Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D65DA382B16911ED929B8691F1222468.roa
File: D65DA382B16911ED929B8691F1222468.roa (raw, json)
Hash identifier: PVSbjh7jlAEHi9U3hcaPRlAMTTrCfghiKtFmEVRhuxg=
Subject key identifier: B8:B6:0D:36:E5:64:0B:D4:E4:39:18:68:61:A2:BA:59:49:40:90:9D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A28
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D65DA382B16911ED929B8691F1222468.roa
Signing time: Mon 20 Feb 2023 21:59:24 +0000
ROA not before: Mon 20 Feb 2023 21:59:21 +0000
ROA not after: Fri 21 Feb 2025 21:59:21 +0000
asID: 7018
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2600 (0xa28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 20 21:59:21 2023 GMT
Not After : Feb 21 21:59:21 2025 GMT
Subject: CN=63f3ed3c-f16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:97:99:e9:0c:af:ed:48:f9:90:37:ab:73:
83:9c:69:6e:7d:7b:6a:20:f0:17:6e:a3:47:a8:01:
ee:f1:b3:72:60:68:34:86:41:b0:10:58:09:cf:8e:
c9:ad:0e:f0:4e:d6:16:ac:a8:66:f6:d9:e5:42:39:
fb:f2:94:2c:98:64:90:2b:6d:95:f7:77:ab:f6:80:
fb:dc:fc:4a:cb:ec:11:0a:cd:89:12:af:d6:30:58:
b0:d1:62:29:80:30:fd:fc:f0:08:fb:63:f6:77:31:
6b:f5:9d:d2:c4:6c:27:cf:2f:c7:3e:62:f3:42:1e:
3d:1d:49:6d:22:9c:0d:74:28:9e:10:d7:92:e9:4b:
7a:95:9f:84:73:b7:e4:65:78:78:59:87:5c:0b:1d:
6e:28:9d:f3:f4:bd:aa:57:35:e8:2f:df:f7:d2:39:
31:c8:c6:1a:35:33:e7:98:c8:54:02:8d:b2:4c:a9:
64:9a:33:5a:c7:43:47:ae:38:8d:e4:b4:a6:3d:01:
7c:18:37:4d:c2:bb:06:3b:a0:29:e9:55:b9:f7:42:
9b:cf:a5:89:2c:b8:00:ce:53:f6:5d:2e:bb:73:a6:
8d:09:88:ca:6c:b6:f3:3a:22:b8:a3:81:f0:05:9a:
b5:31:7f:22:50:ca:1f:dc:88:c0:cb:da:ea:05:1a:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B6:0D:36:E5:64:0B:D4:E4:39:18:68:61:A2:BA:59:49:40:90:9D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D65DA382B16911ED929B8691F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
03:60:64:7e:92:c1:ae:8c:e7:25:ea:4b:ee:38:1e:37:0e:c1:
ff:3c:e1:ae:c4:42:62:6d:8d:67:ad:09:a6:e7:e3:4c:c8:37:
94:25:14:1b:2f:84:5d:25:16:d6:32:38:52:39:ca:33:cb:1a:
0d:a8:e4:6c:5d:60:57:ca:9a:9f:68:ca:a0:de:f6:c0:0f:6a:
06:81:b8:fa:f6:32:29:8c:4a:67:e6:46:b3:7b:0b:a0:88:06:
cb:fd:2e:9c:48:08:20:83:aa:87:3b:1a:1b:f6:64:24:03:9c:
cd:9f:19:1d:f1:2a:67:d4:c9:5d:1c:59:df:44:1c:5e:32:c0:
0d:c1:c5:3e:b5:35:98:95:c1:98:22:89:a1:66:e7:ab:c2:ca:
47:5a:39:0a:67:ea:16:1c:07:23:63:b8:2c:be:99:52:e6:d6:
8d:ab:e7:c1:47:ec:ab:01:e1:0c:35:66:54:7c:11:47:ce:bc:
75:8e:71:15:97:01:f6:a3:36:4d:d9:80:40:c2:ac:12:c5:e8:
4e:33:16:0b:0f:94:3c:3d:6e:40:5c:5f:bc:d1:1d:c9:51:51:
5e:de:61:18:4a:2d:7a:d1:5f:ac:b1:f2:bf:99:d2:39:c2:68:
2b:73:2d:ff:a9:9a:df:0e:d1:33:fd:92:56:a2:f9:9f:76:60:
de:2e:99:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzAyMjAyMTU5MjFaFw0yNTAyMjEyMTU5MjFaMBgxFjAU
BgNVBAMMDTYzZjNlZDNjLWYxNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXZJeZ6Qyv7Uj5kDerc4OcaW59e2og8Bduo0eoAe7xs3JgaDSGQbAQWAnP
jsmtDvBO1hasqGb22eVCOfvylCyYZJArbZX3d6v2gPvc/ErL7BEKzYkSr9YwWLDR
YimAMP388Aj7Y/Z3MWv1ndLEbCfPL8c+YvNCHj0dSW0inA10KJ4Q15LpS3qVn4Rz
t+RleHhZh1wLHW4onfP0vapXNegv3/fSOTHIxho1M+eYyFQCjbJMqWSaM1rHQ0eu
OI3ktKY9AXwYN03CuwY7oCnpVbn3QpvPpYksuADOU/ZdLrtzpo0JiMpstvM6Irij
gfAFmrUxfyJQyh/ciMDL2uoFGngDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUuLYN
NuVkC9TkORhoYaK6WUlAkJ0wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0Q2NURBMzgyQjE2OTExRUQ5MjlCODY5MUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfQwDQYJKoZIhvcNAQEL
BQADggEBAANgZH6Swa6M5yXqS+44HjcOwf884a7EQmJtjWetCabn40zIN5QlFBsv
hF0lFtYyOFI5yjPLGg2o5GxdYFfKmp9oyqDe9sAPagaBuPr2MimMSmfmRrN7C6CI
Bsv9LpxICCCDqoc7Ghv2ZCQDnM2fGR3xKmfUyV0cWd9EHF4ywA3BxT61NZiVwZgi
iaFm56vCykdaOQpn6hYcByNjuCy+mVLm1o2r58FH7KsB4Qw1ZlR8EUfOvHWOcRWX
AfajNk3ZgEDCrBLF6E4zFgsPlDw9bkBcX7zRHclRUV7eYRhKLXrRX6yx8r+Z0jnC
aCtzLf+pmt8O0TP9klai+Z92YN4umeQ=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org