Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15C38AFC644A11EFA1F75B92762E951A.roa
File: 15C38AFC644A11EFA1F75B92762E951A.roa (raw, json)
Hash identifier: 3AXhviad4XSSwmQGXgGgcNwJCS90XKj1Izo+kR4cxAU=
Subject key identifier: 9B:DE:07:39:54:05:80:5D:42:95:DC:FD:58:3B:63:5A:B7:D6:9C:97
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11D4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15C38AFC644A11EFA1F75B92762E951A.roa
Signing time: Tue 27 Aug 2024 07:58:03 +0000
ROA not before: Tue 27 Aug 2024 07:57:59 +0000
ROA not after: Thu 27 Aug 2026 07:57:59 +0000
asID: 137962
IP address blocks: 102.129.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4564 (0x11d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 27 07:57:59 2024 GMT
Not After : Aug 27 07:57:59 2026 GMT
Subject: CN=66cd870b-e06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9b:c2:18:44:2a:d7:53:73:89:d4:11:1c:cb:
ae:a5:81:dd:6f:89:d7:17:52:ba:4e:89:fb:96:ef:
e9:04:4c:72:30:c8:ac:bb:ca:25:93:17:c6:57:ea:
8c:ae:d2:36:58:42:f5:f7:14:31:fd:33:f3:cf:34:
98:f7:cc:58:bd:dc:78:5f:b8:73:df:e0:a2:73:ef:
46:dc:a5:21:f1:c4:9c:30:53:66:36:39:01:42:56:
26:89:bd:b2:b5:d2:4f:fd:1e:60:23:a9:29:1e:12:
4d:85:0a:4f:05:b3:ce:b0:de:79:2f:ec:18:cc:68:
a5:9a:44:f8:d1:64:95:66:e7:50:b7:47:80:52:67:
64:5a:bd:e9:3e:7f:37:27:dc:39:80:7f:e4:9c:66:
05:ad:0a:aa:85:f5:89:36:cb:83:db:94:37:98:64:
43:c6:3d:85:08:33:b9:fb:97:ad:95:75:94:86:e3:
95:71:82:a4:8e:af:8c:26:e7:18:06:e8:37:32:b0:
87:64:da:0a:cc:e3:60:df:e8:fc:bd:20:20:75:4a:
40:dc:fa:57:88:99:7f:de:92:55:a9:e4:e8:1c:89:
d5:c0:f0:cc:07:a4:84:90:2a:a5:46:53:84:c5:e9:
32:fb:17:af:61:b3:fe:96:db:67:fe:ca:a1:33:39:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:07:39:54:05:80:5D:42:95:DC:FD:58:3B:63:5A:B7:D6:9C:97
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15C38AFC644A11EFA1F75B92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2b:b4:a0:28:7f:6c:4e:20:93:68:f0:13:4b:bc:45:65:d6:
be:4d:2e:33:aa:c3:1c:19:cc:1b:d3:d5:62:f4:d3:30:47:14:
a3:d7:da:4d:cc:46:d4:cb:22:84:89:5e:1a:41:b3:67:25:15:
57:f2:7e:b8:a7:2f:f0:c6:06:61:3d:38:0f:df:a6:cd:a3:0c:
85:66:84:1f:ac:0f:ec:ea:33:9c:0f:ce:8d:28:92:3e:31:ed:
d2:23:bb:0a:64:42:70:40:98:b0:6d:4b:3b:5c:26:7c:06:97:
0d:4a:c4:fc:36:f5:98:65:a6:fa:19:8b:b0:88:06:f3:32:47:
f7:96:19:c0:ac:98:db:5f:9c:b6:fa:04:da:c1:0a:68:0b:7a:
15:1b:63:4e:b2:fb:19:20:5a:12:e0:e7:81:fb:b5:6f:91:dc:
ee:9f:a1:2f:4c:06:31:d6:6b:97:02:98:e1:6f:76:91:4a:48:
ef:b1:ad:04:5e:2e:31:7a:ff:ee:63:2a:b7:6f:7d:0c:04:6b:
96:21:96:9b:a4:0f:f3:60:86:e5:b4:d7:09:64:39:26:cf:b2:
1e:15:c5:d0:0b:1c:17:18:9e:6e:18:d2:bf:37:b0:29:2a:cf:
07:3f:23:07:2e:b2:bc:2e:bc:19:dd:db:6f:f2:1a:d5:a6:f7:
fb:30:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org