Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0B5BBB7A904111EFA28B3342762E951A.roa
File: 0B5BBB7A904111EFA28B3342762E951A.roa (raw, json)
Hash identifier: CkopVZb81u84xB0KWs+qiOpJYNjx7cf2brlmvsj2sdo=
Subject key identifier: E7:E2:C2:34:12:14:DD:90:BB:06:C8:96:03:46:CE:27:E9:2F:DF:BF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1274
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0B5BBB7A904111EFA28B3342762E951A.roa
Signing time: Tue 22 Oct 2024 06:44:11 +0000
ROA not before: Tue 22 Oct 2024 06:44:07 +0000
ROA not after: Thu 22 Oct 2026 06:44:07 +0000
asID: 212238
IP address blocks: 102.129.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4724 (0x1274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 06:44:07 2024 GMT
Not After : Oct 22 06:44:07 2026 GMT
Subject: CN=671749bb-645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:ec:41:7c:fc:49:c7:dc:e9:1a:93:19:ea:
cb:12:cd:97:49:2a:94:9f:88:d7:59:fb:f3:5a:cb:
8d:ba:a5:cc:d8:60:9f:bd:ad:b9:67:45:f0:02:54:
12:27:ed:7d:f5:85:87:0a:88:a0:32:db:cf:39:d9:
93:b8:08:84:eb:d6:41:2c:e2:81:68:02:5f:88:31:
d3:da:bd:c2:e2:e5:b3:12:d9:25:4b:13:a0:6d:dc:
e8:2a:aa:43:3f:37:c5:f2:cd:12:02:50:67:2a:d1:
f9:65:f7:e0:e1:7c:d4:02:97:c8:46:3b:13:27:dc:
e5:66:f4:d7:14:c8:08:0d:24:48:05:3b:7d:fe:ad:
b7:79:d2:f5:41:3e:d9:17:7a:5f:b9:e6:2a:ad:43:
3e:1a:e5:74:95:16:6a:cf:4d:7c:5e:7c:81:4c:c6:
7b:ff:3c:aa:2b:76:e2:73:4e:0a:d9:f8:5e:a7:12:
fc:3b:1c:d2:ba:e8:e9:ec:49:b6:4a:10:c3:66:31:
e4:c7:ab:18:ec:77:26:79:ff:00:37:0b:40:df:2f:
43:06:ed:fb:ba:8e:e9:52:5c:14:0d:14:01:d7:f3:
08:5b:60:cc:29:7e:cd:80:da:3a:cf:ca:5e:a4:b8:
4b:ef:62:5d:4d:74:c4:ee:48:85:69:fb:4e:2b:0a:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:C2:34:12:14:DD:90:BB:06:C8:96:03:46:CE:27:E9:2F:DF:BF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0B5BBB7A904111EFA28B3342762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.154.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:0e:41:3d:b6:be:db:a7:98:88:ac:8b:d0:b7:78:33:a2:dc:
f3:d2:1e:0b:f0:fa:4d:e9:d4:3c:22:12:85:15:32:31:76:cd:
b3:23:4d:70:1f:e8:9b:63:e5:6a:d7:7b:21:09:56:03:7f:84:
93:42:8a:81:25:ec:dd:d3:d4:fc:9f:d4:90:38:f3:ad:98:aa:
0e:52:c9:ab:80:b0:05:b6:17:46:c9:1c:e2:df:50:a8:0f:37:
5d:41:a7:a0:8c:4c:69:44:74:95:f9:78:34:f8:d9:82:46:75:
05:bb:fa:5f:f3:0a:2b:4d:7a:c1:f9:55:2d:ab:31:75:c3:55:
98:ef:7e:8b:0e:34:3d:dd:bb:4a:46:44:ee:98:60:a4:e1:3f:
0f:0f:10:ef:48:da:1e:b3:c3:98:4c:99:2e:ee:bf:65:9d:61:
7a:46:92:3e:a5:7f:fb:0e:9c:78:31:90:a5:56:7c:40:97:14:
5e:64:da:56:f0:6a:85:68:66:60:23:b9:57:e0:46:c1:b6:31:
58:05:0b:fa:b2:9b:2b:ba:89:0c:48:14:31:80:bb:5a:f4:7f:
cb:c0:d6:8b:a7:1f:ab:0f:91:5d:e6:9e:b2:d0:1e:4d:2b:33:
bd:eb:6d:f6:3b:39:e7:bc:db:b8:89:81:94:99:19:cd:25:ce:
96:49:01:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org