Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F396EA1CA08911ED9EBA7BA0F1222468.roa
File: F396EA1CA08911ED9EBA7BA0F1222468.roa (raw, json)
Hash identifier: 06sHRTJHTVdYcZr4XzHz4hHbyFyJ54HUL2swkS1GM5g=
Subject key identifier: 8A:80:C7:0C:0C:63:02:0C:A4:F9:BE:58:EA:A9:93:EF:F4:E6:5A:55
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09F6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F396EA1CA08911ED9EBA7BA0F1222468.roa
Signing time: Mon 30 Jan 2023 10:36:28 +0000
ROA not before: Mon 30 Jan 2023 10:36:23 +0000
ROA not after: Thu 30 Jan 2025 10:36:23 +0000
asID: 200181
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2550 (0x9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 30 10:36:23 2023 GMT
Not After : Jan 30 10:36:23 2025 GMT
Subject: CN=63d79dac-e7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:34:e5:47:d7:80:b3:3f:fc:b7:d7:e9:68:
62:28:09:58:e5:a6:1e:75:e1:b1:04:16:b3:ee:4e:
c7:e5:0f:77:34:db:80:30:3d:f7:5d:30:71:06:9b:
91:98:8b:75:5b:95:a5:e6:aa:92:4f:fa:a8:27:b3:
ea:76:8a:76:3e:f8:2d:8e:9b:56:6e:dc:d4:65:57:
fb:77:84:29:88:d1:5f:2a:ed:07:ac:3f:3a:1c:4a:
31:dc:82:ee:96:70:07:47:84:ed:68:4b:8d:2f:c4:
e6:1e:5e:09:17:1a:38:8b:99:d4:86:9f:70:49:a2:
35:6e:28:8f:6b:36:47:15:8c:97:a0:0f:74:32:b0:
56:84:d9:f4:10:de:f2:6f:35:9f:59:80:af:7c:73:
6e:e4:f6:c9:bf:00:f2:0c:17:7b:17:5b:f7:8c:8b:
a3:00:ac:42:0e:aa:ef:06:d6:0a:fc:44:c6:50:2f:
e6:7f:6a:55:ce:dc:df:75:9d:10:6b:1c:54:55:ea:
b6:59:ad:c0:3c:e1:d7:4f:dc:18:83:7d:5e:4f:21:
7c:9e:ab:e0:ca:31:67:c3:d3:13:cd:3c:8f:0f:31:
27:1d:14:d9:4e:62:ac:0a:e1:aa:2c:50:72:e6:71:
8f:c4:dd:6f:ad:da:cc:fb:21:70:6d:42:19:4d:c3:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:C7:0C:0C:63:02:0C:A4:F9:BE:58:EA:A9:93:EF:F4:E6:5A:55
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F396EA1CA08911ED9EBA7BA0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a3:41:48:01:17:24:54:d9:ee:b4:a3:7c:96:d8:9d:6e:01:
04:d5:80:29:5a:73:79:b5:e3:08:56:5d:5c:e1:ab:20:e5:3c:
03:c4:ee:1b:7d:5a:2c:e7:10:57:f6:b8:7b:2c:9d:79:79:8e:
ed:b6:83:b1:c7:ba:e1:b9:87:5a:d9:17:06:e7:45:d7:fe:c5:
96:36:af:7c:ca:ac:dd:5f:ff:c3:a2:aa:79:d4:65:b0:a7:21:
86:96:77:e7:b1:2f:80:c0:d2:c5:2c:29:60:d5:80:55:ee:85:
ee:a7:da:d0:ca:ad:17:f8:a1:53:ac:99:d6:37:81:62:91:f5:
39:6a:42:0b:34:13:36:f2:c1:e3:6b:8a:ef:0f:09:84:20:6b:
5f:f7:76:ff:80:5a:cb:9f:32:49:fa:26:1f:3f:1c:80:b3:1f:
b5:9c:47:3d:02:63:b1:28:7e:b7:56:5f:ca:8c:cf:61:b5:dc:
c7:8b:5c:3e:16:96:ed:ac:86:31:c9:61:41:a2:64:a9:2b:fa:
21:f1:f2:53:c2:06:ef:11:74:67:25:50:d6:6b:86:26:3b:65:
f4:0f:b2:d1:d5:c8:9c:c7:b3:7f:2d:52:fa:e9:98:fc:7c:be:
21:90:45:a5:7e:ae:02:79:fb:42:db:28:5a:24:a8:03:6e:6c:
d2:bd:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:59 2024 by rpki-client on console-fra.rpki-client.org