Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BF22B1A0907D11EEB129367AD25BE465.roa
File: BF22B1A0907D11EEB129367AD25BE465.roa (raw, json)
Hash identifier: bgaPD4K33LCBF7DdqoQZ3i9s+xLhi8CPl9xnoO45gMw=
Subject key identifier: CE:2A:3F:14:02:A3:C3:22:91:DB:B8:B7:67:4D:CE:2D:4F:2A:01:51
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E5F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BF22B1A0907D11EEB129367AD25BE465.roa
Signing time: Fri 01 Dec 2023 19:13:45 +0000
ROA not before: Fri 01 Dec 2023 19:13:40 +0000
ROA not after: Mon 01 Dec 2025 19:13:40 +0000
asID: 23470
IP address blocks: 102.129.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3679 (0xe5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 1 19:13:40 2023 GMT
Not After : Dec 1 19:13:40 2025 GMT
Subject: CN=656a3069-598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:ab:eb:ba:11:c4:9a:11:da:e2:0b:f1:a2:
dd:65:b0:db:aa:4c:b5:d8:8a:9b:bf:49:40:75:32:
b6:32:07:93:aa:9d:21:e6:20:62:6d:a2:ff:41:1b:
17:07:62:3d:24:ce:e5:a6:fa:b0:5e:07:1b:0c:f7:
21:30:e4:ac:66:f5:cc:e6:52:c6:f5:17:c6:f7:c9:
f1:ac:aa:9d:61:aa:07:be:ef:79:ec:a4:be:f9:18:
93:97:0b:59:89:e1:f1:61:56:fa:d4:5f:4e:92:b8:
b3:51:30:ad:3e:66:48:7e:5c:38:8a:8b:b0:11:19:
78:68:12:54:e3:c8:0e:c2:42:49:92:9c:6d:48:79:
13:96:bd:64:f5:58:83:01:c5:6d:d8:c6:6b:84:f5:
f9:2b:25:5e:79:41:2f:ef:d8:59:79:b5:45:77:59:
dc:e8:65:ef:81:76:52:09:bb:2b:c9:5a:03:97:a5:
ce:90:6c:e3:9f:bf:2f:78:67:ff:21:c6:af:73:ca:
a2:c2:d1:c5:b2:2f:da:06:a0:a2:8f:15:a7:e3:64:
d5:16:4a:cd:54:04:31:6f:a7:25:24:b5:9a:12:c0:
46:e9:81:c7:fb:1d:b2:06:8a:41:82:fa:06:f0:67:
3b:13:6c:21:5e:90:25:af:ba:39:6e:6d:46:79:be:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:3F:14:02:A3:C3:22:91:DB:B8:B7:67:4D:CE:2D:4F:2A:01:51
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BF22B1A0907D11EEB129367AD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.137.0/24
Signature Algorithm: sha256WithRSAEncryption
39:46:c8:f4:2d:aa:a2:22:f4:ba:88:f7:79:74:bb:f7:30:52:
59:67:4a:af:27:91:43:fe:4e:64:f8:57:fa:cc:18:17:3a:57:
3a:d3:13:5c:62:55:1e:a3:f1:63:58:7c:8c:b0:bc:95:19:2a:
c2:e3:39:39:40:bd:b9:f2:34:f3:51:2e:2e:07:5a:45:e5:d6:
df:b6:0d:87:2c:ba:29:a5:40:7a:22:b1:91:44:98:fc:cf:25:
56:82:4d:5b:e3:24:0e:0f:af:3b:43:b1:39:4d:a9:68:32:30:
a7:57:1a:64:8a:be:c7:48:88:42:0b:2e:66:b8:66:b3:ce:49:
b5:db:f1:35:cb:46:92:d3:ab:1e:fd:96:7a:7c:bc:68:76:1a:
85:8e:91:80:10:77:6c:ea:90:1f:01:4c:a3:14:5d:73:2b:5e:
68:9a:c9:72:80:2f:f9:1c:ea:5d:26:78:0d:f3:1b:f5:b8:ea:
11:c0:c1:b8:dc:26:76:17:05:81:16:00:38:1e:27:fd:cc:01:
e9:30:dd:29:c3:4e:70:6f:55:1b:b9:5d:74:cf:b0:0c:c2:9b:
10:85:f5:26:45:a0:04:27:6f:e8:d8:86:35:7b:9c:a8:a4:a6:
ce:20:08:fd:fe:81:f0:33:05:d1:ca:42:59:b3:a3:42:2b:05:
99:05:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:27 2024 by rpki-client on console-fra.rpki-client.org