Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FE96A0DCDC4D11EEB71C8FB2775412E6.roa
File: FE96A0DCDC4D11EEB71C8FB2775412E6.roa (raw, json)
Hash identifier: nEfxh9znUGdUOm33CsxaW/j+XE7OR94u/Kje9vYVGQw=
Subject key identifier: EB:61:30:3B:82:B2:A9:E3:A4:DA:DC:76:09:4B:0C:AC:B1:8E:BE:DA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FB0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FE96A0DCDC4D11EEB71C8FB2775412E6.roa
Signing time: Thu 07 Mar 2024 06:43:24 +0000
ROA not before: Thu 07 Mar 2024 06:43:20 +0000
ROA not after: Sat 07 Mar 2026 06:43:20 +0000
asID: 396982
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4016 (0xfb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 7 06:43:20 2024 GMT
Not After : Mar 7 06:43:20 2026 GMT
Subject: CN=65e9620c-94cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:40:bd:33:eb:69:86:fc:56:c7:5c:3c:27:
1d:25:d8:ae:91:9d:64:3c:2f:77:5a:6c:db:24:25:
8a:f7:bb:48:b5:1d:5d:fe:63:dc:6e:9a:c8:ef:06:
06:51:15:94:ca:6d:50:b8:1a:c1:19:2b:8d:00:c4:
14:ab:f6:be:85:ee:77:21:70:b7:74:1b:94:e0:bc:
9b:b9:9c:66:09:5a:e4:9f:24:d4:ea:16:a1:1f:cb:
f7:85:b9:ba:c3:ac:af:5a:a9:a8:c7:80:64:2b:5e:
5f:56:e0:bb:06:6f:cb:ce:e5:07:16:77:89:f2:68:
38:26:05:3f:e9:99:32:e2:79:0a:52:6e:1c:14:90:
fd:ac:a4:d4:aa:ba:f4:af:6d:9c:63:a4:1d:ad:4c:
9c:59:ab:5a:80:b5:a9:85:13:35:e8:c6:b1:7b:63:
30:f2:88:a0:78:6e:ba:40:bd:db:31:92:ee:9f:f1:
3a:dc:4a:db:82:c1:82:d6:d7:50:ae:78:65:75:66:
65:6f:74:18:d2:e0:c6:cc:9c:ae:94:c3:2b:6b:df:
65:ad:6a:1a:26:6b:ee:3d:db:59:b8:9d:09:38:e7:
68:02:f2:e1:95:73:04:e0:61:89:bc:36:d5:c1:e4:
55:06:2d:d5:e2:aa:0f:69:07:98:3e:cf:f2:62:31:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:30:3B:82:B2:A9:E3:A4:DA:DC:76:09:4B:0C:AC:B1:8E:BE:DA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FE96A0DCDC4D11EEB71C8FB2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b2:04:97:87:59:85:b9:0f:28:d4:72:8b:18:9f:9d:8b:c1:
66:e1:5f:fe:99:ef:03:a7:b1:f7:03:f7:da:91:d8:e2:f0:6f:
1d:ab:5d:b9:d7:1c:b8:a6:50:48:77:e4:43:90:ae:19:9c:65:
cf:21:62:d6:3d:2a:8f:de:95:3a:a9:9f:1c:a3:d4:da:61:3b:
3a:ec:aa:dd:ca:9e:4b:6c:8d:e5:71:77:12:6e:61:55:30:67:
ce:c8:5f:21:62:cc:84:88:44:11:2f:1e:e8:e8:66:e9:6d:10:
a1:58:37:11:2c:22:f8:ef:9a:8b:cd:10:18:ec:f5:88:5f:3a:
55:cd:59:36:1c:99:07:00:7a:39:85:af:75:d4:17:79:5e:44:
12:b3:95:de:31:86:c4:59:b9:30:10:0a:cb:60:ec:7c:9a:39:
ab:ba:a5:74:f6:d3:e9:71:04:d0:b3:5e:e8:c1:84:a5:35:17:
21:d9:a3:71:0a:d5:86:8d:dd:72:63:69:e3:75:bc:29:d9:ea:
21:84:b9:5c:b4:19:ab:fd:32:97:6b:8b:57:fc:27:16:30:91:
9e:f7:5f:54:aa:09:bd:22:19:ab:79:3f:09:b0:5d:62:39:6f:
9f:4a:ee:07:63:17:16:29:4f:18:9f:84:67:d7:20:35:1c:3b:
27:f0:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org