Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FCB86DB899C711EE84FEE45CD25BE465.roa
File: FCB86DB899C711EE84FEE45CD25BE465.roa (raw, json)
Hash identifier: NInFqy5Gq6oWmfEe2bnGygw28Ipwr+VUgDenEN1S5EE=
Subject key identifier: E0:92:53:F6:A8:B3:29:E1:B7:DB:F6:A6:4F:21:E4:4F:6B:4C:20:98
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E83
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FCB86DB899C711EE84FEE45CD25BE465.roa
Signing time: Wed 13 Dec 2023 14:57:51 +0000
ROA not before: Wed 13 Dec 2023 14:57:48 +0000
ROA not after: Tue 31 Dec 2024 14:57:48 +0000
asID: 397423
IP address blocks: 102.129.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3715 (0xe83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 13 14:57:48 2023 GMT
Not After : Dec 31 14:57:48 2024 GMT
Subject: CN=6579c66f-54b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:2e:d0:4b:2c:60:c9:de:6d:8b:6c:86:78:
a0:2e:3b:98:95:0e:65:02:8f:46:04:68:0e:f5:44:
7d:47:de:8c:9b:1c:9b:cd:e3:78:a2:11:f3:32:07:
e4:1d:28:94:03:52:12:03:95:c1:97:17:36:84:fc:
03:32:bd:16:f3:d2:ca:a9:4d:7c:a3:50:ca:b8:02:
ce:ee:11:73:50:99:48:f3:c9:9b:55:e4:c8:98:b1:
71:a6:57:d6:ca:0c:7a:ce:e4:ef:ef:93:4c:3f:e3:
b9:16:23:bd:a7:cf:b4:a7:5c:fa:2d:e1:e9:13:4f:
eb:9a:74:fa:d5:be:c6:63:ef:74:e6:d0:9a:6d:2b:
55:41:8f:d9:b5:5f:1a:a0:70:f7:f9:67:8b:a8:68:
0f:45:1f:b0:a1:37:45:4a:25:bf:6a:41:ba:9e:9a:
91:86:a7:a1:9a:f7:db:60:e3:77:94:11:57:24:1f:
7e:7e:8e:0b:f0:88:c5:f3:a6:0d:3b:fa:57:1c:64:
56:f8:f9:45:67:a9:0d:d3:d6:de:c0:ef:0f:01:52:
75:b2:3a:8a:0c:5a:ef:4e:f4:5c:c5:65:1e:1d:5b:
3b:66:0f:bc:2b:c9:dc:4a:6d:cf:8d:0f:80:42:81:
bc:73:97:e3:c3:6b:cb:bb:4a:43:37:2d:ff:35:9d:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:92:53:F6:A8:B3:29:E1:B7:DB:F6:A6:4F:21:E4:4F:6B:4C:20:98
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FCB86DB899C711EE84FEE45CD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.148.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ec:43:ed:0a:b4:a3:e6:46:d6:74:bd:6e:94:38:44:71:44:
03:bd:26:8e:e0:09:66:ad:fc:7b:75:bf:91:01:1a:5a:44:2c:
3f:41:41:22:f9:de:09:03:f3:6a:92:e4:37:09:db:cb:a4:1f:
4d:a2:d5:3a:dc:53:77:e8:02:54:4b:4e:d8:f5:4a:92:18:35:
8e:24:33:c7:38:b1:80:a3:ea:8b:db:a3:d0:bb:fe:a3:ed:d2:
ab:a5:fd:54:79:bb:27:a1:37:3d:56:ce:b7:36:93:f9:35:b9:
f0:f9:a5:69:dc:1e:6a:05:14:a6:5c:51:58:8c:9a:04:e4:d2:
38:2b:66:48:22:66:c2:bf:c3:6e:15:b2:ab:f1:b3:b2:dd:0b:
19:a8:d4:70:a1:27:47:11:57:8c:92:be:e7:4f:c5:34:3d:5c:
c6:0e:55:06:e9:f3:75:c7:42:12:d5:18:4e:de:d3:b7:21:20:
3a:bd:f6:f8:37:bd:a9:bb:17:95:1d:83:9f:01:2c:b0:d5:c0:
ee:15:21:18:58:83:03:52:0b:a8:23:74:50:bf:3f:39:64:aa:
a6:fd:59:1f:f3:c5:49:47:0d:26:60:1a:dd:a1:d5:0d:e3:85:
00:08:54:2d:f0:4d:cd:f6:47:9a:29:7a:83:40:b7:a9:a6:15:
15:1b:d8:5f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDoMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEyMTMxNDU3NDhaFw0yNDEyMzExNDU3NDhaMBgxFjAU
BgNVBAMTDTY1NzljNjZmLTU0YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHyC7QSyxgyd5ti2yGeKAuO5iVDmUCj0YEaA71RH1H3oybHJvN43iiEfMy
B+QdKJQDUhIDlcGXFzaE/AMyvRbz0sqpTXyjUMq4As7uEXNQmUjzyZtV5MiYsXGm
V9bKDHrO5O/vk0w/47kWI72nz7SnXPot4ekTT+uadPrVvsZj73Tm0JptK1VBj9m1
XxqgcPf5Z4uoaA9FH7ChN0VKJb9qQbqempGGp6Ga99tg43eUEVckH35+jgvwiMXz
pg07+lccZFb4+UVnqQ3T1t7A7w8BUnWyOooMWu9O9FzFZR4dWztmD7wrydxKbc+N
D4BCgbxzl+PDa8u7SkM3Lf81nUR7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4JJT
9qizKeG32/amTyHkT2tMIJgwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0ZDQjg2REI4OTlDNzExRUU4NEZFRTQ1Q0QyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgZQwDQYJKoZIhvcNAQEL
BQADggEBAK/sQ+0KtKPmRtZ0vW6UOERxRAO9Jo7gCWat/Ht1v5EBGlpELD9BQSL5
3gkD82qS5DcJ28ukH02i1TrcU3foAlRLTtj1SpIYNY4kM8c4sYCj6ovbo9C7/qPt
0qul/VR5uyehNz1Wzrc2k/k1ufD5pWncHmoFFKZcUViMmgTk0jgrZkgiZsK/w24V
sqvxs7LdCxmo1HChJ0cRV4ySvudPxTQ9XMYOVQbp83XHQhLVGE7e07chIDq99vg3
vam7F5Udg58BLLDVwO4VIRhYgwNSC6gjdFC/Pzlkqqb9WR/zxUlHDSZgGt2h1Q3j
hQAIVC3wTc32R5opeoNAt6mmFRUb2F8=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:22 2024 by rpki-client on console-fra.rpki-client.org