Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1BEE5122A8A211EF94FC4F73762E951A.roa
File: 1BEE5122A8A211EF94FC4F73762E951A.roa (raw, json)
Hash identifier: Gij/34ZYAXrlW0KIOfuYZpUs9HUkz/PDhUhw6dI/HlA=
Subject key identifier: E7:EE:80:06:37:0A:31:2E:57:43:80:B6:BC:03:93:24:15:65:1D:8F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12F0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1BEE5122A8A211EF94FC4F73762E951A.roa
Signing time: Fri 22 Nov 2024 07:19:28 +0000
ROA not before: Fri 22 Nov 2024 07:19:24 +0000
ROA not after: Sun 22 Nov 2026 07:19:24 +0000
asID: 29802
IP address blocks: 102.129.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4848 (0x12f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Nov 22 07:19:24 2024 GMT
Not After : Nov 22 07:19:24 2026 GMT
Subject: CN=67403080-d0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:7f:9c:59:91:14:50:6f:1b:59:75:cb:d8:
b1:79:42:36:6c:e0:c9:a0:61:6d:88:5f:90:ae:5a:
23:b9:a2:8e:d3:ad:2a:e1:01:06:17:b3:66:f4:a7:
7a:ee:7e:cc:4d:c2:06:74:ef:64:56:db:bf:a9:83:
2b:e0:44:13:d9:9a:a0:88:7b:fd:40:4c:e8:cb:ea:
f4:36:4d:12:3c:7f:fc:95:91:97:73:17:e3:b9:15:
33:e7:21:da:27:5b:23:48:4a:12:c5:45:72:35:46:
40:23:f2:b7:f4:63:2a:57:d6:4a:50:79:0f:3c:75:
97:fb:ed:84:bc:89:b2:8d:b9:02:4f:b1:66:b9:4e:
5d:95:30:5f:2f:70:02:79:35:b4:3f:82:71:f9:13:
fc:7c:5f:8c:2e:61:7e:aa:2f:24:01:b1:8d:41:aa:
61:e7:32:72:78:c7:d8:7e:e9:ce:b4:2a:fe:e1:12:
66:93:26:aa:54:d6:cd:8b:43:5c:81:a9:f7:e6:d6:
05:8e:84:c7:e0:9d:c5:e7:b4:51:2e:71:a0:17:35:
8b:3c:c5:de:93:18:ee:03:b9:95:2d:05:ff:86:ea:
ac:df:5a:f9:42:4f:61:70:3f:84:18:5d:43:c4:26:
5b:f0:c9:7e:e0:3f:8d:13:f6:a2:f1:e3:38:7e:86:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EE:80:06:37:0A:31:2E:57:43:80:B6:BC:03:93:24:15:65:1D:8F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1BEE5122A8A211EF94FC4F73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.178.0/24
Signature Algorithm: sha256WithRSAEncryption
97:30:49:a4:77:bf:9b:72:92:70:33:d7:c3:d8:e9:80:c3:0a:
65:60:be:89:21:e8:a1:78:32:18:d5:58:7f:18:50:35:5f:00:
b0:f4:3b:d1:da:6b:3c:f6:de:d4:88:e7:63:21:5c:6a:57:a2:
93:2d:ad:c8:78:e8:45:10:c2:85:0a:e5:89:3e:06:f5:6c:dd:
67:4f:07:00:46:c8:eb:fe:dd:18:c2:64:9e:43:cb:fe:05:77:
68:07:fe:28:e7:78:94:f8:87:60:87:ab:40:bb:7f:77:c5:cc:
c8:17:a4:05:a7:18:fd:ba:08:ec:56:8a:d7:1d:23:33:2b:0a:
a0:14:1b:81:fe:b6:43:28:9b:23:2d:b7:a0:d7:27:e4:73:eb:
f2:8a:9f:97:39:5f:4f:9a:29:08:04:e5:10:46:02:43:45:36:
82:de:dc:4b:ca:6d:58:f3:07:10:ec:9e:97:8c:f6:e2:1a:83:
ec:02:d4:d1:18:39:2a:96:c2:ed:5c:bc:9b:82:25:01:ae:4f:
2d:ae:ec:db:2b:50:7a:c3:e5:24:7e:57:37:12:52:fa:ce:70:
a5:c6:94:a2:98:33:87:50:05:11:f3:75:8d:ce:dc:ca:da:1b:
08:ea:ec:47:aa:72:a6:a2:e4:25:2b:5a:c1:34:5a:3e:1f:a7:
34:a9:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:50 2025 by rpki-client