Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0BD8C4E7BB711ED9FA036A3F1222468.roa
File: E0BD8C4E7BB711ED9FA036A3F1222468.roa (raw, json)
Hash identifier: t5lXBodvhJ1aXD/icXxOWc8NT2X1kzjUoYFp4zybfSI=
Subject key identifier: F7:33:F8:37:22:3F:0D:BC:61:32:1E:1E:5A:B3:3A:30:FA:EF:A2:7D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0957
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0BD8C4E7BB711ED9FA036A3F1222468.roa
Signing time: Wed 14 Dec 2022 14:02:00 +0000
ROA not before: Wed 14 Dec 2022 14:01:55 +0000
ROA not after: Sat 14 Dec 2024 14:01:55 +0000
asID: 397423
IP address blocks: 102.165.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 14 14:01:55 2022 GMT
Not After : Dec 14 14:01:55 2024 GMT
Subject: CN=6399d758-5cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:95:a5:bc:e4:b9:80:90:8c:1e:fe:84:60:
f2:f8:69:de:a2:cc:a4:88:a9:7b:47:56:68:be:bf:
ee:d4:ef:0e:a4:51:29:77:88:1f:c6:1a:d0:e9:ef:
55:52:c5:23:62:54:98:64:2b:b3:63:14:8c:ac:1f:
b6:cb:26:7a:75:d6:9f:0e:d3:83:d5:24:0e:b7:d9:
ed:84:27:52:a6:42:b3:36:05:08:cd:3e:78:d9:95:
f6:d0:08:56:76:76:42:a1:1d:59:ae:45:10:a3:bc:
bd:92:c4:9d:06:f0:a7:eb:85:e2:59:dc:fa:d9:d4:
3d:39:b7:9d:1e:c6:e9:41:68:47:f2:8b:90:03:5a:
bb:ca:cf:dc:b6:4c:b0:09:fe:b0:23:38:75:13:00:
06:54:dc:fa:84:6e:63:94:5c:f8:49:6a:69:e6:13:
c3:79:5f:df:4d:39:78:8b:c9:48:27:89:2e:3d:d2:
d6:c4:4b:55:55:02:59:f4:d3:ab:59:fc:02:ef:2b:
1b:e0:50:d9:ee:4a:ef:89:1e:26:d7:19:9e:9d:2c:
a3:57:9f:d7:61:fa:cc:a0:18:6c:f0:05:55:64:ad:
ed:13:26:b5:f5:65:7c:78:94:08:2a:7b:04:75:b0:
31:85:77:cb:69:0a:3b:e8:83:37:2b:2b:f6:00:c1:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:33:F8:37:22:3F:0D:BC:61:32:1E:1E:5A:B3:3A:30:FA:EF:A2:7D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0BD8C4E7BB711ED9FA036A3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3e:2e:32:5b:d7:d7:2c:c6:46:c1:af:24:ef:5e:55:65:43:
ce:34:70:0f:db:70:ba:e2:22:05:20:63:b8:77:2a:00:a9:88:
56:28:82:81:e8:ed:66:f9:1c:46:c5:e8:fe:76:ed:2f:f5:5f:
ef:ca:c5:12:83:26:6c:01:22:bd:e4:6e:03:b7:03:f5:9e:a8:
04:04:1d:bd:ff:ba:7c:3d:91:3f:21:3a:65:82:fe:b3:97:53:
51:ef:8f:01:79:78:59:82:d2:51:4d:cb:8c:4d:61:bd:81:9e:
1d:93:27:0e:b9:4e:6f:3a:b9:5b:fd:e8:69:7e:0d:ec:d4:3f:
37:a1:be:09:b5:96:a9:c3:59:11:61:95:03:f2:c5:5e:35:37:
15:95:9b:cd:3e:75:6f:5f:09:d1:60:ba:70:d0:7e:e9:37:82:
7c:f8:a8:f6:4f:21:99:f8:65:4b:60:aa:95:aa:5d:1a:02:a3:
cd:1b:4a:3f:a4:04:78:5f:7e:e4:63:22:98:8c:bb:61:47:cb:
38:5c:ed:46:3f:d9:1a:35:68:ab:23:cc:00:52:f9:c3:b3:57:
ed:a9:cb:3e:8b:52:75:c5:e5:3b:e8:6e:e3:b9:de:b3:f9:a7:
a3:f9:d4:c7:62:b6:86:1b:e0:39:e3:8e:dd:9e:5a:d1:f9:62:
ad:fe:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:42 2024 by rpki-client on console-ams.rpki-client.org