Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/926D3FBA604211EE93B238354AD9E6FC.roa
File: 926D3FBA604211EE93B238354AD9E6FC.roa (raw, json)
Hash identifier: DscdB4rS0IpGdxrg+Ji3R1T/5bpUv0928wDYJxI6Z90=
Subject key identifier: 9B:CA:47:17:C9:72:76:31:9B:B3:5A:EB:8C:6F:A8:E7:7A:6D:48:42
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D95
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/926D3FBA604211EE93B238354AD9E6FC.roa
Signing time: Sun 01 Oct 2023 10:09:14 +0000
ROA not before: Sun 01 Oct 2023 10:09:09 +0000
ROA not after: Tue 22 Oct 2024 10:09:09 +0000
asID: 834
IP address blocks: 102.129.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3477 (0xd95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 1 10:09:09 2023 GMT
Not After : Oct 22 10:09:09 2024 GMT
Subject: CN=65194549-48cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:6a:80:f0:48:ff:c9:4c:18:e7:aa:46:de:
92:35:a4:c1:cd:9f:03:ba:58:c2:67:85:49:e1:b4:
15:78:1b:c3:91:46:89:1c:87:84:5c:41:b4:58:e1:
99:b0:8c:f6:ca:cb:72:c9:a5:c2:2b:17:dc:31:ea:
79:77:f5:d5:63:6d:a5:ac:9b:c6:ef:02:08:14:2e:
aa:72:67:20:8e:af:50:22:17:7f:07:c8:f7:4e:9c:
1a:9b:27:89:f4:d6:5a:80:e6:11:5d:0b:86:79:94:
ed:e9:f8:2f:05:4b:fd:f8:f3:1e:69:cd:8d:5b:18:
4a:8e:23:43:87:5a:22:6f:2a:0f:f1:a8:3b:93:71:
85:94:ba:80:7f:d7:7b:28:1c:da:42:f8:73:82:c6:
96:58:f8:b5:e1:59:4b:9f:f0:88:8f:f4:a5:7e:19:
40:85:f2:2c:b7:4f:cb:2e:e7:57:61:6a:5c:a4:0c:
d9:df:9e:13:7e:ba:ed:1d:13:0d:18:00:51:f6:6d:
66:65:8b:51:62:9b:49:14:4f:7e:98:ab:e9:3f:45:
3a:c0:17:94:72:4e:d3:22:0c:89:88:a3:90:db:2c:
7b:90:e2:85:1e:27:8b:84:9a:14:e1:63:3f:8f:44:
b9:41:18:65:3e:df:80:36:39:c3:be:52:b5:70:91:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:47:17:C9:72:76:31:9B:B3:5A:EB:8C:6F:A8:E7:7A:6D:48:42
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/926D3FBA604211EE93B238354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.184.0/23
Signature Algorithm: sha256WithRSAEncryption
51:2b:09:71:0d:43:83:a7:ba:03:6c:cb:57:93:e2:d2:5e:b5:
89:64:a2:35:ed:a2:eb:98:d5:c3:7d:95:5f:05:f3:42:bc:3e:
8a:c1:45:76:1d:bd:6c:9c:85:82:c1:88:42:79:00:41:9b:d8:
44:3a:58:03:84:d7:09:1d:74:0a:cd:9b:2e:ff:3c:93:e1:f0:
c6:79:5f:73:96:08:f2:a6:96:b4:64:b9:b9:98:bc:69:d9:b3:
cd:ef:cf:03:b0:c3:07:8d:d5:91:81:71:f7:6c:d0:76:b6:cf:
b4:bc:45:1c:1d:03:09:14:63:c0:c7:cb:9d:d2:c2:9c:27:bb:
24:00:ab:9d:2f:0f:31:c4:0f:d7:fe:35:5a:34:5d:cf:58:41:
74:bd:d9:cd:43:32:c2:da:76:f0:87:7b:ba:14:b7:85:10:5a:
79:10:d8:6a:33:3a:13:56:e6:ad:93:5e:96:f9:fd:05:43:f0:
27:6e:8e:24:aa:8d:3b:d3:a0:9c:62:74:a2:6c:66:30:54:de:
46:d9:d3:23:89:a9:07:74:8f:5d:07:90:fc:22:b7:43:02:8c:
55:a7:97:1a:2d:55:8e:b0:0a:d8:7a:6b:b4:c9:7f:d0:8c:a9:
bd:1e:a1:eb:8e:72:92:61:78:81:57:93:31:c3:d3:5c:1d:42:
7d:f8:e9:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEwMDExMDA5MDlaFw0yNDEwMjIxMDA5MDlaMBgxFjAU
BgNVBAMTDTY1MTk0NTQ5LTQ4Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbNmqA8Ej/yUwY56pG3pI1pMHNnwO6WMJnhUnhtBV4G8ORRokch4RcQbRY
4ZmwjPbKy3LJpcIrF9wx6nl39dVjbaWsm8bvAggULqpyZyCOr1AiF38HyPdOnBqb
J4n01lqA5hFdC4Z5lO3p+C8FS/348x5pzY1bGEqOI0OHWiJvKg/xqDuTcYWUuoB/
13soHNpC+HOCxpZY+LXhWUuf8IiP9KV+GUCF8iy3T8su51dhalykDNnfnhN+uu0d
Ew0YAFH2bWZli1Fim0kUT36Yq+k/RTrAF5RyTtMiDImIo5DbLHuQ4oUeJ4uEmhTh
Yz+PRLlBGGU+34A2OcO+UrVwkYkZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUm8pH
F8lydjGbs1rrjG+o53ptSEIwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzkyNkQzRkJBNjA0MjExRUU5M0IyMzgzNTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmgbgwDQYJKoZIhvcNAQEL
BQADggEBAFErCXENQ4OnugNsy1eT4tJetYlkojXtouuY1cN9lV8F80K8PorBRXYd
vWychYLBiEJ5AEGb2EQ6WAOE1wkddArNmy7/PJPh8MZ5X3OWCPKmlrRkubmYvGnZ
s83vzwOwwweN1ZGBcfds0Ha2z7S8RRwdAwkUY8DHy53SwpwnuyQAq50vDzHED9f+
NVo0Xc9YQXS92c1DMsLadvCHe7oUt4UQWnkQ2GozOhNW5q2TXpb5/QVD8CdujiSq
jTvToJxidKJsZjBU3kbZ0yOJqQd0j10HkPwit0MCjFWnlxotVY6wCth6a7TJf9CM
qb0eoeuOcpJheIFXkzHD01wdQn346ZA=
-----END CERTIFICATE-----
Generated at Wed May 1 02:07:58 2024 by rpki-client on console-fra.rpki-client.org