Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E51A9CFC1B4C11EE94EF90494AD9E6FC.roa
File: E51A9CFC1B4C11EE94EF90494AD9E6FC.roa (raw, json)
Hash identifier: xgvB57oMcyf0oZ0IbWxG1VRy4jOuSGwDS7lE/6LSJHM=
Subject key identifier: E4:E9:EC:3C:35:D8:FD:83:CF:96:41:44:6D:11:62:07:E2:58:3A:AF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C55
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E51A9CFC1B4C11EE94EF90494AD9E6FC.roa
Signing time: Wed 05 Jul 2023 15:59:17 +0000
ROA not before: Wed 05 Jul 2023 15:59:13 +0000
ROA not after: Wed 09 Jul 2025 15:59:13 +0000
asID: 212238
IP address blocks: 102.165.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 5 15:59:13 2023 GMT
Not After : Jul 9 15:59:13 2025 GMT
Subject: CN=64a59355-cc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:c2:36:99:26:5a:d5:59:c3:5b:e1:cb:08:
75:2a:82:78:a1:92:db:7d:dd:d7:99:97:15:4d:84:
ab:ba:13:53:f9:cd:3b:0f:3a:c7:47:98:87:8e:e2:
39:d0:24:87:b0:a3:b6:95:27:74:8d:b4:d6:81:48:
b5:65:1b:fd:df:7d:5e:83:40:e1:9e:28:cf:a4:ac:
da:27:3b:a0:36:0b:99:e4:82:76:42:fa:fb:b4:6f:
09:95:5a:47:d9:2c:c9:06:89:63:dd:b5:4b:7c:15:
ed:ba:06:ca:d3:66:83:ca:c6:1a:e7:71:97:66:23:
5f:65:63:49:57:22:e3:fe:64:23:02:2e:2b:67:1e:
03:13:27:1f:b1:79:54:bf:58:a4:40:e1:53:74:37:
dc:5c:a1:1a:fe:03:c3:26:fa:8d:b7:45:cf:21:eb:
f6:ec:44:0b:9a:1a:41:b7:ff:2c:af:ff:6f:4f:9c:
1c:29:2b:9f:b1:c4:19:25:61:e3:a5:14:2e:41:c3:
7e:af:46:b6:1b:8b:88:86:97:60:b5:6b:33:a5:0d:
75:cb:32:96:a8:58:63:12:81:14:6d:de:11:62:91:
f9:60:44:10:b5:96:35:f8:bc:60:ec:21:9d:ce:54:
f2:36:a4:d8:4a:55:54:09:63:3b:c0:b5:35:06:50:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:EC:3C:35:D8:FD:83:CF:96:41:44:6D:11:62:07:E2:58:3A:AF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E51A9CFC1B4C11EE94EF90494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.32.0/24
Signature Algorithm: sha256WithRSAEncryption
18:28:18:fd:71:be:ff:20:bf:de:73:51:21:89:56:88:3c:bd:
bd:64:c7:c3:b3:61:26:30:94:65:cb:a5:8c:41:9d:28:f7:31:
a3:34:87:fb:86:9d:bd:1b:d1:d7:87:5b:b6:3f:4f:a6:57:24:
35:63:43:7a:83:74:6c:a2:ce:f4:e3:8c:9d:e9:bd:b8:13:5d:
15:92:0d:22:ce:ed:4d:8a:fc:fe:cb:4f:5e:1d:62:c9:93:f2:
15:cf:c2:47:22:3d:41:7f:d1:b2:9d:8c:57:29:1f:bb:c9:72:
67:77:ea:df:0c:4c:59:a1:99:43:58:9d:cb:1d:36:ed:e0:17:
1c:1b:e9:34:2f:af:0f:4b:8c:dd:b1:16:dc:59:47:7d:c9:2f:
c4:76:34:15:1f:af:d2:73:5c:bd:e0:b9:45:75:57:dc:30:c2:
f1:68:1f:53:b7:48:39:75:c8:06:51:a0:88:2e:8d:5d:d4:97:
97:8b:16:e7:c6:5e:e4:36:fe:ed:29:47:f9:21:a9:c9:63:ba:
4f:7e:ba:1b:b5:4c:07:29:32:8e:b8:ef:1c:68:60:04:b9:55:
66:f0:88:01:5d:14:f1:e9:14:8e:34:63:00:32:05:86:13:76:
09:6c:3b:06:b8:a5:21:ed:f9:7f:84:3c:9b:9e:84:80:9b:f1:
94:45:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:13 2024 by rpki-client on console-ams.rpki-client.org