Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/17649410904011EFA44539BA762E951A.roa
File: 17649410904011EFA44539BA762E951A.roa (raw, json)
Hash identifier: NKU7uXTh9huzr9Xea41mFgr3IQeRYHw7IjOFIU4XU8c=
Subject key identifier: 20:AC:64:7B:81:00:71:AD:2C:ED:03:CC:62:1B:D0:B2:47:E0:ED:49
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 126B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/17649410904011EFA44539BA762E951A.roa
Signing time: Tue 22 Oct 2024 06:37:22 +0000
ROA not before: Tue 22 Oct 2024 06:37:18 +0000
ROA not after: Thu 22 Oct 2026 06:37:18 +0000
asID: 212238
IP address blocks: 102.129.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4715 (0x126b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 06:37:18 2024 GMT
Not After : Oct 22 06:37:18 2026 GMT
Subject: CN=67174822-0e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:67:e0:e1:56:ec:7f:04:6f:4f:d2:f3:c0:
58:6e:d0:2b:91:91:c2:da:47:22:0a:b1:48:38:e4:
1b:71:9a:2e:56:14:d0:7f:40:a4:a7:97:be:9b:e4:
6b:be:d6:82:15:90:a9:29:72:89:36:70:6f:37:4f:
e7:5b:6e:46:0f:ca:f0:c9:e2:c6:d6:59:8b:d3:a8:
e0:b3:d5:09:7c:2e:03:60:b3:79:4b:38:c3:4f:80:
4c:5b:10:21:b1:da:31:75:7f:93:b8:53:85:61:52:
ed:49:4e:92:4c:66:ef:a4:cb:8b:55:9c:60:50:0d:
f9:7c:ab:a8:5a:5d:27:9f:d9:2e:20:fe:61:a0:d1:
ba:77:ed:f9:b4:cb:8b:b4:18:33:f8:0f:0e:5e:c5:
6a:d5:ac:92:4b:4c:6b:f4:35:42:93:d3:04:08:30:
a6:0b:3f:fb:8f:fb:16:1b:84:f6:7c:e4:2d:60:61:
d0:ef:7e:eb:c6:f3:61:bb:35:91:e8:bc:15:8b:4f:
58:0f:dd:b3:60:4d:49:0d:dd:d0:fb:00:c4:a8:9e:
7c:c9:20:a1:99:9d:3a:5f:9a:b5:24:7e:c2:b6:36:
9f:9d:99:42:ee:a7:78:58:7c:3d:99:2b:a4:63:64:
b9:82:2c:51:73:8a:ba:10:c1:cb:0a:0e:9c:3b:04:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AC:64:7B:81:00:71:AD:2C:ED:03:CC:62:1B:D0:B2:47:E0:ED:49
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/17649410904011EFA44539BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:32:18:c9:e1:3c:8c:64:18:a7:30:b0:19:f5:a2:00:16:21:
28:70:e6:4e:d7:e3:e7:bf:92:1e:71:50:bc:7c:a7:da:03:0b:
af:b3:70:b2:e9:5c:89:09:5e:22:5d:f5:7d:6e:d5:39:66:77:
9b:2f:ad:a8:96:07:81:06:5a:dd:42:9e:1c:c8:7b:53:ce:3f:
d1:c8:7a:fc:17:3b:38:56:8f:b6:a8:c7:74:09:9d:22:6c:ba:
48:39:14:50:e3:e7:45:d6:3d:c3:7c:e2:bb:db:42:48:40:86:
0a:7e:0b:82:fa:e4:48:fd:be:27:66:90:37:ac:90:fc:c8:c1:
98:23:37:8f:2a:d4:a9:ac:6d:4d:24:93:ea:63:80:25:7d:4c:
ef:de:ee:e8:50:db:bd:90:bd:6c:8f:dc:0e:37:73:ed:47:8d:
28:9f:83:56:63:bc:94:a1:17:41:30:11:db:28:33:2b:51:1b:
17:d0:d0:f7:4c:4e:18:04:3b:5f:43:f9:65:50:93:12:7c:fc:
19:b3:60:6f:a2:0d:fb:ba:e3:69:c9:1b:ab:c5:4e:f3:f1:19:
c7:0e:11:04:eb:54:ae:33:0d:5f:91:f9:5c:81:3e:00:cd:a9:
92:2c:2c:dd:ad:d9:a2:4c:7d:c3:68:14:1c:30:82:a4:03:2a:
f9:af:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:15 2024 by rpki-client on console-fra.rpki-client.org