Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FAC1E28A0D011EF9F28B894762E951A.roa
File: 0FAC1E28A0D011EF9F28B894762E951A.roa (raw, json)
Hash identifier: SEvaWarM6G5O8h3SBgOsvcgM2c9/veftFk+BTbl6eRM=
Subject key identifier: BB:73:F4:4B:B4:A6:90:FB:FA:AB:ED:C4:F6:3F:7B:2E:B4:BC:03:A2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12B1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FAC1E28A0D011EF9F28B894762E951A.roa
Signing time: Tue 12 Nov 2024 08:28:15 +0000
ROA not before: Tue 12 Nov 2024 08:28:11 +0000
ROA not after: Thu 12 Nov 2026 08:28:11 +0000
asID: 11426
IP address blocks: 102.129.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4785 (0x12b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 12 08:28:11 2024 GMT
Not After : Nov 12 08:28:11 2026 GMT
Subject: CN=6733119f-1885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:7b:39:48:ad:64:c1:0a:d6:54:3c:d3:93:
39:96:5f:36:5d:02:5b:8d:2c:bb:c0:e7:58:a3:3e:
5d:70:47:9e:f1:91:90:f9:73:73:00:d7:e0:98:f2:
74:9c:42:f8:27:2e:ad:ec:31:4f:2e:e1:e9:f9:2e:
c2:1d:98:4c:e3:52:97:0c:b8:f3:4b:c2:26:ff:86:
f8:2b:6e:b1:0e:19:1f:da:85:ec:c2:f8:02:73:99:
da:91:fd:10:7e:2e:7c:c0:41:38:2b:cf:3e:39:08:
a9:f2:86:e6:8b:62:00:ca:d8:d8:c7:66:06:a0:f6:
69:a3:c4:43:8e:88:87:9b:25:e6:c5:34:04:55:b2:
99:0b:1b:cc:e4:fc:b2:58:cd:d1:b6:d3:f9:5a:b7:
e9:07:9c:f1:ca:e7:0b:03:11:33:c1:39:f3:4e:59:
bf:31:85:07:48:b9:f6:d5:3e:43:40:40:cf:b0:62:
09:5b:20:99:ad:82:f8:0b:3a:a4:98:1c:71:20:37:
1b:48:cf:54:a9:ae:af:c2:ca:7a:fe:38:c7:7f:cb:
60:96:cb:97:73:0e:e5:37:99:aa:9c:45:e1:be:2b:
d2:a0:64:e5:68:f6:57:a4:ac:ab:2a:bc:69:00:ae:
1c:3c:6a:32:e3:d0:4d:b4:98:a2:41:9b:4f:87:02:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:F4:4B:B4:A6:90:FB:FA:AB:ED:C4:F6:3F:7B:2E:B4:BC:03:A2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FAC1E28A0D011EF9F28B894762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.179.0/24
Signature Algorithm: sha256WithRSAEncryption
02:91:cf:11:72:9c:00:8d:48:69:12:66:d0:3e:3d:42:02:a4:
83:50:cf:11:69:78:2f:e3:e5:c0:17:db:e3:1d:fa:50:7f:d7:
17:f0:b7:33:47:6b:88:cb:db:8a:ab:8a:83:07:4e:53:4d:37:
90:99:77:49:3a:85:f7:ae:6a:ed:b3:52:12:93:7d:3d:bb:2c:
3f:db:f9:01:c2:24:6a:15:be:93:f9:5d:8e:da:ab:21:cc:5a:
a1:ea:f1:4e:dc:13:5e:f0:2a:80:13:e5:c6:a9:14:42:bd:7f:
2a:da:9d:90:7d:9e:3b:70:33:d5:ab:c5:88:bc:f4:c0:da:38:
06:75:28:ae:95:03:70:44:2c:aa:bd:f7:e1:89:77:db:28:ee:
30:96:5d:57:02:a0:80:94:a9:fc:f2:01:87:80:76:39:a5:3a:
27:89:f8:27:3f:ae:bd:e0:40:8d:88:83:96:ad:64:8c:53:d9:
fd:71:39:84:b6:5a:f3:8c:e9:b6:2e:4d:eb:24:f2:52:2a:04:
43:b5:6d:6f:c1:a6:7f:52:6f:a1:bf:cf:50:27:ec:ab:07:01:
60:70:d7:7d:48:8d:9e:b6:54:e0:c9:75:c6:18:30:7a:0b:73:
3a:b9:5b:91:e0:0e:db:23:20:ca:6a:9b:f8:15:eb:03:b9:4f:
30:33:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org