Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD1CD5F2B9ED11EEA7E7D296775412E6.roa
File: DD1CD5F2B9ED11EEA7E7D296775412E6.roa (raw, json)
Hash identifier: qIFp0IvvoMAqHgLLbLliYLIDAv933jRbdt2gbzk9/RA=
Subject key identifier: 12:E5:1D:21:CE:5C:3C:C9:76:E5:11:8A:E6:6F:A5:54:E8:91:6C:48
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F19
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD1CD5F2B9ED11EEA7E7D296775412E6.roa
Signing time: Tue 23 Jan 2024 12:49:36 +0000
ROA not before: Tue 23 Jan 2024 12:49:33 +0000
ROA not after: Fri 23 Jan 2026 12:49:33 +0000
asID: 212669
IP address blocks: 102.129.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3865 (0xf19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 23 12:49:33 2024 GMT
Not After : Jan 23 12:49:33 2026 GMT
Subject: CN=65afb5e0-3cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:65:40:e7:a2:ab:0a:46:b8:98:db:f0:bd:
5d:43:8d:fc:e0:a6:4d:00:3f:29:cc:b2:ed:87:a0:
69:10:b1:81:13:5f:fe:65:df:d0:3c:e1:60:c8:10:
0c:9c:20:3d:a5:78:e2:d1:e7:75:f1:a1:b1:13:7a:
fb:73:8d:1e:a3:df:76:57:7b:4f:69:d0:70:9b:48:
65:eb:05:85:54:34:97:5d:a0:f4:41:70:ea:d9:1a:
85:11:e7:b9:c9:ec:a5:97:00:43:8c:eb:06:58:ac:
e9:b9:b6:3a:c3:af:c5:8d:46:ea:f3:6d:94:ba:ca:
8b:2f:0b:e9:46:e8:27:10:e0:d0:a1:11:68:09:64:
3f:fc:67:fb:44:ce:d6:ed:37:38:25:ed:dc:2f:92:
d7:fc:c7:18:f5:56:b5:f3:0a:2b:95:4a:5b:91:ce:
bc:9b:b3:ee:5b:38:38:a3:18:7e:d4:27:50:8f:04:
b2:88:56:ff:88:37:25:8d:da:d0:0c:c9:b2:c9:95:
ce:b4:04:05:75:64:92:91:f7:57:de:5c:cf:2c:bb:
02:f5:6f:38:26:c9:d2:01:47:d8:73:4c:c7:a3:7b:
66:c8:3d:94:ee:25:3e:59:35:68:12:ef:68:88:43:
67:c3:f2:52:88:25:91:b5:4c:ee:ab:07:9f:b4:e9:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E5:1D:21:CE:5C:3C:C9:76:E5:11:8A:E6:6F:A5:54:E8:91:6C:48
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD1CD5F2B9ED11EEA7E7D296775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.149.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:79:06:a9:ec:4e:2a:21:f3:3f:62:cc:60:b9:04:e7:e7:5a:
9d:0c:d0:a7:61:81:e0:0c:9d:73:22:14:0a:2e:99:7e:ac:8a:
1d:d2:30:90:37:93:d6:e6:34:f5:26:bd:e3:e7:21:86:f7:d8:
7b:71:16:e7:40:54:f4:e6:d6:1e:21:67:7b:ad:72:b2:f6:fb:
76:77:cf:00:f2:4b:94:b3:fb:4d:0c:19:12:4e:69:1a:b2:7b:
28:b1:00:fe:bc:65:aa:b4:ca:86:bc:54:d6:d0:b9:46:31:ff:
bb:2a:82:61:47:26:cd:05:84:67:b4:10:b9:fa:a7:b2:d7:dc:
19:14:eb:f3:a8:b5:a1:8d:12:24:34:45:da:27:cf:40:2d:0b:
e2:03:d4:29:44:e1:ed:0b:b7:04:be:0f:c4:a2:7e:70:15:aa:
9e:b4:d3:55:e5:13:99:5c:08:95:88:f6:bf:2d:cd:df:ef:9e:
ba:09:36:e0:58:ad:aa:e6:c7:f2:72:81:71:d4:e6:65:be:10:
4a:70:02:16:dc:99:53:a7:a2:48:17:57:c4:52:cb:8d:0d:e2:
49:c2:7a:e8:fc:11:d8:93:ea:7f:56:01:4b:bf:8b:e8:6b:6f:
fd:95:da:cf:62:bb:bd:3b:f8:53:90:c9:03:bc:39:eb:4a:25:
58:cb:7f:b1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDxkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDAxMjMxMjQ5MzNaFw0yNjAxMjMxMjQ5MzNaMBgxFjAU
BgNVBAMTDTY1YWZiNWUwLTNjZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXqGVA56KrCka4mNvwvV1Djfzgpk0APynMsu2HoGkQsYETX/5l39A84WDI
EAycID2leOLR53XxobETevtzjR6j33ZXe09p0HCbSGXrBYVUNJddoPRBcOrZGoUR
57nJ7KWXAEOM6wZYrOm5tjrDr8WNRurzbZS6yosvC+lG6CcQ4NChEWgJZD/8Z/tE
ztbtNzgl7dwvktf8xxj1VrXzCiuVSluRzrybs+5bODijGH7UJ1CPBLKIVv+INyWN
2tAMybLJlc60BAV1ZJKR91feXM8suwL1bzgmydIBR9hzTMeje2bIPZTuJT5ZNWgS
72iIQ2fD8lKIJZG1TO6rB5+06e4xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEuUd
Ic5cPMl25RGK5m+lVOiRbEgwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0REMUNENUYyQjlFRDExRUVBN0U3RDI5Njc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgZUwDQYJKoZIhvcNAQEL
BQADggEBAMd5BqnsTioh8z9izGC5BOfnWp0M0KdhgeAMnXMiFAoumX6sih3SMJA3
k9bmNPUmvePnIYb32HtxFudAVPTm1h4hZ3utcrL2+3Z3zwDyS5Sz+00MGRJOaRqy
eyixAP68Zaq0yoa8VNbQuUYx/7sqgmFHJs0FhGe0ELn6p7LX3BkU6/OotaGNEiQ0
Rdonz0AtC+ID1ClE4e0LtwS+D8SifnAVqp6001XlE5lcCJWI9r8tzd/vnroJNuBY
rarmx/JygXHU5mW+EEpwAhbcmVOnokgXV8RSy40N4knCeuj8EdiT6n9WAUu/i+hr
b/2V2s9iu707+FOQyQO8OetKJVjLf7E=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org