Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5182AF0564F11EE9C1F336D4AD9E6FC.roa
File: F5182AF0564F11EE9C1F336D4AD9E6FC.roa (raw, json)
Hash identifier: qZihLJgXwHf98SKoEdPRyIQxrHEtuLeSu+sIgBh2wJU=
Subject key identifier: 48:3D:45:0A:11:ED:28:6F:49:D5:11:58:62:D1:0B:E6:61:3F:E1:F5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D6D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5182AF0564F11EE9C1F336D4AD9E6FC.roa
Signing time: Mon 18 Sep 2023 18:19:51 +0000
ROA not before: Mon 18 Sep 2023 18:19:48 +0000
ROA not after: Sat 20 Sep 2025 18:19:48 +0000
asID: 8100
IP address blocks: 102.129.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3437 (0xd6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 18 18:19:48 2023 GMT
Not After : Sep 20 18:19:48 2025 GMT
Subject: CN=650894c7-225e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:9d:6b:74:0d:2e:3e:84:b0:a7:33:01:93:
bb:b3:9e:04:ed:ee:eb:e0:ab:c2:de:36:b4:11:b2:
82:5a:d5:a5:71:1e:fd:3f:e5:4d:33:51:b4:82:d7:
1a:d2:cc:90:dd:96:6f:10:2a:b3:39:43:86:32:4b:
98:6a:be:9d:ac:d9:80:93:8f:5a:82:46:5d:3a:aa:
cf:a0:70:71:de:6e:b8:54:bb:0d:9e:0a:eb:d6:df:
6f:81:4a:34:af:a7:73:87:7c:7c:ae:75:fb:81:18:
33:e0:cf:ad:8a:95:d3:31:3c:64:55:48:45:f2:e2:
e7:41:79:4c:52:2b:07:d0:0a:5b:b9:df:a5:23:fb:
ad:e5:0b:c1:61:ad:aa:01:a5:85:2d:09:df:cf:64:
23:ff:f7:10:29:2f:65:1e:e5:dc:fa:37:e9:0e:6f:
de:11:ed:ab:56:29:bb:44:ce:9b:fa:fa:91:2a:95:
65:97:ee:f4:4f:19:5f:59:c6:31:c2:f1:b9:b0:26:
40:ca:bf:50:d6:cc:11:5f:a0:dc:07:32:b2:80:4b:
f2:25:ca:31:d7:7a:1d:9e:27:24:0d:95:5f:74:7d:
51:c4:b3:c4:f6:bb:76:2d:e0:e3:49:fc:aa:c3:03:
a1:06:df:da:22:86:0c:85:1d:9c:de:12:f6:8c:94:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3D:45:0A:11:ED:28:6F:49:D5:11:58:62:D1:0B:E6:61:3F:E1:F5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5182AF0564F11EE9C1F336D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:4c:dc:1b:36:fd:ae:28:21:a8:50:6d:b7:34:52:fb:38:3e:
73:1b:d7:07:7f:c4:34:97:d0:ec:eb:4a:90:9b:71:34:37:61:
e1:79:bf:c7:94:4c:b7:cb:0d:7e:79:f9:d2:62:69:3b:9d:3b:
60:a7:be:1e:88:36:6e:f4:a9:8c:02:52:c8:76:53:2e:c8:96:
97:2d:00:50:a6:51:cf:6a:94:76:b4:b4:8f:8a:4d:1e:ad:7e:
bb:0e:ca:9e:fa:2f:46:27:d1:46:d2:d6:63:5d:c2:85:37:ee:
ef:b7:54:24:26:b5:7d:ab:4f:5e:f9:c4:0b:34:59:aa:ec:9b:
71:40:b9:61:24:c1:e6:8f:63:37:0f:b9:5b:55:0c:ac:2a:78:
d8:b1:6f:d2:6d:02:f2:ed:50:e6:d8:08:7a:d5:4a:27:cc:47:
58:d6:72:a2:01:83:4d:b9:35:46:fa:80:5a:19:3d:bf:b0:f5:
7d:dd:a1:78:2c:25:56:f2:33:c4:53:b2:2d:70:27:0f:7c:d2:
78:18:f3:45:4f:a6:01:5a:d7:bd:e7:b3:55:7f:a0:bf:f3:26:
c0:91:b6:66:a5:11:8e:b5:6f:68:5b:ac:3b:da:07:98:6b:56:
4e:07:5b:60:a5:34:34:f7:37:ef:11:48:7f:4d:52:09:85:a8:
37:05:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:50 2024 by rpki-client on console-ams.rpki-client.org