Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A9CC8B2CE78B11EEAB39B961775412E6.roa
File: A9CC8B2CE78B11EEAB39B961775412E6.roa (raw, json)
Hash identifier: 63TqVerGWUgR2DpXGDB7OaHtz4a+scuaboCdyLT2kLQ=
Subject key identifier: B7:B9:99:12:D4:B1:9A:A2:8D:A7:9C:21:84:5F:1F:49:6E:19:C6:80
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FE5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A9CC8B2CE78B11EEAB39B961775412E6.roa
Signing time: Thu 21 Mar 2024 14:02:33 +0000
ROA not before: Thu 21 Mar 2024 14:02:29 +0000
ROA not after: Sat 21 Mar 2026 14:02:29 +0000
asID: 200131
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4069 (0xfe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 21 14:02:29 2024 GMT
Not After : Mar 21 14:02:29 2026 GMT
Subject: CN=65fc3df9-121a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:d4:7e:e1:c5:1a:35:41:36:13:0a:c5:d4:
a1:8c:03:d9:7c:ba:f1:59:b6:65:48:5e:9f:12:dd:
e2:f5:55:1f:95:20:40:11:2d:f8:42:56:4c:e2:33:
fe:d5:03:59:67:cd:c5:10:90:21:27:04:95:38:e9:
c9:f3:ef:e5:04:75:eb:ba:f8:14:ed:34:be:ab:94:
20:5a:47:30:a1:a4:5a:d2:d9:a8:ef:39:f3:39:4a:
af:cb:79:f6:55:20:cc:9a:95:f8:34:a9:77:ec:4e:
c2:d1:76:18:c7:14:0f:71:a4:dc:9d:8f:6b:af:8c:
04:6e:79:d6:9e:e9:31:c2:09:05:10:df:c3:ea:53:
8a:55:06:80:75:c5:0c:f7:99:de:9e:68:d1:2a:2b:
45:d2:42:06:e7:4c:8b:a3:5a:a9:f1:7d:19:95:da:
9d:a7:2c:a0:61:b8:65:d7:bb:ae:f3:af:2e:ce:98:
e7:60:87:2b:61:f0:f4:d4:12:f7:dd:19:5d:61:3a:
6e:ef:2b:32:42:05:9a:be:cd:ba:bc:ac:c7:1e:73:
9f:e1:b2:dc:18:bc:bb:86:8e:42:fb:60:4d:c3:51:
73:54:04:2d:81:ee:b4:8f:11:3e:ca:5f:66:47:75:
aa:ea:fb:b3:22:aa:88:84:bf:85:2d:fc:d6:63:7f:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:99:12:D4:B1:9A:A2:8D:A7:9C:21:84:5F:1F:49:6E:19:C6:80
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A9CC8B2CE78B11EEAB39B961775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0e:c5:cb:ba:17:51:e0:1a:a3:ec:51:63:7e:40:50:4f:1b:
88:3a:fc:9c:93:de:50:d4:53:ad:1e:b9:0c:b8:71:f9:c0:96:
23:25:be:2a:e8:7a:07:cd:fd:ea:47:c4:1d:0e:de:f7:ed:91:
17:56:fc:e5:e5:f8:12:2e:29:12:84:a0:5f:66:d2:cb:99:90:
30:94:e9:87:f5:1f:d0:a8:7b:e6:96:33:11:47:82:8d:2d:de:
9a:2f:1d:9d:83:5f:8f:39:9d:ef:14:74:cc:55:11:7a:eb:2e:
53:e7:2d:6e:05:1c:fe:63:ce:13:b1:4b:d7:75:f5:94:22:bf:
30:99:ae:7e:90:2f:cb:8f:f4:57:39:97:2d:e6:7b:22:37:4c:
08:37:63:ca:41:6f:71:30:54:63:e2:4a:52:0d:c5:ef:c9:9f:
94:9c:b6:97:60:65:e7:c7:f9:14:f6:cd:63:ac:7b:af:3b:84:
05:36:0c:66:fc:9d:42:95:69:c8:1d:c9:c0:cd:1c:09:44:d9:
5a:56:4f:16:1a:f9:9c:04:13:5e:2b:1f:ba:bf:c0:0e:48:ed:
1b:e8:1e:6a:71:a6:1a:c5:ce:bf:fb:74:23:52:60:88:3d:6e:
dc:06:21:dd:96:32:ed:3a:1b:a0:47:0a:90:5d:60:b5:bb:b4:
4f:d5:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org