Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F03E0D9CD0AC11EE98D86D70775412E6.roa
File: F03E0D9CD0AC11EE98D86D70775412E6.roa (raw, json)
Hash identifier: Zg5XgtegO1apOuzz8sbLvlAAdp/ruq4nsaVRR8NvgbI=
Subject key identifier: B8:46:34:42:2E:BC:BB:78:F1:99:22:CD:24:9A:CE:38:75:1A:CD:BD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F5F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F03E0D9CD0AC11EE98D86D70775412E6.roa
Signing time: Wed 21 Feb 2024 11:32:48 +0000
ROA not before: Wed 21 Feb 2024 11:32:44 +0000
ROA not after: Sat 21 Feb 2026 11:32:44 +0000
asID: 61317
IP address blocks: 102.165.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3935 (0xf5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 11:32:44 2024 GMT
Not After : Feb 21 11:32:44 2026 GMT
Subject: CN=65d5df60-0917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:39:8c:6c:ef:c6:57:dc:4c:8b:8b:e1:1f:
51:1e:60:90:5f:6f:e0:b8:fa:8e:3d:a6:2a:9c:06:
a4:6f:4e:a9:35:da:37:31:42:91:f1:22:f2:74:8c:
45:f9:91:62:56:93:8c:77:55:ec:e5:44:ed:64:b4:
a6:11:01:9c:e8:71:be:a8:ee:86:43:d5:a5:a2:89:
4f:39:89:d4:97:f8:86:52:2a:9a:fd:7a:62:db:fd:
c7:b4:3d:45:ca:a7:e4:4f:3a:89:ab:11:3b:bf:4f:
1a:ed:78:10:1c:22:be:18:38:27:b2:29:da:0c:e3:
bd:d6:1a:a8:de:e2:f8:28:64:78:7c:52:4a:72:77:
34:bd:d5:b2:0f:23:75:c7:5c:20:3c:bd:52:c2:b5:
ed:21:51:74:d5:f3:15:62:c0:48:92:0a:08:8c:c8:
a6:e5:e6:a2:3e:77:fd:70:23:1b:b1:e6:08:82:61:
a3:9a:b4:f8:e8:79:59:d4:e9:7f:cb:53:8f:24:ca:
5d:8f:52:45:29:fc:ef:97:51:fd:75:35:43:fb:44:
3a:8b:33:8b:e9:5e:78:8e:32:f7:ab:aa:35:96:3d:
31:90:e1:7f:56:4f:fa:d3:c4:51:75:53:30:3e:e1:
68:dc:9f:c7:86:b6:cf:37:2a:07:21:42:07:eb:58:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:46:34:42:2E:BC:BB:78:F1:99:22:CD:24:9A:CE:38:75:1A:CD:BD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F03E0D9CD0AC11EE98D86D70775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:6f:b3:f6:18:b7:5e:01:dc:3c:02:a9:6e:9d:a6:ae:b8:db:
91:71:1d:ea:ce:8d:39:4d:12:e0:a8:de:ba:36:ab:0e:f4:37:
39:67:ed:d4:0e:7e:11:68:2f:80:6c:25:fa:ce:f3:56:d2:99:
ba:90:6f:24:1f:87:dd:23:b9:bc:24:b6:99:cf:36:81:25:17:
1b:90:67:02:8f:49:a9:88:57:f3:a2:3b:5d:bf:db:99:a7:da:
b1:cb:0e:4b:c8:01:6e:df:34:83:d4:07:91:9f:b7:e3:a0:e5:
76:bf:6f:ca:4a:86:f4:4f:96:88:75:dc:17:28:23:d3:f7:63:
e8:37:ac:d4:1c:df:e7:36:a6:a0:62:df:03:de:23:9d:19:3f:
bc:01:d4:f1:64:77:3c:3a:e7:0c:b2:c8:cf:fb:6b:0d:2f:4a:
e9:20:f6:f6:cb:47:a0:50:26:ef:71:dd:7b:73:dc:85:aa:c5:
00:35:a0:b6:21:b2:51:72:ee:bd:8c:96:41:ff:fb:5b:bc:de:
c8:49:f0:20:eb:a1:79:14:63:1c:0d:15:35:69:41:c5:a6:7c:
13:50:a4:c4:d6:90:d1:74:c8:e8:e7:61:24:96:c1:7c:bd:53:
86:29:05:f5:fe:5f:5e:4e:30:3b:35:54:3a:4e:82:9d:6c:c2:
a3:16:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:42 2024 by rpki-client on console-ams.rpki-client.org