Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B98DCE29DE111EF9509C0A2762E951A.roa
File: 9B98DCE29DE111EF9509C0A2762E951A.roa (raw, json)
Hash identifier: D2jWRk+qlQM7Qq9HwAnISL4+SBL/c7qtUJ+HCnAN6No=
Subject key identifier: 3F:60:53:EB:BE:43:1B:BF:DA:94:27:0D:0B:4B:56:C5:7F:C9:53:C4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1297
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B98DCE29DE111EF9509C0A2762E951A.roa
Signing time: Fri 08 Nov 2024 14:56:18 +0000
ROA not before: Fri 08 Nov 2024 14:56:14 +0000
ROA not after: Sat 07 Nov 2026 14:56:14 +0000
asID: 212238
IP address blocks: 102.165.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4759 (0x1297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 8 14:56:14 2024 GMT
Not After : Nov 7 14:56:14 2026 GMT
Subject: CN=672e2691-feb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:f5:1e:dd:63:35:75:16:fb:92:30:b8:23:
ec:0d:c5:b6:39:e3:c8:3e:19:73:66:0c:ef:ce:a5:
b3:09:04:76:37:9c:87:e1:b8:6c:3f:c2:61:b7:62:
00:47:90:71:16:9b:76:87:28:89:cc:58:4a:46:0b:
6a:ba:2b:a6:55:90:83:c3:f4:b1:d3:cf:06:a4:cb:
97:47:9d:be:79:d7:d4:3b:0d:8c:3b:50:41:b2:64:
10:35:d6:9c:97:74:ba:fc:06:0b:28:52:03:df:6a:
49:9d:be:4e:a0:b5:d8:cd:2d:36:b9:bd:78:31:b9:
9c:73:ce:78:ff:11:3b:5a:38:f7:19:d1:59:25:d3:
cc:6f:6f:5f:93:92:44:32:9e:67:d1:c3:b9:78:5a:
ee:78:b1:dc:55:44:c7:85:51:9b:3a:9a:aa:e4:68:
86:ee:e2:86:fc:8e:7f:11:61:51:97:c8:54:e0:43:
35:ee:8b:e0:6a:cf:0b:31:91:18:c1:ae:0b:53:b0:
60:3a:9e:bd:6f:d6:ac:d1:16:71:30:35:a7:19:64:
da:3f:38:52:3d:77:83:ac:a3:a6:30:80:3b:51:3e:
c5:ca:e5:70:33:d8:b9:4f:0e:96:63:93:48:f6:c2:
dc:d5:4c:af:e2:3f:7f:2b:fe:0e:77:f5:fc:27:89:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:53:EB:BE:43:1B:BF:DA:94:27:0D:0B:4B:56:C5:7F:C9:53:C4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B98DCE29DE111EF9509C0A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:68:2c:74:96:8f:bd:bd:76:5e:14:94:11:8c:aa:6c:b0:d3:
93:0e:72:11:78:7f:b2:99:e3:a1:c6:47:f8:f9:b2:f2:47:9f:
86:f6:6d:04:f8:8e:51:22:a1:33:67:d5:79:a4:14:30:fa:b7:
0f:77:7b:73:2b:18:c9:53:b6:ff:81:43:3f:6b:a6:d8:07:9c:
0c:df:7f:18:ca:76:75:f5:ce:9e:c2:42:b8:a2:82:99:7c:fa:
c5:67:e0:d8:e4:8c:4e:e1:de:1c:fa:74:0e:b3:d5:39:9d:ac:
26:b8:b0:e9:06:92:56:4e:92:48:4a:df:12:0b:ad:13:bb:d4:
56:a3:41:a7:f9:bd:67:43:57:28:49:2f:7c:2f:f8:96:87:f2:
cc:8c:ba:0b:3e:ed:3d:75:9a:ce:19:d4:cd:01:09:65:ff:fb:
a4:a3:47:fd:a0:62:37:04:81:00:dc:3b:35:40:50:82:a8:a5:
2e:11:23:6a:3e:e7:f2:29:72:84:88:c2:0d:d9:d1:0b:42:3b:
32:2d:6c:97:f6:f3:75:71:15:16:e6:ae:b2:d8:65:a1:39:c4:
04:95:d8:dd:53:47:ea:b7:5a:a0:50:3e:99:0f:4a:f3:3b:f1:
db:e1:c8:3c:9b:5c:2a:e2:c5:60:e7:72:9a:08:15:b1:d7:93:
0a:e7:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org