Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/182B210C759711EF82CA6BB9762E951A.roa
File: 182B210C759711EF82CA6BB9762E951A.roa (raw, json)
Hash identifier: h8nK6r3eJmDNbG9HK4jsS0UwjhRktMEk7NnXKyJcBIg=
Subject key identifier: 59:65:DA:77:75:81:BF:32:05:95:EA:C6:18:1A:EF:F8:C0:6A:BA:56
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1208
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/182B210C759711EF82CA6BB9762E951A.roa
Signing time: Wed 18 Sep 2024 08:22:08 +0000
ROA not before: Wed 18 Sep 2024 08:22:04 +0000
ROA not after: Fri 18 Sep 2026 08:22:04 +0000
asID: 397373
IP address blocks: 102.129.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4616 (0x1208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 18 08:22:04 2024 GMT
Not After : Sep 18 08:22:04 2026 GMT
Subject: CN=66ea8db0-c36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:87:ea:95:9e:64:26:f4:d2:a7:be:11:e6:
1d:45:07:a1:ea:29:29:65:c6:1d:93:f9:ff:d1:04:
c1:b0:76:d4:95:58:34:28:33:fb:e1:98:52:0e:41:
54:91:3b:0c:5f:88:dd:4d:7f:8e:71:e9:79:99:db:
01:cc:dd:ac:3e:65:cc:8c:38:f4:e9:c8:b9:6c:eb:
50:87:0c:f0:33:4e:cb:6a:b9:a3:24:0d:cd:86:08:
4d:95:e8:81:0f:ad:8b:b6:c9:23:ee:c2:22:90:b1:
4c:cf:3a:a7:9b:e0:91:62:7f:f4:65:5d:38:ff:ed:
7c:20:65:24:76:64:24:5c:e9:a5:25:47:10:71:53:
44:5f:df:52:ac:57:3c:ba:37:cb:4b:dc:35:61:7a:
d2:a4:8b:f7:c2:da:4c:6e:00:b0:1d:f1:21:b3:16:
cb:03:72:7f:87:3b:cf:49:0d:52:1e:19:70:fb:f3:
7f:fb:75:12:93:c4:e5:62:49:64:33:de:66:0c:30:
53:d5:90:a8:e6:14:c7:36:95:2a:e3:9a:a2:ee:b5:
53:12:05:da:60:5c:8e:5a:b9:7e:e3:28:00:3f:ae:
35:d3:63:c4:e6:cb:6d:4f:6e:be:de:47:a8:8f:d6:
32:a6:c1:f1:23:0f:c9:d3:56:ac:12:c4:53:ae:6f:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:DA:77:75:81:BF:32:05:95:EA:C6:18:1A:EF:F8:C0:6A:BA:56
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/182B210C759711EF82CA6BB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.198.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0c:6c:19:72:7a:5c:0e:14:b0:81:15:25:a5:89:29:70:05:
c8:65:9b:f5:2e:11:b9:67:c1:e6:e8:6a:1a:76:bf:93:9c:a9:
5e:3f:b9:cf:1c:33:fe:5a:15:1a:77:36:4c:b3:dd:0a:06:f2:
ed:1f:8e:fa:74:15:bd:dc:c5:ce:c2:df:89:3e:77:27:76:74:
cd:77:05:3f:74:1d:d8:f4:8d:3b:9c:1e:cb:22:a8:48:0a:ee:
f1:2b:6c:b0:16:50:67:87:00:38:3e:75:a0:d6:9c:53:ab:ad:
e4:02:9f:30:1b:12:89:dc:28:50:c9:56:1a:58:cf:67:db:52:
32:f1:d3:58:88:08:11:f0:34:45:3b:af:0a:16:60:4b:ed:4f:
73:ba:dd:36:c5:31:99:58:bd:b1:d3:71:b7:45:dc:bf:6f:46:
be:2c:5c:a4:b2:81:2d:76:a8:98:55:6d:ed:15:ef:ca:40:90:
3d:fb:9c:4e:9b:46:63:7a:09:fc:e0:26:e5:55:c6:94:55:a7:
69:20:ee:20:88:de:6c:9f:bd:08:18:ee:2e:6c:90:0f:6b:d0:
ad:fa:f2:c7:a3:9d:80:6f:c8:10:0c:a9:56:8d:e2:6b:63:81:
cd:7d:35:6f:63:9d:33:a4:ba:92:61:5c:2a:92:1a:aa:d8:2c:
dc:d7:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:15 2024 by rpki-client on console-fra.rpki-client.org