Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BCA27290DF9B11EEB934C794775412E6.roa
File: BCA27290DF9B11EEB934C794775412E6.roa (raw, json)
Hash identifier: 1DKTqe4OcVHValmdElzpaOSr2bVsLcP3HGtKe/pmFQk=
Subject key identifier: 7E:05:6C:8F:27:B8:4C:73:87:8B:98:47:1E:B2:F9:2E:3D:88:E3:18
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FC4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BCA27290DF9B11EEB934C794775412E6.roa
Signing time: Mon 11 Mar 2024 11:37:27 +0000
ROA not before: Mon 11 Mar 2024 11:37:24 +0000
ROA not after: Sat 14 Mar 2026 11:37:24 +0000
asID: 29802
IP address blocks: 102.129.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 11 11:37:24 2024 GMT
Not After : Mar 14 11:37:24 2026 GMT
Subject: CN=65eeecf7-41f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:0c:78:5b:cc:85:e3:09:b5:7f:ed:7f:31:
97:b5:66:d6:f0:a1:01:88:ce:63:bd:b7:99:8b:b3:
12:c0:82:8c:04:3f:72:2b:c7:e2:b3:41:47:35:3d:
95:e9:cd:26:0e:c3:de:dc:cd:4b:ad:50:1b:33:d7:
1d:36:12:8f:ac:22:ca:9c:ba:d8:c4:47:cd:92:da:
95:2a:82:42:a8:09:17:50:74:9f:b9:4d:cb:a5:63:
1f:97:d8:18:df:33:3e:b0:a3:8b:96:66:b8:d5:33:
47:8c:1d:55:91:fd:32:29:4b:b1:4c:7f:3f:98:a9:
c2:3d:04:cc:4d:50:68:b1:95:db:c5:0f:a0:9b:6b:
e0:87:cd:bf:69:71:ec:65:ea:92:c8:fa:97:b1:6e:
98:6e:56:38:19:1c:b4:27:70:0b:1b:3a:35:1a:99:
63:14:7a:8b:38:16:f9:fc:c4:6e:48:05:96:71:63:
cb:b4:e6:08:4d:1d:1c:2d:d1:4b:b0:59:7d:16:12:
f6:23:f1:2e:b5:4f:df:56:44:eb:24:03:53:b4:46:
79:17:12:f6:1c:da:ed:5c:bb:a0:57:20:2c:cf:5b:
a7:62:e4:8e:b7:57:32:f8:97:94:06:81:e8:d7:35:
80:38:31:a4:bb:ab:8e:4a:a7:2d:35:cf:53:b2:88:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:05:6C:8F:27:B8:4C:73:87:8B:98:47:1E:B2:F9:2E:3D:88:E3:18
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BCA27290DF9B11EEB934C794775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:95:de:98:76:2a:d6:91:84:67:26:92:79:55:93:db:ce:70:
f4:77:b3:94:d9:bb:a6:88:08:9a:67:8a:44:81:c1:72:84:69:
77:ce:3f:cf:fd:53:40:07:32:ea:80:ae:48:7e:e3:ed:ca:83:
ee:66:e3:0d:96:b4:77:d9:a1:81:32:02:1b:76:b0:bd:18:80:
8d:55:63:b2:ed:07:32:7c:5b:e7:c8:31:a6:f1:9e:b8:8a:16:
8c:44:fd:36:68:f6:85:f8:f1:37:40:c3:7a:1c:3a:e0:a1:e8:
ed:64:d5:e0:12:02:02:70:09:ef:a5:8d:10:fc:d0:86:79:f7:
69:4c:46:a4:3b:dc:9d:9a:f1:22:77:1c:d3:5b:d5:cf:91:3d:
85:3a:ba:57:68:3a:e6:dc:6b:11:65:dc:ec:94:72:93:2c:6b:
52:bb:86:c7:84:af:55:a6:15:45:de:f6:72:f7:6b:ba:d0:6c:
d4:e6:16:87:57:9c:a8:e1:ac:3e:36:57:3c:53:41:19:7f:ed:
9f:97:ac:79:25:c5:82:dd:70:17:b6:0a:54:1a:fd:36:43:91:
c1:13:2b:46:43:99:04:77:b0:7d:f8:60:f5:6e:6d:6e:f5:32:
05:7b:07:9b:39:ac:c2:3e:0b:55:b9:00:0e:47:e3:2d:4f:9b:
63:0c:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org