Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/16FE767C903F11EF8FFE09B4762E951A.roa
File: 16FE767C903F11EF8FFE09B4762E951A.roa (raw, json)
Hash identifier: epG0JvCILT+ZRRDtTknQi9H8kr/7uLb4KvcnXMIA0dg=
Subject key identifier: 35:3F:5E:29:B9:51:50:94:5B:99:B2:FC:4F:8D:21:9D:E7:AB:D0:80
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1265
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/16FE767C903F11EF8FFE09B4762E951A.roa
Signing time: Tue 22 Oct 2024 06:30:12 +0000
ROA not before: Tue 22 Oct 2024 06:30:08 +0000
ROA not after: Thu 22 Oct 2026 06:30:08 +0000
asID: 9009
IP address blocks: 102.129.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4709 (0x1265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 06:30:08 2024 GMT
Not After : Oct 22 06:30:08 2026 GMT
Subject: CN=67174673-200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:b3:3b:68:a1:0c:7d:23:c5:60:ee:0a:e6:
8c:6e:d2:c8:dd:15:0b:4e:d8:24:de:d5:18:5d:8d:
9b:3c:c9:96:bc:a3:02:dc:b1:a6:36:ce:ef:ad:97:
ac:19:18:3e:6e:2d:59:19:26:fc:28:89:c9:b1:c7:
b1:d9:4f:1f:c7:84:5a:ea:4a:f5:19:89:1f:79:a5:
e7:98:72:75:b4:d4:9e:10:b6:40:d3:d4:4d:9a:b1:
1a:6e:e1:fe:ab:32:62:a1:cc:58:6b:83:09:cc:21:
02:b0:f9:0c:b7:af:f2:f6:f8:3b:fe:70:b0:93:dc:
bc:dd:a3:30:f0:e4:20:8e:9e:cb:45:01:30:18:d2:
bc:43:a5:06:4a:16:6d:56:2c:90:ce:f3:e1:8d:1c:
ce:30:9b:71:17:c8:55:af:d3:20:e5:b5:25:22:f9:
b9:bb:07:c4:c8:a8:ed:36:95:53:20:96:9f:35:49:
94:ac:fd:b7:4d:4c:dc:1e:58:f6:6c:a6:b5:2e:8e:
37:7e:bd:3a:c6:5b:30:fe:23:cf:08:24:ab:5c:19:
e8:4c:92:f5:92:21:12:7a:1c:4a:05:4a:00:fa:76:
77:04:57:50:49:6e:33:07:73:d4:8d:09:00:87:9d:
b1:65:26:a3:af:4a:c6:1e:34:18:3e:d8:d8:46:0d:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3F:5E:29:B9:51:50:94:5B:99:B2:FC:4F:8D:21:9D:E7:AB:D0:80
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/16FE767C903F11EF8FFE09B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.156.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a5:44:7e:af:cf:05:08:5d:f9:18:ee:0e:09:97:d0:d1:7a:
2b:78:06:b2:fd:9e:a5:57:9e:c4:fd:5b:9e:fa:2b:ac:36:12:
ed:72:80:26:3b:ee:36:d0:6b:4d:3d:c0:67:e9:8a:ce:10:c3:
6d:d6:ba:40:c6:73:ac:08:33:83:1d:72:56:20:27:f7:d4:91:
0a:34:99:93:fd:26:15:2c:7b:1f:3f:65:a6:79:90:87:50:06:
f7:ad:53:33:49:86:77:62:28:d8:50:f2:a7:5a:62:83:1c:c6:
9b:41:99:fb:22:ca:d8:4b:1f:49:c8:20:9d:c0:7f:70:26:09:
42:9e:96:c3:c6:f8:86:39:86:5b:65:87:8a:c8:ab:f3:3f:a9:
37:8a:f1:14:88:f4:05:22:b1:df:f5:81:cd:cc:f3:8e:60:53:
d2:83:20:37:e8:88:a4:0a:6a:e1:32:fe:08:ac:25:cb:fe:4a:
aa:fb:0e:78:b5:17:f3:03:3b:74:7a:b8:1b:d3:50:d2:29:6e:
bc:dd:be:d7:71:20:f0:d3:94:8f:6b:2f:4c:11:4f:c9:f3:ec:
01:7f:90:b4:59:60:f9:12:79:d1:2b:c9:9d:39:d6:1b:29:f7:
a2:37:cb:cf:64:6d:2d:bc:2f:63:46:45:cf:e0:ef:2e:14:a9:
bb:31:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:57 2024 by rpki-client on console-fra.rpki-client.org