Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FCC477027E011EFA90E39F37CDC24C2.roa
File: 0FCC477027E011EFA90E39F37CDC24C2.roa (raw, json)
Hash identifier: JPaKwI8nTkWWDkHMtwOVHqbwVs0EQHTYl+2RUgeNyII=
Subject key identifier: 3F:EA:80:62:18:D6:8F:76:AC:3F:72:49:EC:70:64:EB:E4:7A:7F:C2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10DA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FCC477027E011EFA90E39F37CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:47:56 +0000
ROA not before: Tue 11 Jun 2024 10:47:53 +0000
ROA not after: Thu 11 Jun 2026 10:47:53 +0000
asID: 13213
IP address blocks: 102.129.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4314 (0x10da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 11 10:47:53 2024 GMT
Not After : Jun 11 10:47:53 2026 GMT
Subject: CN=66682b5c-fd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:e9:9f:62:91:9d:21:10:f3:be:2c:c4:b0:
b8:d8:b1:e7:33:cb:99:79:e3:71:fd:2c:84:4a:cd:
52:e6:55:ac:4b:42:b3:d1:9f:98:c7:26:35:17:4f:
84:2d:74:e7:f2:d7:54:75:c1:4a:4e:b5:f0:15:52:
c7:d5:8c:83:e6:73:f5:9f:1b:cc:19:5b:91:82:d5:
07:b2:09:5e:e3:12:27:cc:56:31:3a:82:9b:95:44:
01:c9:e0:84:9a:06:1b:d9:36:5c:73:ad:ee:cf:32:
e4:57:b2:b8:39:14:f5:4b:c9:6e:d0:f3:b8:5c:c0:
34:56:ac:0f:c0:6e:24:8e:b3:10:39:c9:78:20:8c:
1a:1a:96:6e:c2:82:6b:cf:ae:5d:e7:9b:b9:3e:13:
a0:7e:93:bc:29:41:66:94:24:a8:6a:d2:a9:bc:8c:
13:14:8a:ce:57:be:68:66:57:a2:80:26:e3:a8:d7:
91:c3:ee:6d:82:d7:42:58:7a:d4:e8:2e:f6:7a:a7:
73:ae:0c:a2:f5:2a:af:77:aa:df:49:dd:6a:86:84:
d7:e2:79:a3:52:ee:b1:78:0f:1b:93:fc:37:93:82:
c2:a7:42:8a:75:96:00:fe:fe:31:20:3b:19:71:0a:
bb:9f:3d:3e:1e:ba:b3:da:d8:cb:b8:d3:5a:90:ad:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:80:62:18:D6:8F:76:AC:3F:72:49:EC:70:64:EB:E4:7A:7F:C2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FCC477027E011EFA90E39F37CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.231.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:03:63:01:38:97:6c:f8:aa:78:0a:6d:e7:f4:d6:d2:55:47:
22:c9:83:55:07:6c:7a:6d:28:34:60:49:d0:e5:02:d0:a3:54:
5b:14:b1:68:14:ee:ae:7e:e9:58:10:1e:91:b1:fd:33:0e:d3:
27:37:ff:eb:fa:62:f4:4d:91:25:89:49:4d:b6:8f:b9:d5:b7:
9f:bd:ce:32:3b:32:62:58:05:e3:e9:9b:42:93:67:99:3d:fc:
20:28:05:9a:22:3e:f8:12:8a:d9:bd:84:6d:f6:91:1f:a5:48:
ab:22:03:36:3c:7a:a0:84:ca:14:67:34:dc:86:22:36:fa:2a:
85:73:a4:c1:c8:df:d4:c6:a8:42:bf:cb:b1:10:89:81:9b:71:
2f:65:52:2a:01:be:7e:c6:bb:21:6c:c7:e6:91:92:bd:5c:69:
ba:8a:0f:b4:6f:d0:31:16:35:92:29:b4:8a:a8:5f:d7:61:32:
a6:cd:5e:ca:8f:1d:17:62:ba:65:92:5c:54:ca:b5:2b:cb:1c:
d6:e6:c2:c5:c8:0c:8d:9a:39:91:7b:49:9f:61:b9:cb:44:9d:
80:1e:89:a0:6a:ef:f5:ff:90:34:0b:7b:d9:c6:b7:ed:9b:00:
63:a0:fe:1a:f8:41:e8:4e:49:86:d8:7a:a6:e9:5f:4e:9d:7b:
28:e0:97:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICENowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA2MTExMDQ3NTNaFw0yNjA2MTExMDQ3NTNaMBgxFjAU
BgNVBAMTDTY2NjgyYjVjLWZkM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9H+mfYpGdIRDzvizEsLjYseczy5l543H9LIRKzVLmVaxLQrPRn5jHJjUX
T4QtdOfy11R1wUpOtfAVUsfVjIPmc/WfG8wZW5GC1QeyCV7jEifMVjE6gpuVRAHJ
4ISaBhvZNlxzre7PMuRXsrg5FPVLyW7Q87hcwDRWrA/AbiSOsxA5yXggjBoalm7C
gmvPrl3nm7k+E6B+k7wpQWaUJKhq0qm8jBMUis5XvmhmV6KAJuOo15HD7m2C10JY
etToLvZ6p3OuDKL1Kq93qt9J3WqGhNfieaNS7rF4DxuT/DeTgsKnQop1lgD+/jEg
OxlxCrufPT4eurPa2Mu401qQrWaBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUP+qA
YhjWj3asP3JJ7HBk6+R6f8IwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzBGQ0M0NzcwMjdFMDExRUZBOTBFMzlGMzdDREMyNEMyLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgecwDQYJKoZIhvcNAQEL
BQADggEBANMDYwE4l2z4qngKbef01tJVRyLJg1UHbHptKDRgSdDlAtCjVFsUsWgU
7q5+6VgQHpGx/TMO0yc3/+v6YvRNkSWJSU22j7nVt5+9zjI7MmJYBePpm0KTZ5k9
/CAoBZoiPvgSitm9hG32kR+lSKsiAzY8eqCEyhRnNNyGIjb6KoVzpMHI39TGqEK/
y7EQiYGbcS9lUioBvn7GuyFsx+aRkr1cabqKD7Rv0DEWNZIptIqoX9dhMqbNXsqP
HRdiumWSXFTKtSvLHNbmwsXIDI2aOZF7SZ9huctEnYAeiaBq7/X/kDQLe9nGt+2b
AGOg/hr4QehOSYbYeqbpX06deyjglzU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:15 2024 by rpki-client on console-fra.rpki-client.org