Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78287C02C5D11EE85EF985F4AD9E6FC.roa
File: F78287C02C5D11EE85EF985F4AD9E6FC.roa (raw, json)
Hash identifier: CT4f87eKu7QP6xXYzuQ88piljLTvmEozBD5RaMHg6YM=
Subject key identifier: B0:22:1A:A2:DE:17:9C:80:74:B7:8E:AD:2C:41:18:E1:9D:45:80:3B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C9F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78287C02C5D11EE85EF985F4AD9E6FC.roa
Signing time: Thu 27 Jul 2023 09:14:19 +0000
ROA not before: Thu 27 Jul 2023 09:14:14 +0000
ROA not after: Sun 27 Jul 2025 09:14:14 +0000
asID: 212335
IP address blocks: 102.129.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3231 (0xc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 27 09:14:14 2023 GMT
Not After : Jul 27 09:14:14 2025 GMT
Subject: CN=64c2356b-4f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:7e:b5:f8:03:4f:d0:d8:31:3d:74:b9:64:
c2:53:b7:0e:3b:54:09:82:2f:be:82:5e:b1:f3:c6:
d7:8e:7e:4e:1c:d0:9e:d9:95:4a:b2:62:0c:a1:7a:
9b:b3:29:d4:9e:b0:4d:86:f6:37:ff:79:91:4a:d6:
34:33:73:25:d0:24:e1:00:77:6f:f2:63:04:49:6c:
c7:33:f4:7d:7b:83:8b:1e:a9:ff:69:62:31:e1:3c:
ec:c8:a1:7c:a4:9e:9a:0d:95:70:16:87:b2:c6:a7:
6d:83:43:b2:7d:a4:c0:42:86:de:d2:d0:1b:53:70:
67:12:60:02:53:a5:d0:06:eb:66:c2:58:a3:d0:9c:
49:15:f3:69:c3:97:0d:fd:06:0a:24:f2:34:61:f8:
76:88:0f:e8:7a:e8:0f:76:9e:85:69:46:9f:1c:51:
d4:b4:cb:48:7a:33:66:2e:32:19:25:90:f2:45:fa:
5c:7f:74:b6:70:5d:aa:a4:16:e9:d0:a8:80:96:ac:
73:d2:30:bd:85:b4:88:ab:da:66:5a:16:9d:21:47:
42:a3:ac:93:3f:f0:26:ed:d3:e4:e9:02:ee:35:6f:
7f:af:17:8c:5b:f1:f3:de:61:8b:f8:7f:e2:f1:c7:
5f:bc:75:e3:2d:ff:f8:d3:44:e0:eb:e4:b4:5d:e8:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:1A:A2:DE:17:9C:80:74:B7:8E:AD:2C:41:18:E1:9D:45:80:3B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78287C02C5D11EE85EF985F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.187.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e9:67:63:e5:c4:21:75:b9:9a:85:ba:11:36:dc:d4:12:e1:
72:e8:95:db:3c:ff:c4:11:b6:b6:9f:2a:dd:03:63:3d:ab:3c:
17:09:b3:5a:f1:e4:19:39:92:e1:7f:7d:57:7b:22:a6:0d:ba:
82:01:51:f7:7b:69:b4:2c:63:a9:9a:f8:1a:a3:38:5c:37:32:
5c:3e:df:7f:bf:17:cd:fa:ba:7c:ad:ca:62:99:d9:fe:e8:d8:
f1:32:5a:3e:5a:0b:b2:d9:d0:1f:79:20:08:d7:ae:c6:ed:db:
13:89:92:f3:6e:a3:29:5e:65:76:9f:60:50:14:ed:4d:f6:8d:
02:c5:76:83:6d:1c:b0:b6:d1:d1:c8:1d:9b:3e:6d:ff:9c:96:
a3:c8:5d:82:22:50:89:0a:94:69:4a:d3:e4:d3:70:3e:f3:f8:
3c:ff:0c:2e:d2:c6:ec:18:db:08:ac:b5:a3:f3:d0:f1:fa:f8:
62:70:b0:53:ae:0a:f7:b0:9e:7b:e2:24:5b:4e:67:f6:a7:06:
65:1c:03:00:2f:b6:81:9d:c3:df:59:d9:28:11:c1:09:97:ac:
ed:98:c9:17:10:a9:48:57:b5:b6:9a:ca:c8:33:fb:92:ab:28:
47:65:62:13:d6:1d:ac:31:12:1b:9f:09:e2:7e:84:2d:60:dc:
ad:db:6a:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA3MjcwOTE0MTRaFw0yNTA3MjcwOTE0MTRaMBgxFjAU
BgNVBAMTDTY0YzIzNTZiLTRmNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzAH61+ANP0NgxPXS5ZMJTtw47VAmCL76CXrHzxteOfk4c0J7ZlUqyYgyh
epuzKdSesE2G9jf/eZFK1jQzcyXQJOEAd2/yYwRJbMcz9H17g4seqf9pYjHhPOzI
oXyknpoNlXAWh7LGp22DQ7J9pMBCht7S0BtTcGcSYAJTpdAG62bCWKPQnEkV82nD
lw39Bgok8jRh+HaID+h66A92noVpRp8cUdS0y0h6M2YuMhklkPJF+lx/dLZwXaqk
FunQqICWrHPSML2FtIir2mZaFp0hR0KjrJM/8Cbt0+TpAu41b3+vF4xb8fPeYYv4
f+Lxx1+8deMt//jTRODr5LRd6Fd9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsCIa
ot4XnIB0t46tLEEY4Z1FgDswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0Y3ODI4N0MwMkM1RDExRUU4NUVGOTg1RjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbswDQYJKoZIhvcNAQEL
BQADggEBAJnpZ2PlxCF1uZqFuhE23NQS4XLolds8/8QRtrafKt0DYz2rPBcJs1rx
5Bk5kuF/fVd7IqYNuoIBUfd7abQsY6ma+BqjOFw3Mlw+33+/F836unytymKZ2f7o
2PEyWj5aC7LZ0B95IAjXrsbt2xOJkvNuoyleZXafYFAU7U32jQLFdoNtHLC20dHI
HZs+bf+clqPIXYIiUIkKlGlK0+TTcD7z+Dz/DC7SxuwY2wistaPz0PH6+GJwsFOu
CvewnnviJFtOZ/anBmUcAwAvtoGdw99Z2SgRwQmXrO2YyRcQqUhXtbaaysgz+5Kr
KEdlYhPWHawxEhufCeJ+hC1g3K3bar4=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org