Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04207974A7EB11EFB0FAF773762E951A.roa
File: 04207974A7EB11EFB0FAF773762E951A.roa (raw, json)
Hash identifier: 4jZb3MVMSCq0iUWn4lW1Vu6ttsm15048NtcAizHKMbM=
Subject key identifier: 3A:24:64:D7:90:92:02:45:AD:37:FC:65:60:BF:3F:13:24:CC:BB:CE
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12E0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04207974A7EB11EFB0FAF773762E951A.roa
Signing time: Thu 21 Nov 2024 09:28:50 +0000
ROA not before: Thu 21 Nov 2024 09:28:46 +0000
ROA not after: Sat 21 Nov 2026 09:28:46 +0000
asID: 212238
IP address blocks: 102.129.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4832 (0x12e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 21 09:28:46 2024 GMT
Not After : Nov 21 09:28:46 2026 GMT
Subject: CN=673efd52-7dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:64:8a:ed:80:68:08:f2:cf:dd:d8:08:9f:
27:14:b2:95:aa:2a:dd:3e:f3:aa:4d:e0:53:b4:8c:
b6:dc:d1:14:c2:b6:f3:c0:69:cf:1a:6c:53:42:e3:
c7:34:d9:d5:43:23:94:0b:f4:c3:ab:d9:0c:74:93:
54:2e:53:30:e9:c9:d8:0c:b0:0e:94:4a:ac:d3:27:
c2:fe:33:eb:41:2a:e2:f1:a4:78:1a:47:0d:26:5e:
ad:d4:67:cb:a7:ed:3d:6c:62:90:7a:4e:a3:bc:b2:
cc:32:27:0e:42:39:13:75:f7:9a:2a:e2:01:47:8a:
9c:68:0f:45:36:2b:87:b8:91:99:c7:22:2b:43:83:
c7:c2:8e:44:98:81:e0:cd:44:cd:82:50:fa:69:8a:
9c:14:2e:c3:a0:e5:2c:0f:ee:01:c0:98:71:a0:5f:
50:99:8e:a7:a9:7f:4e:34:d6:9a:97:1c:4d:77:77:
9f:1b:d1:6b:14:84:95:2d:5d:53:37:b7:ff:31:c5:
58:35:4d:0f:ea:0d:21:48:7c:13:e8:10:82:22:01:
a6:0b:d6:39:a6:bf:6b:3e:49:3a:da:60:ea:f7:43:
f2:18:73:4a:e4:f2:b7:ab:d0:1f:c6:81:3a:a0:40:
78:3a:83:63:d2:8e:c9:58:9c:a4:d3:18:30:22:45:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:24:64:D7:90:92:02:45:AD:37:FC:65:60:BF:3F:13:24:CC:BB:CE
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04207974A7EB11EFB0FAF773762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.240.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:d0:e7:88:9f:01:30:a0:79:fd:51:1d:47:cf:12:ad:16:aa:
44:b1:f9:9a:07:ab:d5:10:b8:65:c7:fa:88:08:13:3d:fd:c2:
79:f4:2c:89:29:65:93:76:dd:1d:19:2a:a8:64:ae:ec:33:6f:
e2:d4:02:4f:32:9e:e8:8a:a9:fb:75:60:78:c5:c7:58:70:de:
33:6d:7e:a7:ed:a5:69:8a:2a:49:cc:05:24:65:b3:1e:ef:46:
48:b8:82:aa:27:66:c2:5f:3d:e4:8c:da:52:db:cf:54:fe:54:
30:79:87:13:b2:d7:6b:47:a0:4c:93:23:4a:8f:87:54:0e:fa:
59:d9:d5:de:79:58:f4:33:86:32:aa:a1:5e:4b:16:68:9d:d0:
03:e2:22:a6:29:fc:10:e0:06:d2:b0:1d:04:5b:b2:00:d4:de:
96:12:ae:82:9d:9f:7a:b9:87:93:d8:b6:df:f8:60:6c:9e:db:
41:26:49:00:0d:63:f8:25:69:69:fe:17:2c:de:b2:b1:5e:99:
1e:9d:8e:bc:39:5f:c6:bf:40:6e:48:7d:88:ed:f5:c1:6b:94:
94:6b:a9:b0:c3:85:be:5c:5d:57:7e:41:11:89:14:eb:36:80:
74:96:06:46:63:81:f7:58:ff:1f:d2:26:50:d7:2a:40:b6:2b:
b6:ca:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org