Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C23F4C08CEF411EE8EF502A6775412E6.roa
File: C23F4C08CEF411EE8EF502A6775412E6.roa (raw, json)
Hash identifier: ZPeCGFvR+tCBLP5ktLOWms5FQ5P9l1YNcsr1xmuP4G4=
Subject key identifier: 3D:37:CD:F2:F3:91:F4:B1:89:0D:64:68:47:0E:62:9B:22:7C:AC:34
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F51
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C23F4C08CEF411EE8EF502A6775412E6.roa
Signing time: Mon 19 Feb 2024 07:01:52 +0000
ROA not before: Mon 19 Feb 2024 07:01:49 +0000
ROA not after: Thu 19 Feb 2026 07:01:49 +0000
asID: 62390
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3921 (0xf51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 19 07:01:49 2024 GMT
Not After : Feb 19 07:01:49 2026 GMT
Subject: CN=65d2fce0-5ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:37:c3:e8:96:18:1a:7b:b6:fb:d8:fb:f2:
e5:9f:38:75:a6:fe:70:d9:0b:7d:e5:2f:bb:7c:24:
fd:ca:a5:b3:ee:db:5c:72:30:3f:24:e7:cb:13:5f:
f4:df:bc:f7:15:93:46:02:59:6b:a5:83:cb:e6:52:
6e:27:f5:7a:c4:96:4c:60:67:59:51:3e:db:7c:78:
d1:1b:c6:f1:dd:bf:bd:bb:b4:9d:cf:15:ae:d0:8c:
f5:5e:33:1e:9f:03:10:94:d1:88:8a:aa:37:b9:7d:
ae:2c:a5:32:02:3c:fb:68:ea:ae:96:48:75:87:d6:
83:0b:e8:3a:21:d5:56:38:3c:54:03:d3:4a:bb:79:
99:5b:03:eb:6d:4c:83:fa:29:10:76:01:24:24:11:
9a:4c:19:03:92:61:b7:d1:24:17:d6:b5:02:1a:01:
36:e4:61:bc:89:3c:8d:62:a0:b5:54:bc:7d:bf:51:
a4:a2:d9:9d:b9:b8:3e:53:52:10:a4:94:98:92:d2:
ac:fc:25:b5:f1:d5:49:8a:ed:9d:6e:65:b7:5f:b7:
83:0d:e3:97:c5:9a:6a:65:f9:8e:bb:9a:ec:51:67:
a4:04:a0:43:c5:e1:a1:77:2c:29:f7:9d:4b:97:2d:
67:d1:03:b9:d6:2a:20:1b:13:ab:2d:d2:81:95:b3:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:CD:F2:F3:91:F4:B1:89:0D:64:68:47:0E:62:9B:22:7C:AC:34
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C23F4C08CEF411EE8EF502A6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
17:bf:44:2c:c2:ab:77:85:e3:97:0b:c0:2e:97:c0:06:38:fd:
cd:b4:64:40:df:fa:7a:8c:ef:bd:66:e3:a6:b3:28:e1:5a:3d:
3a:b5:58:26:61:8a:37:59:53:e5:fc:42:7c:0e:9e:de:e3:8f:
8e:26:b6:2c:c4:f8:cb:5b:56:1a:08:80:7e:90:bf:28:0f:8d:
0b:12:2a:47:7f:e6:bf:2e:8f:11:82:04:e9:6e:ea:5c:03:16:
c7:ed:90:05:7d:b2:89:f8:7c:59:9a:ca:23:1c:6d:96:73:97:
31:ee:b7:87:eb:f1:b4:8f:ba:4c:84:00:95:96:b6:f3:7f:a9:
bf:77:97:1a:06:1a:c8:cb:a4:9b:5a:af:fd:5a:eb:a8:be:a5:
7b:7f:56:19:eb:28:94:18:26:8e:08:e0:d0:5b:cc:6d:82:01:
36:a0:3b:e5:39:5e:5f:93:63:bb:e8:12:8d:a8:61:95:53:24:
5d:0f:e9:fb:dc:05:6f:36:8d:b0:41:50:e6:a6:54:a7:dc:5b:
32:91:a4:68:e3:c0:4a:01:da:2f:58:dd:6f:4f:f2:a9:b1:60:
3b:77:5f:f2:87:60:d5:18:84:0c:a5:eb:e9:0f:c4:49:64:5b:
ab:e4:4b:8d:55:9e:90:2e:d1:a7:1c:48:21:f1:4f:5f:47:da:
11:a4:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org