Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF35F1AC2BE811EEBDB4E4744AD9E6FC.roa
File: FF35F1AC2BE811EEBDB4E4744AD9E6FC.roa (raw, json)
Hash identifier: 6DfhILPrP+wpz6zIdYRYitcktQdTYEc8oD83a9w4GTY=
Subject key identifier: 08:C5:74:BB:CF:18:95:A8:0C:8A:30:F2:22:A8:C2:3D:55:38:6A:FD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C9C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF35F1AC2BE811EEBDB4E4744AD9E6FC.roa
Signing time: Wed 26 Jul 2023 19:17:01 +0000
ROA not before: Wed 26 Jul 2023 19:16:57 +0000
ROA not after: Fri 26 Jul 2024 19:16:57 +0000
asID: 211061
IP address blocks: 102.165.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3228 (0xc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 26 19:16:57 2023 GMT
Not After : Jul 26 19:16:57 2024 GMT
Subject: CN=64c1712d-3be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:cd:c0:2c:e3:89:6d:13:7b:9e:63:d1:bb:
69:29:a4:df:e3:85:d9:a6:95:9c:f6:42:fc:ae:50:
ae:46:33:dd:d7:22:78:47:09:bb:b0:1d:b5:ee:f4:
07:ca:6b:c8:c4:a7:14:66:32:e5:c0:2f:a2:59:e1:
e8:3f:3a:4d:af:88:38:f1:40:6b:18:e4:b2:23:46:
68:b3:5a:bc:cd:b8:8c:3f:91:f6:6b:09:0b:4a:3a:
70:70:4b:af:03:ee:1d:94:92:70:f2:09:38:7c:27:
ae:b4:ea:f5:c3:06:05:bd:34:23:b7:27:d5:5a:47:
54:e5:29:ad:b6:2c:47:b6:f1:fb:67:4a:64:ff:3a:
84:87:98:fa:86:03:32:48:27:60:7e:78:28:8a:2b:
3f:52:7a:e1:a7:8d:cc:f1:49:c4:a5:42:a6:11:01:
7e:0b:90:dd:a5:10:b1:4d:a7:f8:a3:10:2f:65:6d:
bf:47:7a:97:4a:27:be:3e:6c:ae:4c:64:96:b1:6c:
9b:9a:eb:8a:bf:c2:89:d1:7a:8e:6c:2f:35:f1:60:
1e:51:ec:86:3a:32:a6:9b:16:27:ef:15:79:6c:98:
e6:ab:d2:ef:3b:02:98:09:84:d6:fd:48:4c:dd:bc:
64:dd:d0:46:09:86:c8:75:a2:3d:97:a5:22:01:e0:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C5:74:BB:CF:18:95:A8:0C:8A:30:F2:22:A8:C2:3D:55:38:6A:FD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF35F1AC2BE811EEBDB4E4744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:13:05:44:4a:ff:82:55:d2:31:a6:30:da:ad:df:7f:3d:63:
7b:5e:f6:7c:49:c0:0f:15:6b:41:a1:82:06:3e:33:17:5f:16:
c2:8d:a1:55:19:6a:67:f2:77:ce:4f:e5:80:a0:94:17:8f:f8:
37:d6:3e:2b:07:71:ca:ac:6b:d6:85:cd:a6:ed:4c:d7:22:ff:
de:b1:d6:bc:e8:97:bd:83:96:93:7b:cf:9b:e2:93:1c:0b:c7:
c3:ee:68:36:74:11:fd:b1:0f:4c:71:89:58:71:78:cf:f4:28:
95:cb:64:13:64:89:8b:e9:75:71:c7:52:17:9b:bb:91:02:47:
81:71:33:e4:81:da:52:64:d7:7f:9f:7d:b5:d4:70:8a:c3:e1:
6a:04:f5:72:18:bf:d1:53:f0:aa:91:62:f5:b3:f7:a9:78:99:
0b:12:e1:c8:e8:52:ac:94:47:08:b6:db:18:1f:ec:6d:ed:e5:
32:62:b4:38:3a:84:2d:c4:fa:33:7c:dd:99:3b:a0:9a:e8:20:
11:36:f8:79:3d:45:55:8f:ab:2d:7e:68:38:c6:50:ed:8d:1a:
2d:0a:4b:b6:bc:05:58:e0:aa:90:6f:a0:1d:56:ac:83:3b:64:
f1:20:16:a9:e2:3b:de:26:f4:c4:33:1e:01:f8:19:e6:95:0a:
25:94:4a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:22 2024 by rpki-client on console-fra.rpki-client.org