Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D20F222553811EDBEFCE2BBF1222468.roa
File: 5D20F222553811EDBEFCE2BBF1222468.roa (raw, json)
Hash identifier: pqkh87vUjkzH5z9WwISyF7yU4OHUacj4c2c3K5ZAP6c=
Subject key identifier: 8B:C3:F5:05:74:4A:99:F7:F9:95:5F:3C:E2:13:2E:69:DA:F7:7B:0A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0893
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D20F222553811EDBEFCE2BBF1222468.roa
Signing time: Wed 26 Oct 2022 14:13:29 +0000
ROA not before: Wed 26 Oct 2022 14:13:25 +0000
ROA not after: Sun 27 Oct 2024 14:13:25 +0000
asID: 9009
IP address blocks: 102.129.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 26 14:13:25 2022 GMT
Not After : Oct 27 14:13:25 2024 GMT
Subject: CN=63594089-009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:48:3a:5c:7e:58:0b:fd:40:45:54:1e:70:
7a:b6:06:d2:c0:8f:16:00:a0:a9:9a:55:88:6d:48:
ee:e2:d5:39:37:4f:c4:25:01:8a:15:15:52:bd:ff:
25:7d:44:a7:b5:d1:2a:63:d9:f0:6c:b1:84:f2:88:
5f:f8:48:2e:bf:e3:c5:f6:3b:71:30:cb:7f:f4:22:
8c:3c:ee:a7:59:42:6a:27:b5:91:06:28:a9:a9:fc:
3a:8c:70:fd:78:d3:3a:9c:81:2c:9a:ba:29:09:e5:
19:cb:28:a8:c2:5f:48:63:97:a8:92:e4:56:6f:0c:
5a:5e:71:f2:23:06:87:af:e0:ee:b3:fa:dd:fa:e1:
70:dd:e7:89:84:8b:e1:75:74:37:a0:2f:27:8f:8f:
6f:a0:58:5f:eb:5c:f0:b2:25:d0:3f:6c:b7:ae:59:
a3:9e:43:a6:31:c4:ba:5a:f4:fd:87:ec:cd:95:c5:
cb:1b:48:4c:2e:f8:ae:f7:4c:d9:22:25:99:b6:14:
ad:72:80:68:c5:c4:ad:1e:db:4b:f8:fc:6d:02:b2:
f8:a1:e2:31:c6:62:5e:25:dc:cd:ab:78:f9:c7:f3:
dc:c7:5c:94:b4:c9:bb:30:be:39:0d:de:d1:de:76:
71:0c:46:41:a0:a8:86:b2:72:fe:e6:b0:5c:80:fb:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:F5:05:74:4A:99:F7:F9:95:5F:3C:E2:13:2E:69:DA:F7:7B:0A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D20F222553811EDBEFCE2BBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.156.0/24
Signature Algorithm: sha256WithRSAEncryption
62:5e:3e:8b:bb:3f:d5:fc:ba:45:a4:d0:ab:ed:5f:46:95:19:
dd:0d:3f:5e:b7:5d:d6:03:ab:92:15:ea:51:23:15:66:88:ea:
64:d7:ea:e6:a4:9a:06:31:b5:98:0b:68:20:ba:16:4d:19:21:
bb:79:68:10:fd:67:38:0a:61:0e:46:34:bc:a2:ea:3a:8b:71:
08:7a:04:73:00:ae:81:64:e2:ae:d4:f8:34:a1:12:63:24:c3:
49:7b:f6:21:cb:cd:de:57:c2:67:67:d2:af:62:e4:8d:6e:17:
70:f9:a6:d7:88:ec:38:4a:2c:27:f8:bd:01:fa:79:3b:32:37:
98:27:6e:64:db:56:6b:74:f1:32:09:21:92:6c:6a:e2:ec:d1:
e7:f3:f3:91:44:ba:e2:d1:3b:38:31:d8:f0:4d:07:e8:7d:4f:
77:76:11:4a:4b:5d:64:44:f2:2f:7c:7a:f1:6e:3a:75:5f:fd:
04:d4:b0:e9:ae:a9:8d:4c:92:97:9c:45:d4:9d:e5:28:8d:b0:
6f:fe:6e:25:a7:ea:8e:84:b9:b1:1a:28:e0:1c:87:c8:69:a7:
76:e3:f9:45:66:fd:ac:4c:9d:e2:cb:7e:c4:75:54:4b:c0:65:
f1:cc:96:f1:cf:9c:b6:77:5a:d3:13:47:66:98:c3:b7:be:ec:
0c:8a:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:48 2024 by rpki-client on console-ams.rpki-client.org