Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1522A02D0AF11EEADF4C774775412E6.roa
File: B1522A02D0AF11EEADF4C774775412E6.roa (raw, json)
Hash identifier: BWMRcYvSqds8+D0HxJ+acgdifs4GpccxdI7QMGiZvak=
Subject key identifier: F8:D5:25:3D:C9:26:4F:C2:8F:43:90:EB:C9:3D:64:CC:CB:74:64:88
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F7D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1522A02D0AF11EEADF4C774775412E6.roa
Signing time: Wed 21 Feb 2024 11:52:31 +0000
ROA not before: Wed 21 Feb 2024 11:52:28 +0000
ROA not after: Sat 21 Feb 2026 11:52:28 +0000
asID: 61317
IP address blocks: 102.165.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3965 (0xf7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 11:52:28 2024 GMT
Not After : Feb 21 11:52:28 2026 GMT
Subject: CN=65d5e3ff-eaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:f8:57:54:ec:b9:d1:f3:c4:99:37:7a:ab:
47:bb:55:37:c3:c6:58:0d:a4:6f:d0:0e:d5:69:6f:
7e:68:f7:12:53:fb:9f:70:83:55:74:38:0f:e6:20:
c4:a6:5b:9a:de:7b:e0:8c:e8:18:58:32:01:8f:3e:
0f:24:2b:d7:b1:81:f1:4a:d0:ab:11:6d:e2:1c:d6:
b5:ca:69:8c:5f:a3:b9:b4:fb:68:f8:a5:17:b9:63:
53:61:9e:51:77:a0:bb:5d:38:8a:e2:6b:d9:78:41:
a4:24:95:2b:bd:e1:ac:56:2a:cd:1f:b0:6e:c9:40:
4e:dd:d2:b9:a9:8e:4c:29:1b:94:0c:78:f0:1d:d8:
de:14:f3:23:4f:93:37:c4:ef:57:09:dd:0c:51:2c:
36:0c:5b:05:51:f9:8b:f0:66:a5:ec:8d:cd:0f:a6:
08:04:93:04:8b:77:c2:b2:e4:a8:ba:c1:41:6c:5e:
c3:29:42:e1:19:77:8f:45:a8:c9:fb:0e:78:70:fc:
44:e6:42:fc:02:a5:15:97:84:85:90:03:24:f2:bb:
bd:e2:99:48:0b:3a:b4:36:f1:01:d3:6a:7d:da:12:
f4:16:83:f8:fe:50:27:fd:66:72:82:92:97:4f:5e:
dd:a3:b0:1a:32:03:3a:9c:9c:29:9b:9a:7f:70:81:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D5:25:3D:C9:26:4F:C2:8F:43:90:EB:C9:3D:64:CC:CB:74:64:88
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1522A02D0AF11EEADF4C774775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:da:48:a7:d0:59:dd:f0:50:b8:77:66:c7:89:b5:f4:44:cb:
c2:85:be:36:c8:e8:df:45:8c:29:1c:ca:96:2a:dd:85:18:39:
09:23:22:5e:41:b2:dc:a8:59:36:6a:b7:0e:e4:9b:bb:43:3c:
51:44:26:55:93:24:d3:cd:78:66:a2:90:4a:de:85:61:58:20:
94:14:61:a8:a3:b4:c2:e2:9a:b0:a1:24:6a:93:35:4c:11:e1:
ad:d4:7c:95:c9:dd:82:19:18:da:94:0c:73:a6:6f:bd:00:f1:
f3:aa:de:a0:b4:b7:85:64:ca:87:c6:4a:ec:f4:08:1a:4f:2c:
8f:6c:ab:f3:73:9c:5c:91:e3:82:82:96:d5:0a:5a:da:0b:ee:
83:18:91:77:0d:05:39:72:6e:b8:22:32:08:eb:9f:1d:a9:99:
59:b0:35:f3:d4:fe:cb:b3:de:5f:68:c9:4f:90:92:18:78:ee:
18:c0:9c:83:b7:8a:ef:e8:8e:40:e3:9e:3a:94:15:3d:22:89:
bf:b6:b9:24:cd:c7:46:8a:7a:e7:ef:cd:79:63:d8:c9:c2:58:
59:c9:f0:9b:aa:61:f9:c8:85:af:ee:06:e7:74:98:ab:9b:49:
5e:86:02:79:5a:47:4a:89:e0:ce:e9:77:6b:a9:1f:22:02:77:
02:b0:40:02
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD30wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDAyMjExMTUyMjhaFw0yNjAyMjExMTUyMjhaMBgxFjAU
BgNVBAMTDTY1ZDVlM2ZmLWVhYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCohvhXVOy50fPEmTd6q0e7VTfDxlgNpG/QDtVpb35o9xJT+59wg1V0OA/m
IMSmW5ree+CM6BhYMgGPPg8kK9exgfFK0KsRbeIc1rXKaYxfo7m0+2j4pRe5Y1Nh
nlF3oLtdOIria9l4QaQklSu94axWKs0fsG7JQE7d0rmpjkwpG5QMePAd2N4U8yNP
kzfE71cJ3QxRLDYMWwVR+YvwZqXsjc0PpggEkwSLd8Ky5Ki6wUFsXsMpQuEZd49F
qMn7Dnhw/ETmQvwCpRWXhIWQAyTyu73imUgLOrQ28QHTan3aEvQWg/j+UCf9ZnKC
kpdPXt2jsBoyAzqcnCmbmn9wgbRrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+NUl
PckmT8KPQ5DryT1kzMt0ZIgwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0IxNTIyQTAyRDBBRjExRUVBREY0Qzc3NDc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTwwDQYJKoZIhvcNAQEL
BQADggEBAKnaSKfQWd3wULh3ZseJtfREy8KFvjbI6N9FjCkcypYq3YUYOQkjIl5B
styoWTZqtw7km7tDPFFEJlWTJNPNeGaikErehWFYIJQUYaijtMLimrChJGqTNUwR
4a3UfJXJ3YIZGNqUDHOmb70A8fOq3qC0t4VkyofGSuz0CBpPLI9sq/NznFyR44KC
ltUKWtoL7oMYkXcNBTlybrgiMgjrnx2pmVmwNfPU/suz3l9oyU+Qkhh47hjAnIO3
iu/ojkDjnjqUFT0iib+2uSTNx0aKeufvzXlj2MnCWFnJ8JuqYfnIha/uBud0mKub
SV6GAnlaR0qJ4M7pd2upHyICdwKwQAI=
-----END CERTIFICATE-----
Generated at Sat May 4 02:37:58 2024 by rpki-client on console-fra.rpki-client.org