Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/12C9DCFA904311EFA8E9874D762E951A.roa
File: 12C9DCFA904311EFA8E9874D762E951A.roa (raw, json)
Hash identifier: /bh3/rcH5Wc8MRc5Wb8cJn++cez2O1URYI4ibgTYlkw=
Subject key identifier: CB:2F:B7:D4:D5:A2:79:EB:C1:49:E3:48:6D:82:0F:BE:45:C3:40:8F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 127A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/12C9DCFA904311EFA8E9874D762E951A.roa
Signing time: Tue 22 Oct 2024 06:58:43 +0000
ROA not before: Tue 22 Oct 2024 06:58:39 +0000
ROA not after: Thu 22 Oct 2026 06:58:39 +0000
asID: 212669
IP address blocks: 102.165.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4730 (0x127a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 06:58:39 2024 GMT
Not After : Oct 22 06:58:39 2026 GMT
Subject: CN=67174d22-a334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:5b:fd:da:7b:ac:1f:ca:88:e6:0a:6e:22:
f9:37:0f:61:af:ec:82:2e:80:30:d9:0d:44:56:f0:
b2:27:bb:48:ba:a9:ac:02:e6:3a:a8:60:93:45:b7:
5b:01:e3:31:d7:a4:1f:89:0e:4c:34:f7:a4:0e:77:
10:51:be:79:53:b0:dd:b1:c5:7d:b2:96:2b:53:a6:
2e:58:f1:62:df:78:a7:a1:67:47:15:1f:a4:48:1b:
8a:a9:92:ab:f4:68:20:65:8a:8b:8c:b3:45:e9:74:
01:04:c2:7e:f3:e7:00:5d:12:f2:1c:3c:dd:42:98:
8f:6a:52:8b:e8:73:aa:0a:da:50:5d:f6:10:22:fe:
86:c5:70:e3:89:cb:72:d6:b3:c2:35:9d:55:e2:43:
ae:14:e3:31:b7:a0:ba:59:e5:88:7e:f8:1b:e5:08:
e6:4e:3e:f6:74:59:dc:08:ab:ee:cc:0b:5a:12:b1:
60:7d:49:97:d5:ea:76:7a:4b:eb:c2:76:7a:c8:90:
cb:ef:90:2b:c5:5f:bb:64:0e:03:ca:ba:db:fd:54:
53:0c:e7:17:42:09:c7:e8:35:c8:2f:4c:41:d9:56:
45:2e:4d:e3:ad:c2:ff:7a:aa:57:1d:e9:82:0f:89:
2f:7e:ca:a0:7c:04:e3:f1:b0:a8:5d:de:b9:a2:5d:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2F:B7:D4:D5:A2:79:EB:C1:49:E3:48:6D:82:0F:BE:45:C3:40:8F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/12C9DCFA904311EFA8E9874D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.39.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8f:05:17:0b:24:72:b0:5e:45:a8:c9:49:01:61:54:09:14:
e7:a9:01:93:03:c4:ed:84:04:6d:0b:5f:93:e0:73:2f:0b:e1:
63:c5:b7:a7:be:a5:cf:80:70:9e:e1:81:b8:8e:51:0a:dd:dc:
4d:2f:6a:99:d0:df:e9:33:97:02:80:e7:e2:b8:62:04:15:f6:
09:bb:27:2c:b1:ff:e6:9b:3f:ef:e6:2d:b0:9f:08:46:f3:eb:
48:d4:0b:7a:b5:a1:90:21:ad:3f:da:ef:19:1b:c4:b0:04:89:
08:4a:c8:10:75:4e:c1:dc:90:19:a3:23:ce:90:18:b0:54:de:
5c:ff:92:a0:06:26:39:9a:cd:9f:df:d2:cc:33:ea:b9:6d:67:
33:6c:40:f5:ee:04:f6:eb:75:08:91:95:40:2c:98:5e:43:7a:
55:36:f3:ee:70:73:4f:06:19:52:61:f8:bb:44:3a:39:26:4e:
e1:c6:42:7f:cd:7b:9f:a6:79:3d:fa:fc:15:95:27:e2:d9:22:
51:4b:1f:a0:bd:4e:3a:8a:6e:63:9e:b3:62:41:2d:52:34:24:
08:30:73:16:28:03:d4:b0:cc:61:0f:ca:c3:17:e4:8d:b8:e6:
e9:d5:0d:5a:79:68:01:84:f4:0e:72:75:34:80:85:30:13:5d:
bf:73:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org