Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/62B56E26E78F11EEA80D127D775412E6.roa
File: 62B56E26E78F11EEA80D127D775412E6.roa (raw, json)
Hash identifier: 93rO9MwOCSdGr/wXAwdAPUdW2hr95YAaxpIy2RQbmwc=
Subject key identifier: 2E:2E:35:7E:44:29:F4:C5:C6:86:B9:19:29:BE:27:A7:3D:49:C7:05
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FEF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/62B56E26E78F11EEA80D127D775412E6.roa
Signing time: Thu 21 Mar 2024 14:29:12 +0000
ROA not before: Thu 21 Mar 2024 14:29:08 +0000
ROA not after: Sat 21 Mar 2026 14:29:08 +0000
asID: 29802
IP address blocks: 102.129.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4079 (0xfef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 21 14:29:08 2024 GMT
Not After : Mar 21 14:29:08 2026 GMT
Subject: CN=65fc4438-52c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:9c:89:cd:4e:b8:90:b3:b3:d7:ad:6b:c3:
80:9a:66:98:dc:f1:fd:70:c9:05:bc:ef:ff:ab:66:
39:bc:76:e4:5d:c6:5a:1f:ab:e6:e8:ff:14:64:f6:
0d:d8:c1:55:f8:ca:af:c1:aa:bc:75:32:7b:70:cb:
0f:e6:25:e3:ad:96:f5:c3:5f:3b:8d:35:b3:b4:ff:
24:7d:48:aa:1d:04:bf:5e:68:f8:15:b8:bc:fb:2f:
77:a2:bb:c7:91:99:78:c6:7f:f2:58:57:67:c3:e0:
8d:c2:d9:29:e5:10:e6:9d:73:f9:89:e9:08:c1:9d:
cb:fe:cb:59:1d:79:d2:b3:b1:2b:a1:45:0e:5d:83:
70:e6:4a:f7:b5:b8:a6:f0:b6:9d:ca:ec:41:33:58:
9d:c5:b2:11:7b:43:ee:9f:de:bb:94:02:be:ce:65:
75:30:0e:96:39:ed:ff:d7:ed:40:77:9a:1b:cf:2c:
b7:77:be:1f:88:b4:1d:a2:df:73:71:bc:da:51:d1:
dd:ea:b4:de:25:1c:45:7c:be:2d:fa:3a:1a:86:ef:
1f:8e:b7:77:f9:8a:06:8a:85:88:68:3c:53:d9:28:
38:20:7d:5b:a8:d6:d2:c3:bc:24:f3:3d:d6:99:bd:
84:c3:d1:d3:d0:e8:93:21:d6:f3:86:5d:8b:67:28:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:35:7E:44:29:F4:C5:C6:86:B9:19:29:BE:27:A7:3D:49:C7:05
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/62B56E26E78F11EEA80D127D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.249.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:24:a0:85:d4:8c:1b:84:36:38:2c:d6:ca:a8:9e:0a:29:45:
fb:b8:0f:f2:4b:b2:9b:b9:15:ad:b2:d1:99:89:2c:c9:0d:21:
f7:5d:9a:7a:76:c8:b3:1e:5f:47:03:f0:e1:3f:b3:ed:8c:54:
a5:45:a6:36:0a:05:e8:d4:9e:a1:82:40:36:59:03:55:27:48:
76:86:b0:d1:c7:e1:15:e5:45:57:2e:5e:95:c6:c8:be:f1:50:
fb:ca:e1:ee:26:2c:de:8d:be:12:4b:3e:fd:4c:e7:e1:b6:2f:
28:03:91:57:7f:f8:3c:b4:fb:0a:be:3c:1a:9a:85:8f:a9:cf:
f5:38:ab:0e:98:08:a6:fe:1a:d7:13:3a:f2:3e:4a:65:f3:ac:
57:7c:ea:a4:40:56:2d:aa:17:e9:3d:fe:02:74:bf:31:1c:42:
8b:66:00:e2:93:c3:6b:69:61:74:be:28:a0:5c:39:79:2d:f0:
06:79:b4:c7:9e:b3:ca:5a:3d:33:b3:a0:c1:8e:34:ef:cd:2c:
b5:33:d8:d8:c7:8f:2d:cf:5a:c0:b9:0d:f5:f2:72:ce:c9:1d:
7c:6f:30:00:e1:ce:87:98:2a:b7:44:23:ab:08:0c:de:62:45:
22:f7:9a:ae:df:65:1b:03:81:07:61:14:37:58:f9:8d:d7:76:
78:85:f8:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD+8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDAzMjExNDI5MDhaFw0yNjAzMjExNDI5MDhaMBgxFjAU
BgNVBAMTDTY1ZmM0NDM4LTUyYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfzJyJzU64kLOz161rw4CaZpjc8f1wyQW87/+rZjm8duRdxlofq+bo/xRk
9g3YwVX4yq/Bqrx1Mntwyw/mJeOtlvXDXzuNNbO0/yR9SKodBL9eaPgVuLz7L3ei
u8eRmXjGf/JYV2fD4I3C2SnlEOadc/mJ6QjBncv+y1kdedKzsSuhRQ5dg3DmSve1
uKbwtp3K7EEzWJ3FshF7Q+6f3ruUAr7OZXUwDpY57f/X7UB3mhvPLLd3vh+ItB2i
33NxvNpR0d3qtN4lHEV8vi36OhqG7x+Ot3f5igaKhYhoPFPZKDggfVuo1tLDvCTz
PdaZvYTD0dPQ6JMh1vOGXYtnKJyDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULi41
fkQp9MXGhrkZKb4npz1JxwUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzYyQjU2RTI2RTc4RjExRUVBODBEMTI3RDc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfkwDQYJKoZIhvcNAQEL
BQADggEBANEkoIXUjBuENjgs1sqongopRfu4D/JLspu5Fa2y0ZmJLMkNIfddmnp2
yLMeX0cD8OE/s+2MVKVFpjYKBejUnqGCQDZZA1UnSHaGsNHH4RXlRVcuXpXGyL7x
UPvK4e4mLN6NvhJLPv1M5+G2LygDkVd/+Dy0+wq+PBqahY+pz/U4qw6YCKb+GtcT
OvI+SmXzrFd86qRAVi2qF+k9/gJ0vzEcQotmAOKTw2tpYXS+KKBcOXkt8AZ5tMee
s8paPTOzoMGONO/NLLUz2NjHjy3PWsC5DfXycs7JHXxvMADhzoeYKrdEI6sIDN5i
RSL3mq7fZRsDgQdhFDdY+Y3XdniF+Aw=
-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org