Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/02BC63EA465311EEB73C9F7B4AD9E6FC.roa
File: 02BC63EA465311EEB73C9F7B4AD9E6FC.roa (raw, json)
Hash identifier: Vg/0X5Y+6Cvs8byGAElAozqxXxZjVo+M3OfzkIRiDRs=
Subject key identifier: EB:E9:9C:2F:9F:2E:FF:01:E0:34:28:AE:25:3C:0B:2D:AF:59:97:B4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CFA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/02BC63EA465311EEB73C9F7B4AD9E6FC.roa
Signing time: Tue 29 Aug 2023 10:01:24 +0000
ROA not before: Tue 29 Aug 2023 10:01:21 +0000
ROA not after: Sat 30 Aug 2025 10:01:21 +0000
asID: 212238
IP address blocks: 102.129.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3322 (0xcfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 29 10:01:21 2023 GMT
Not After : Aug 30 10:01:21 2025 GMT
Subject: CN=64edc1f4-745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:6a:1f:e4:ad:f5:a7:cd:8c:e2:ee:43:1e:
cd:42:ad:ca:21:d6:a5:34:16:99:64:8e:04:01:1e:
44:13:bd:fa:74:9e:e9:39:f5:d4:76:60:a6:9a:aa:
c5:cf:4a:80:fe:e6:77:ab:45:d9:7d:0f:a9:2e:e7:
6d:98:b0:be:10:7e:00:11:3e:78:7c:81:68:72:62:
8c:50:15:50:85:8d:8a:58:8f:f8:86:a1:e9:b1:a0:
a8:c3:bb:14:ec:20:bf:50:a5:eb:74:b8:2d:0b:42:
7d:37:f4:76:41:7e:b2:8c:6a:d7:78:8b:0d:20:d9:
ac:60:6d:b0:5c:67:83:2a:c2:71:b5:e5:05:56:56:
fe:23:c3:71:05:47:0a:be:3d:d1:f6:38:df:c8:47:
b3:c1:62:8a:01:a9:95:ea:a4:bb:22:59:cf:f5:e1:
dd:a6:82:7f:5d:aa:45:e1:43:5a:e4:f0:c1:ed:b9:
7b:87:51:c4:f3:72:9b:8a:44:69:f5:9c:a3:ec:75:
c6:f4:7d:bd:c3:c6:ef:e0:32:58:44:58:5a:7f:1c:
71:e3:c6:8f:8c:c3:f3:26:0e:14:ae:42:b5:7e:dc:
f5:4e:a0:05:f2:f6:77:9f:02:0a:89:b6:29:cf:34:
78:c1:32:4f:bd:f9:b1:cd:0d:c1:71:75:3d:f5:7a:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:9C:2F:9F:2E:FF:01:E0:34:28:AE:25:3C:0B:2D:AF:59:97:B4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/02BC63EA465311EEB73C9F7B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.161.0/24
Signature Algorithm: sha256WithRSAEncryption
34:83:89:0c:bb:85:23:8a:0b:ae:2a:69:64:59:d9:7d:17:d1:
58:57:b2:ec:57:a9:f2:ed:77:35:f0:a7:c4:b6:e3:74:61:a6:
fc:ac:92:24:77:52:1a:cf:8a:ab:b7:e3:05:b4:8f:9d:7e:90:
5b:c4:72:4b:a0:bb:a0:94:26:02:84:ae:4d:07:93:d6:a3:2c:
25:2e:42:c3:ae:91:12:ea:29:a4:63:fa:09:c8:e2:40:52:95:
5e:d6:73:99:79:84:c9:22:c7:ef:8c:3c:e1:53:04:4f:fe:90:
7f:2a:c5:9e:c2:4e:06:98:9c:65:d6:52:5e:ae:5e:a8:01:cf:
fc:29:d3:f9:1c:a8:35:89:cf:cc:d4:03:a1:69:b8:77:2a:d5:
a5:e5:0c:2f:fb:fa:88:bc:f1:e4:81:df:a7:34:18:90:b7:e7:
05:74:dc:34:cb:75:49:21:00:40:b4:94:94:e8:7c:42:97:74:
e6:9e:ea:e6:7c:40:ee:ca:5f:99:66:2d:a9:98:dc:91:3e:46:
ab:7f:2a:cf:2e:89:99:81:79:a1:2f:76:af:3b:72:df:34:1c:
b7:38:19:88:ad:19:9c:95:2c:b6:ef:b8:fa:4f:7c:2e:c5:65:
5a:b9:c9:aa:95:0f:b9:bd:2f:67:30:14:dd:5f:23:1e:47:7b:
be:ed:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:11 2024 by rpki-client on console-ams.rpki-client.org