Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA0EC1C0D0AE11EE83904973775412E6.roa
File: AA0EC1C0D0AE11EE83904973775412E6.roa (raw, json)
Hash identifier: 4M5pkEjD4km3Mmvafo7Lpcm9R+HCO5lpeVobSDdNgC4=
Subject key identifier: D3:AE:31:4F:C3:8F:03:DE:7C:94:54:8C:2E:81:BF:1F:30:D8:D6:CB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F77
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA0EC1C0D0AE11EE83904973775412E6.roa
Signing time: Wed 21 Feb 2024 11:45:09 +0000
ROA not before: Wed 21 Feb 2024 11:45:06 +0000
ROA not after: Sat 21 Feb 2026 11:45:06 +0000
asID: 61317
IP address blocks: 102.165.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3959 (0xf77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 11:45:06 2024 GMT
Not After : Feb 21 11:45:06 2026 GMT
Subject: CN=65d5e245-859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:95:41:7b:f9:4e:06:4c:a8:4c:e3:81:b2:
39:b6:2a:95:71:1c:6b:fc:ec:fd:60:c1:90:ea:f2:
c4:59:9e:d0:1a:b9:f3:26:c5:e9:c6:00:0a:4f:83:
89:08:d0:1d:d3:d4:95:84:25:66:4f:5f:2f:c1:f7:
06:a3:1f:00:20:aa:7e:59:8f:8f:af:64:7b:9a:80:
bc:3a:cf:6c:bb:28:bc:4b:6d:9d:0b:6d:00:45:91:
ba:77:af:59:e0:a8:ee:87:4c:78:b5:ba:e0:0b:67:
7b:e1:80:20:b0:08:a7:0a:55:05:2c:38:47:6c:07:
5c:05:7d:6b:38:53:a8:42:1a:7c:db:f5:c1:6a:a2:
1e:50:da:3a:26:f3:25:22:c7:92:28:01:32:53:17:
19:15:82:ec:9e:ef:f2:30:bb:da:91:6e:67:96:5d:
b2:82:6c:10:cc:f4:cd:40:d3:0c:78:8d:b7:b6:c1:
f3:19:48:8b:0a:e5:66:e5:e2:57:09:74:a1:8c:a2:
e1:9a:a7:9a:30:15:81:43:98:fd:df:73:0a:3c:e9:
5b:4a:cb:07:56:97:30:2a:e3:fe:2d:39:37:cd:b4:
10:c1:2b:8c:ff:7f:f7:60:a8:72:46:c4:53:69:2c:
ca:b3:d3:b9:e9:b5:dd:bc:55:47:bd:fd:bc:fa:f7:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AE:31:4F:C3:8F:03:DE:7C:94:54:8C:2E:81:BF:1F:30:D8:D6:CB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA0EC1C0D0AE11EE83904973775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ac:30:27:58:39:b6:40:30:cc:bc:ab:4b:7e:65:db:6a:99:
44:14:72:39:34:20:f5:cc:f3:9a:19:93:2c:81:03:30:50:8a:
e9:5b:31:22:3c:18:e1:5a:c1:0b:03:10:bf:17:cd:71:73:0a:
11:f9:1c:e9:60:7c:ec:0f:8c:b5:bd:68:fb:d0:62:5e:dc:44:
56:65:80:8f:bd:53:4b:58:61:f5:c2:05:ae:85:b4:07:d3:c0:
78:0a:36:28:33:90:cf:09:d9:d1:82:12:55:3f:17:a3:b2:46:
7d:97:7c:c1:c9:29:6f:a2:fd:5f:39:ca:48:40:aa:af:b2:54:
d1:de:d2:0d:38:cb:9b:af:23:3b:33:5a:11:b6:4d:ea:fe:9a:
ea:e9:04:10:32:60:f3:24:dd:dd:85:15:84:6e:31:f1:f9:83:
ca:52:b1:9e:00:54:ab:97:f0:48:8d:19:01:e8:f3:4a:7d:5f:
a2:22:f2:04:6f:f8:cd:a9:80:ee:d3:ce:f9:aa:aa:09:39:d2:
14:f5:95:e9:14:92:e5:61:d2:42:34:23:2f:4c:44:5c:ef:69:
de:d7:67:66:f3:c3:69:1c:50:07:87:da:df:25:f9:a8:f2:91:
87:21:72:6b:fe:a6:e3:ee:9d:28:fa:6c:45:e0:92:8d:a6:0a:
ba:d6:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org