:85:1c:
83:4f:f5:98:b5:12:57:17:27:92:aa:16:c9:07:b5:64:7b:f6:
56:19:eb:06:97:0c:41:a4:fd:d1:6b:ab:6b:73:55:1c:6f:a6:
65:8c:ff:0c:fa:ee:8b:5a:a3:de:81:c9:af:4a:17:21:2e:9d:
88:cb:54:e6:0c:25:3a:78:2c:71:90:35:71:34:ab:9e:c8:f3:
6b:8e:43:a6:17:a9:ac:f5:9e:4d:78:63:62:f0:25:c6:4c:14:
60:02:e6:f1:1e:ab:3c:62:34:51:71:19:53:33:18:37:eb:30:
b3:7c:8f:4e:1f:d0:31:fb:82:3a:14:3d:c3:61:df:a5:1b:39:
39:f0:24:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDV4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA5MTUxMTUzNThaFw0yNTA5MjAxMTUzNThaMBgxFjAU
BgNVBAMTDTY1MDQ0NWQ5LTFkNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr1X+bNt7BR7UMkYeImN6mLK63sMlxQnyMgS/oFYtJGpxKPNvdcicCNtvy
DDf1oyXoylPFui90bX72vVIIj17DkoUkQNp95H21jjZ+WvB4Cub4Zme6NT2Xemh1
N6H/L7C2kr6AuTSEL9X+alxYCn+m4T69fq+ob2aMdanrYHA/fNpHeMawZEwfiLcQ
9Jqt499CsYM5L8Py4WAMrw9EzOp7UCW3b6zRznibsWsPDFE+7MmF4qSiVmpzAUJq
v5l9GSxA3UVAA8zuxnWSwFtlHfuNLLBhIXmw5ieFrShaNpCWKxtUjujmMsvq6LIb
Vo14Vl7SD2WPHBRoIeYF6o161hdDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUumit
DGR7oZqDXFg1AAkx9X046FUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzhGNTc1QzU2NTNCRTExRUVCOTI3RjMzRjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpR8wDQYJKoZIhvcNAQEL
BQADggEBAIqOEPDy3lqwTWGQHYvcYq5CYeuh1GdPn5G0tegBnP8mciRXy6EVJxkf
FZB4VPQwY6GT0rHszTqmw8Mn8D/q1e1Ip/Moi6GGLExnt+IQL/d21w1oiKX7sI5V
Xq78Hf6O2rsG2M/7ZzYk4rcssEffSugu9feUaj0WFa7nQt2FHINP9Zi1ElcXJ5Kq
FskHtWR79lYZ6waXDEGk/dFrq2tzVRxvpmWM/wz67otao96Bya9KFyEunYjLVOYM
JTp4LHGQNXE0q57I82uOQ6YXqaz1nk14Y2LwJcZMFGAC5vEeqzxiNFFxGVMzGDfr
MLN8j04f0DH7gjoUPcNh36UbOTnwJDk=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:17 2024 by rpki-client on console-ams.rpki-client.org