Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA2305ACB16A11EF80ECF242762E951A.roa
File: FA2305ACB16A11EF80ECF242762E951A.roa (raw, json)
Hash identifier: LZAOR4PTNNAu3Eijft3K3xejAta/p6Bm1AOJwEngm+k=
Subject key identifier: 3C:A0:7D:06:03:49:65:89:27:F9:28:B7:B4:60:C9:AC:38:79:02:1E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1304
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA2305ACB16A11EF80ECF242762E951A.roa
Signing time: Tue 03 Dec 2024 11:37:29 +0000
ROA not before: Tue 03 Dec 2024 11:37:25 +0000
ROA not after: Thu 03 Dec 2026 11:37:25 +0000
asID: 397423
IP address blocks: 102.165.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4868 (0x1304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Dec 3 11:37:25 2024 GMT
Not After : Dec 3 11:37:25 2026 GMT
Subject: CN=674eed79-8fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:04:2c:31:9d:42:62:1d:1d:5c:68:3b:09:
7b:4e:4f:2a:d2:d5:e0:80:11:64:b4:bc:9d:f2:9f:
23:fb:28:42:a1:ef:e2:5a:f1:15:cb:9b:be:3f:2a:
f7:46:1d:ad:7c:be:31:26:b4:6b:3c:2a:0b:06:5d:
c1:71:94:cd:d2:2f:8d:03:12:02:ea:35:27:ad:81:
cf:9a:21:44:a3:d0:88:f4:60:53:96:74:4c:61:d5:
00:37:21:af:3a:1a:19:07:3b:64:7b:a5:c4:0c:5b:
63:86:fd:61:02:a1:99:b1:3c:f5:20:ef:28:2d:c2:
e7:30:35:9b:17:1d:ce:99:db:da:c8:ac:37:84:7e:
8c:fa:fb:46:e4:a8:f7:35:76:f3:97:7d:16:41:dc:
5a:4b:97:98:10:97:27:f2:a9:d2:c3:fc:3a:db:3a:
ce:26:25:5f:83:1e:79:97:69:8b:57:b6:d8:11:ef:
71:aa:7a:bf:e2:5a:39:29:ec:71:eb:31:c2:87:23:
c1:4a:f6:95:48:e5:8a:d9:3f:f1:ab:20:91:aa:a2:
91:fb:92:f3:f8:49:0d:88:b1:76:65:47:ad:84:db:
96:bd:c1:ab:93:54:1d:b1:0a:6e:2c:9a:24:78:b7:
2d:d9:bc:c7:5c:db:08:f7:22:c4:de:37:65:1a:76:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:7D:06:03:49:65:89:27:F9:28:B7:B4:60:C9:AC:38:79:02:1E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA2305ACB16A11EF80ECF242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.14.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a6:9e:3a:1c:31:4e:f9:e9:53:f9:53:c8:6d:3b:2d:9a:1b:
e2:c9:e6:b7:7c:25:a1:89:24:75:44:9e:6f:2e:fb:7a:74:c0:
34:2b:d1:b4:6c:ac:a7:4f:ed:cb:cd:93:f8:65:9e:ef:ea:52:
fd:21:80:50:d5:bc:04:8a:96:14:c5:ff:96:d5:bb:03:e8:c2:
75:87:46:e7:8a:86:80:c6:06:c1:58:d5:20:c0:8e:d1:06:9c:
14:d0:0e:32:3c:0e:8b:c0:4c:7d:64:7f:8b:5f:d8:b2:ff:5b:
a3:8d:f2:89:69:01:1f:d9:98:52:e7:6b:66:db:ae:05:ea:62:
3c:ce:bd:07:df:ea:cc:10:c0:5c:ee:96:65:f2:fd:07:cc:b1:
fb:f9:4d:10:de:a2:e0:6a:81:77:88:82:66:20:90:3f:08:80:
14:12:7f:23:b5:57:4f:03:dd:cb:7b:88:0a:5b:2b:cd:c9:65:
6b:cb:c8:f0:1f:59:ec:17:6c:26:02:8a:6d:c6:d9:b7:ae:58:
04:f7:b5:37:67:7d:03:f5:31:67:70:29:7b:a5:8d:3d:f3:c5:
56:35:0c:8a:05:64:e9:91:0c:f8:3f:26:0d:6f:85:78:45:de:
16:e4:4a:be:71:26:21:d3:92:ed:ac:bb:ed:b7:76:3e:7b:01:
59:fd:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:38 2025 by rpki-client