Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C74A8F8E27DF11EFB3E32FEF7CDC24C2.roa
File: C74A8F8E27DF11EFB3E32FEF7CDC24C2.roa (raw, json)
Hash identifier: UjPunMUF6okESvGOXhxoVXXGHwW4Yc+M4KxRmKPkhbI=
Subject key identifier: 86:F2:21:7D:82:79:62:74:23:F5:70:57:6F:48:7B:1C:96:6A:B0:76
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10D6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C74A8F8E27DF11EFB3E32FEF7CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:45:55 +0000
ROA not before: Tue 11 Jun 2024 10:45:51 +0000
ROA not after: Thu 11 Jun 2026 10:45:51 +0000
asID: 13213
IP address blocks: 102.165.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4310 (0x10d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 11 10:45:51 2024 GMT
Not After : Jun 11 10:45:51 2026 GMT
Subject: CN=66682ae3-af63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:99:9a:af:9a:41:2b:43:78:76:9a:a0:4e:
36:52:c0:24:5b:40:a0:5b:33:c8:a8:7e:4d:6e:16:
38:cf:e7:a6:a0:4f:f2:c9:f4:78:e3:51:59:ba:26:
e1:1e:74:fe:1a:42:f2:0e:d0:c5:ac:2e:3b:54:6f:
e0:e2:d1:c9:44:70:8c:e5:b8:bc:71:7d:29:09:b4:
52:45:17:ec:0a:8c:db:96:96:0b:d3:2f:7f:54:05:
5e:23:59:ac:ba:f3:83:4c:7e:f0:a4:ef:49:0b:4a:
27:29:a7:8f:d0:ee:ef:da:bb:8c:f7:39:30:a7:4b:
91:6f:95:2a:08:0d:ea:da:cf:0f:49:dd:e4:e3:2c:
14:a2:bb:64:81:c1:5a:53:cb:cd:38:aa:ec:ac:df:
bf:79:e8:c9:79:0e:fd:32:0a:c4:e0:c9:c2:6c:b4:
1f:89:3e:a5:8a:19:dc:ba:72:e3:39:e4:0e:46:26:
f3:7d:f4:9c:69:15:58:0f:28:ba:34:41:13:67:a1:
fe:31:89:9a:2e:43:29:e2:4d:58:c6:68:26:d2:3e:
cd:59:5e:98:1f:97:e8:b4:37:d3:87:d1:4b:cf:32:
43:ae:ea:68:3b:6e:41:b2:e4:01:d2:99:79:c0:de:
82:ad:4f:6d:4a:78:86:22:5f:45:a2:ba:13:d5:8b:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:21:7D:82:79:62:74:23:F5:70:57:6F:48:7B:1C:96:6A:B0:76
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C74A8F8E27DF11EFB3E32FEF7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.11.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6c:17:7b:35:36:0a:f8:d6:26:6e:85:88:57:fc:44:b9:68:
3b:35:f8:88:21:27:d4:05:d4:79:4b:fa:4e:66:8f:a1:83:e0:
f3:04:25:f2:f2:b4:6d:91:f0:ea:53:84:59:32:48:44:a6:07:
ce:63:45:d2:86:93:36:88:5a:45:37:6a:65:4e:69:c1:36:77:
c7:95:b5:0e:d8:33:52:bc:16:96:16:3d:a5:f3:3f:c1:c3:0e:
ad:a0:1d:34:7a:df:37:da:b8:13:2f:5b:8f:60:01:76:9e:bd:
68:00:af:67:af:51:37:47:6a:82:ac:94:4e:7e:d2:8a:58:7f:
50:6d:09:4c:d0:a0:c8:43:b6:20:80:f9:3e:4c:49:0b:8f:41:
52:da:60:d2:a6:ef:64:1e:67:a4:8a:8e:e9:c9:38:ca:95:03:
18:b1:69:dd:15:db:5e:69:88:a7:ec:41:45:61:f3:a1:58:8c:
b4:ed:37:ab:0a:70:ec:27:6c:ae:6f:a9:c3:b0:8c:8c:4f:c8:
eb:cb:04:61:12:bc:42:4f:aa:96:93:5b:20:da:2e:ac:a0:79:
d0:02:c6:49:57:18:6e:51:f9:e6:ef:b5:1e:6a:d4:5b:62:b8:
67:94:05:f8:5b:33:c7:f9:dd:1f:26:16:24:33:8f:00:18:9c:
c6:3d:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org