Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/639AE8B6E86611EEB144AA8E775412E6.roa
File: 639AE8B6E86611EEB144AA8E775412E6.roa (raw, json)
Hash identifier: M5S4GLMr/WmxbKEYuskD5ckLycDfW3qfJgp950CD6Kw=
Subject key identifier: 2A:0D:DE:A0:D6:F0:D2:EB:CF:33:6A:97:B8:F1:91:F8:FA:71:DB:84
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1007
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/639AE8B6E86611EEB144AA8E775412E6.roa
Signing time: Fri 22 Mar 2024 16:08:15 +0000
ROA not before: Fri 22 Mar 2024 16:08:11 +0000
ROA not after: Sun 22 Mar 2026 16:08:11 +0000
asID: 29802
IP address blocks: 102.129.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4103 (0x1007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 22 16:08:11 2024 GMT
Not After : Mar 22 16:08:11 2026 GMT
Subject: CN=65fdacef-c458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:0d:86:61:4e:16:be:96:17:09:96:1f:9d:
65:0a:ec:26:d9:2c:1f:af:68:cb:ec:7e:ef:76:4b:
80:08:f6:31:dd:6f:4a:93:62:d3:7e:73:b1:a6:27:
84:ef:65:a4:c0:8b:a8:83:56:7e:14:ba:4f:bb:6e:
52:f3:e5:ff:df:67:9d:63:7b:0c:51:4e:7a:96:0c:
86:43:b6:82:38:8a:bb:d9:c6:40:26:74:25:c1:76:
14:b0:1f:ba:07:eb:07:d4:e9:c6:3b:17:a4:78:66:
11:b7:ea:08:3e:d3:be:e9:19:9e:bb:c3:3b:81:54:
55:38:b3:e9:20:75:b6:7c:2f:5a:2c:e2:15:69:8c:
e5:73:de:2a:60:dc:2f:a7:ba:37:ae:aa:4b:f6:ec:
ea:f6:ee:b6:5f:dd:dc:d6:0e:81:a1:14:dd:4a:9e:
3c:bb:28:31:cf:7c:c6:bc:dc:c6:b8:6a:b3:13:5e:
4e:a5:70:f2:ca:86:3c:f4:39:9a:f8:f1:88:17:46:
b2:5f:fb:00:2d:63:05:20:48:5e:17:d8:41:d8:b8:
e2:a8:77:40:d9:78:07:c3:e2:87:66:88:50:65:60:
06:fe:e5:1f:55:b4:75:3b:8e:f1:6c:da:77:c8:80:
07:ba:fe:49:d3:b9:23:73:57:20:c8:dc:ce:ca:c8:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0D:DE:A0:D6:F0:D2:EB:CF:33:6A:97:B8:F1:91:F8:FA:71:DB:84
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/639AE8B6E86611EEB144AA8E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.144.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:99:3a:d5:3c:0a:da:66:89:b0:c0:67:91:69:2d:70:c3:d4:
74:d5:d1:6c:f6:0e:84:63:16:73:8d:6a:18:79:25:e6:2f:93:
ad:51:33:9a:37:07:9b:99:ab:14:e9:a9:8d:86:83:5c:49:ce:
b9:aa:88:7a:5a:dd:1e:0b:02:28:ba:a7:39:13:2e:16:0c:52:
eb:28:d2:0d:02:d9:28:81:cd:8c:85:76:e0:d8:4d:fd:30:a0:
c8:0b:24:fd:b3:13:8a:ea:c4:7a:d6:bd:0d:38:59:2d:0a:a8:
74:f8:db:12:08:84:dc:8b:16:f0:57:3e:fe:3f:3a:89:58:14:
86:70:cc:fa:92:56:de:b5:71:1b:50:59:ba:95:1d:5e:48:0e:
88:9b:be:3b:0c:7a:d5:8e:12:cd:65:9b:24:ae:cc:91:86:77:
21:3e:be:b9:5a:5c:af:11:1d:f6:e0:a6:27:42:a0:46:8a:3e:
2b:20:f4:ae:fc:ac:2e:b9:5b:94:7a:83:90:d3:e9:a7:44:12:
bf:a3:d8:20:dd:40:14:00:43:23:f7:db:32:70:c6:bc:3b:44:
e2:9b:2e:46:89:83:17:07:b2:45:66:94:50:5f:18:a2:6b:98:
26:bf:ab:99:fd:b5:d0:a3:5b:54:74:8a:df:30:25:3c:5f:88:
a9:bc:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org